Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/f964d423c598c188234e7239130e99901d8792d5.roa
File:                     f964d423c598c188234e7239130e99901d8792d5.roa (raw, json)
Hash identifier:          M2fA+RoHbxm8y5L88qXuVIpfSqVt2U05t+77vP2/fWY=
Subject key identifier:   13:F1:50:20:BD:23:CB:06:51:20:A6:52:63:77:90:08:49:07:8C:E8
Certificate issuer:       /CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
Certificate serial:       173B6C
Authority key identifier: 86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/f964d423c598c188234e7239130e99901d8792d5.roa
Signing time:             Mon 18 Jul 2022 19:42:04 +0000
ROA not before:           Mon 28 Jun 2021 03:00:00 +0000
ROA not after:            Wed 28 Jun 2023 03:00:00 +0000
asID:                     266668
IP address blocks:        45.228.190.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1522540 (0x173b6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
        Validity
            Not Before: Jun 28 03:00:00 2021 GMT
            Not After : Jun 28 03:00:00 2023 GMT
        Subject: CN=f964d423c598c188234e7239130e99901d8792d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dc:2c:29:33:fd:24:84:c4:be:3f:1c:ab:2e:
                    b7:f8:89:9d:61:60:19:f4:55:5c:50:76:a0:a8:4c:
                    00:39:26:fb:e1:7b:e6:eb:93:b9:66:f5:4c:b4:c0:
                    0a:c1:8a:ca:79:2a:fa:ac:d5:f4:ac:3c:5b:17:32:
                    f7:68:e3:30:34:7d:d8:0d:73:9c:ac:33:5b:01:6b:
                    87:42:eb:93:27:c5:e0:b3:d2:57:a1:d7:7b:36:68:
                    5d:2f:0d:72:27:82:b6:02:e7:52:72:65:0c:49:64:
                    11:24:1d:ce:bd:e9:a9:64:1f:f1:c1:9a:94:88:7c:
                    b1:b8:ed:26:1a:91:ec:5e:b1:ab:f4:ff:d7:48:6b:
                    fc:12:95:b8:07:ee:b1:05:20:45:25:bd:46:58:7a:
                    e3:93:a0:41:65:21:67:3c:a5:25:57:6b:64:e6:f5:
                    59:1c:7c:05:b3:e6:a0:88:92:b0:23:bc:91:f7:7c:
                    ac:3d:70:1b:8b:87:34:52:79:af:48:d0:59:4b:2a:
                    dc:cb:ee:ef:c8:72:75:98:25:82:90:d8:20:b4:e6:
                    11:ef:56:c1:1b:a0:04:23:a6:52:ca:94:0f:1d:3c:
                    6e:d9:9f:4c:e6:4d:1a:17:d0:56:b3:10:4e:5b:92:
                    1d:75:c4:43:67:80:11:e7:e0:97:ff:1f:42:f6:2b:
                    c3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F1:50:20:BD:23:CB:06:51:20:A6:52:63:77:90:08:49:07:8C:E8
            X509v3 Authority Key Identifier:
                keyid:86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/f964d423c598c188234e7239130e99901d8792d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:f7:c8:10:4e:31:20:94:b5:96:3e:d5:5a:41:15:17:86:fe:
         61:ba:4b:32:49:03:ea:4e:a7:c2:65:e2:ee:5c:c3:a1:b9:d1:
         4e:2f:e9:ef:7c:0b:47:44:be:19:f0:1a:bf:79:fc:8d:e2:ef:
         7f:78:01:f0:24:32:d3:7d:d6:42:d1:dc:9b:a8:f3:1e:d4:1c:
         42:54:14:bf:4d:d2:cb:00:70:16:70:ca:56:f1:4b:aa:ce:ea:
         7d:10:29:19:b2:9b:61:5b:b0:0e:36:5e:8b:37:ae:21:f9:5a:
         bc:19:0d:61:22:4d:ca:73:c0:2d:64:27:bb:1f:f7:fc:fb:8e:
         22:56:08:01:10:b7:00:6f:15:a6:ca:6a:ba:4e:5e:15:c1:27:
         83:ed:d8:39:59:70:be:db:c2:01:5e:de:a0:19:34:96:36:c3:
         6d:5c:67:2b:19:4c:33:38:43:ee:91:e6:2b:88:4c:0a:17:5f:
         c3:ca:68:c0:5d:da:66:78:a3:48:ba:57:d0:ff:21:1f:d1:e2:
         d7:0b:d9:ff:2a:6c:20:7f:a4:87:41:71:a1:2f:0f:17:75:c7:
         4f:46:be:de:a0:43:0d:04:eb:e8:8c:49:65:f9:01:b7:95:e0:
         e9:cc:c2:ad:75:b0:a7:45:37:b5:18:8b:43:bb:4a:32:e3:fa:
         ff:b6:4a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----