Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/e2dce8e9b2163eb1628ea01677406bf829feb4e6.roa
File:                     e2dce8e9b2163eb1628ea01677406bf829feb4e6.roa (raw, json)
Hash identifier:          aWytdD2YKbA7At5DQ5wEVdrFnrm11AYg8Y9zr4rj43M=
Subject key identifier:   BB:97:3B:64:B1:5D:FC:DA:1C:B7:5C:01:A0:27:35:17:7A:04:4E:62
Certificate issuer:       /CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
Certificate serial:       2012E4
Authority key identifier: 86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/e2dce8e9b2163eb1628ea01677406bf829feb4e6.roa
Signing time:             Tue 27 Jun 2023 08:30:02 +0000
ROA not before:           Mon 26 Jun 2023 08:30:02 +0000
ROA not after:            Wed 25 Jun 2025 08:30:02 +0000
asID:                     266668
IP address blocks:        45.228.190.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2101988 (0x2012e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
        Validity
            Not Before: Jun 26 08:30:02 2023 GMT
            Not After : Jun 25 08:30:02 2025 GMT
        Subject: CN=e2dce8e9b2163eb1628ea01677406bf829feb4e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f9:da:c1:2f:44:41:34:ce:df:72:e1:de:54:
                    45:20:b6:ba:0f:58:aa:5c:ac:b5:3b:c2:0f:a0:c0:
                    ff:8c:0d:bd:d9:40:23:ae:6d:fb:d4:0e:a2:0d:80:
                    b1:c8:b8:ee:c4:cf:1f:eb:c8:d2:47:5f:dc:21:a0:
                    67:19:89:13:55:03:36:b5:71:82:b0:6b:7d:05:54:
                    12:a0:24:ca:73:f1:fa:a1:4f:8f:87:e7:bb:42:ad:
                    be:da:ea:9c:ba:ad:a0:5d:62:fc:56:8c:ce:d2:b8:
                    6c:c2:55:59:f8:6e:84:aa:00:76:5c:95:51:f1:ee:
                    db:10:d1:d2:71:f0:a7:d9:a5:ac:2f:35:ab:3d:98:
                    da:c4:8f:65:b0:52:10:90:c9:69:64:4c:56:a5:34:
                    0f:38:91:16:26:94:14:ce:2d:09:00:4e:a4:6b:b3:
                    c7:1d:b6:41:61:49:ad:c4:5e:5f:c3:30:55:89:1d:
                    bf:cc:f3:a0:a6:d3:4a:d6:b8:03:a2:53:fa:25:28:
                    cf:9d:03:a2:f9:54:b6:ae:ca:54:0e:96:cf:8f:e3:
                    d9:f8:9d:6d:13:07:ee:ff:77:f4:e5:05:59:f1:b4:
                    e1:91:18:78:a4:4f:78:bc:e1:cf:bf:d7:e4:5d:d9:
                    dd:e3:58:fe:fd:29:1b:6d:5b:c3:04:14:68:3f:47:
                    99:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:97:3B:64:B1:5D:FC:DA:1C:B7:5C:01:A0:27:35:17:7A:04:4E:62
            X509v3 Authority Key Identifier:
                keyid:86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/e2dce8e9b2163eb1628ea01677406bf829feb4e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:3b:81:b9:a8:14:70:90:9d:cc:ba:10:e4:85:14:35:13:f1:
         de:e3:89:68:d0:ec:8b:45:53:19:d4:a7:75:13:a2:95:ac:c4:
         18:bb:98:54:58:06:5e:f3:f7:e8:3d:f3:f2:ba:2b:4f:fc:cc:
         3d:4c:c0:31:23:28:f4:02:4c:de:4b:98:e6:76:49:cf:5d:e5:
         b0:cd:ff:a1:9b:7e:b6:75:73:66:6b:f9:d3:1a:b4:10:72:ea:
         80:5f:38:ee:aa:35:da:6f:47:9e:8b:80:9a:bd:96:58:f9:64:
         8f:b5:12:11:9c:a1:28:74:32:37:41:d3:97:f5:a0:16:4d:11:
         71:4c:b0:58:c5:1b:b5:80:b9:6b:a1:4d:34:09:a8:82:c1:6e:
         8d:1d:b4:00:eb:8c:50:58:67:cc:0b:f5:54:8d:7a:92:47:24:
         73:5d:d9:80:ea:b2:5a:36:c9:69:9d:11:86:43:62:3a:2a:40:
         ff:e9:63:2b:2d:05:b4:fe:a5:65:c5:ed:8a:cf:92:cb:fc:79:
         e8:d6:95:fe:60:72:92:7d:0e:62:59:e2:66:24:3a:08:54:5a:
         a5:29:92:ac:dc:d7:bd:6a:5f:99:dc:e4:2f:9e:5b:90:7a:1d:
         1f:a3:19:95:70:08:df:89:f2:0e:c6:cd:c4:c3:fe:ac:df:97:
         85:d4:ce:77
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIBLkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNi
ZTdkMmI4M2MzNGEwZGQ0MDNjOTI2ODlhZWRkNTdmMGExODJiNWQwHhcNMjMwNjI2
MDgzMDAyWhcNMjUwNjI1MDgzMDAyWjAzMTEwLwYDVQQDEyhlMmRjZThlOWIyMTYz
ZWIxNjI4ZWEwMTY3NzQwNmJmODI5ZmViNGU2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApvnawS9EQTTO33Lh3lRFILa6D1iqXKy1O8IPoMD/jA292UAj
rm371A6iDYCxyLjuxM8f68jSR1/cIaBnGYkTVQM2tXGCsGt9BVQSoCTKc/H6oU+P
h+e7Qq2+2uqcuq2gXWL8VozO0rhswlVZ+G6EqgB2XJVR8e7bENHScfCn2aWsLzWr
PZjaxI9lsFIQkMlpZExWpTQPOJEWJpQUzi0JAE6ka7PHHbZBYUmtxF5fwzBViR2/
zPOgptNK1rgDolP6JSjPnQOi+VS2rspUDpbPj+PZ+J1tEwfu/3f05QVZ8bThkRh4
pE94vOHPv9fkXdnd41j+/SkbbVvDBBRoP0eZ1QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLuXO2SxXfzaHLdcAaAnNRd6BE5iMB8GA1UdIwQYMBaAFIbTPyJiq9TZ5n0M
vDP7cvYdzc0tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2JlN2Qy
YjgzYzM0YTBkZDQwM2M5MjY4OWFlZGQ1N2YwYTE4MmI1ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjFkMWE4ZmQtNGZmZC00ODkxLWI5MTEtYjIzYzYz
NzRmOTFkL2UyZGNlOGU5YjIxNjNlYjE2MjhlYTAxNjc3NDA2YmY4MjlmZWI0ZTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iMWQxYThmZC00ZmZkLTQ4OTEtYjkxMS1iMjNj
NjM3NGY5MWQvY2JlN2QyYjgzYzM0YTBkZDQwM2M5MjY4OWFlZGQ1N2YwYTE4MmI1
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAS3kvjANBgkqhkiG9w0BAQsFAAOCAQEAjDuBuagUcJCdzLoQ
5IUUNRPx3uOJaNDsi0VTGdSndROilazEGLuYVFgGXvP36D3z8rorT/zMPUzAMSMo
9AJM3kuY5nZJz13lsM3/oZt+tnVzZmv50xq0EHLqgF847qo12m9HnouAmr2WWPlk
j7USEZyhKHQyN0HTl/WgFk0RcUywWMUbtYC5a6FNNAmogsFujR20AOuMUFhnzAv1
VI16kkckc13ZgOqyWjbJaZ0RhkNiOipA/+ljKy0FtP6lZcXtis+Sy/x56NaV/mBy
kn0OYlniZiQ6CFRapSmSrNzXvWpfmdzkL55bkHodH6MZlXAI34nyDsbNxMP+rN+X
hdTOdw==
-----END CERTIFICATE-----