Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/4ab25900d7b2ab0c90aa3baea5ba526b9e6a8651.roa
File:                     4ab25900d7b2ab0c90aa3baea5ba526b9e6a8651.roa (raw, json)
Hash identifier:          0Ys7ePNUvXQo1x+XCi6kPk7XYctNiMrMFBMi7Hhzibs=
Subject key identifier:   55:B4:B1:66:61:F8:6A:FD:B5:42:EE:99:49:27:83:9C:1C:33:70:DF
Certificate issuer:       /CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
Certificate serial:       1D8882
Authority key identifier: 86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/4ab25900d7b2ab0c90aa3baea5ba526b9e6a8651.roa
Signing time:             Thu 23 Mar 2023 08:30:30 +0000
ROA not before:           Wed 22 Mar 2023 08:30:30 +0000
ROA not after:            Fri 21 Mar 2025 08:30:30 +0000
asID:                     266668
IP address blocks:        45.228.188.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1935490 (0x1d8882)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
        Validity
            Not Before: Mar 22 08:30:30 2023 GMT
            Not After : Mar 21 08:30:30 2025 GMT
        Subject: CN=4ab25900d7b2ab0c90aa3baea5ba526b9e6a8651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:95:b7:c9:a2:1c:35:c1:66:64:05:ba:30:f1:
                    4a:25:07:18:7d:c9:cd:91:24:ba:6d:20:2e:f2:b5:
                    6e:f8:43:eb:59:b9:33:cc:56:dd:3f:bb:ee:f7:e4:
                    b6:e1:4b:01:9f:63:4a:48:81:1c:22:c4:22:16:10:
                    2c:81:0d:7e:63:af:9d:af:52:85:5c:ab:d4:ff:22:
                    29:1d:79:72:d6:65:23:82:26:39:ec:9f:b1:c6:05:
                    ef:80:41:59:d4:63:71:9e:9f:b3:25:31:dd:49:23:
                    c6:06:39:70:63:5f:9f:4c:64:a6:64:64:d3:4e:c7:
                    80:19:c2:fc:69:5f:a3:ca:5d:31:f4:d4:99:c4:0f:
                    c4:67:03:84:e4:4a:88:b1:f0:41:f4:05:6d:a8:b6:
                    3a:63:21:e2:05:c8:e7:b0:a7:2d:b2:6d:b6:0b:9e:
                    c6:75:b6:3d:58:bc:de:d3:38:c2:1c:72:31:ce:29:
                    78:68:72:70:21:25:a6:93:16:8e:24:81:5d:78:6c:
                    30:23:02:d3:db:6c:b7:5e:4a:41:ba:85:47:bc:1e:
                    74:05:04:8e:48:d9:cf:b1:5e:57:71:7d:0b:9d:2d:
                    61:40:23:94:65:3b:5b:57:c7:42:09:94:31:c6:43:
                    c6:2c:ef:46:bd:e6:6f:76:b2:6b:39:08:60:25:b4:
                    61:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B4:B1:66:61:F8:6A:FD:B5:42:EE:99:49:27:83:9C:1C:33:70:DF
            X509v3 Authority Key Identifier:
                keyid:86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/4ab25900d7b2ab0c90aa3baea5ba526b9e6a8651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:3f:b9:54:54:d9:3f:68:85:dd:1f:7c:e7:69:b4:8d:25:a6:
         c8:6e:c3:03:8a:c4:91:d6:05:2f:f3:70:a6:0d:89:83:4d:5c:
         5a:4d:04:00:fa:f0:ab:5e:4a:49:a8:d0:2a:9b:65:a4:5b:27:
         06:20:50:54:eb:40:89:3e:33:2c:36:60:f0:af:b0:e6:2e:09:
         5d:5b:b4:d8:cf:1e:95:bf:49:86:c1:9a:a5:a1:7a:e5:de:a1:
         8b:21:72:60:d4:8a:68:45:7d:e4:a4:b4:82:b6:37:c6:c8:27:
         48:a6:38:db:c3:6e:a0:b3:3a:10:7c:ca:d8:8a:c9:2e:93:91:
         bb:73:96:e3:e2:d3:87:cf:ad:6f:65:39:33:61:51:26:19:21:
         22:fd:e2:52:5a:d9:6c:7f:9f:04:ac:7e:56:82:e3:63:cb:28:
         af:a7:24:9e:72:70:eb:ca:56:6a:c6:ca:40:95:73:17:a8:eb:
         14:fe:74:b7:d7:6f:6a:11:82:6b:ef:68:4f:e3:fc:37:b2:a6:
         a6:68:c9:57:fc:88:c9:c1:48:55:a3:55:d7:5c:96:e0:e5:bf:
         91:62:0a:ea:f4:60:fa:b1:20:b1:0e:13:07:48:5c:51:87:fa:
         9e:80:ff:16:02:4f:02:d7:6b:a8:e8:b2:bb:a2:b0:2a:b0:ed:
         36:8a:74:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----