Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b59dd58f-489d-42cf-8153-4583fa0ab617/cbe2c5c2f353701563981f59a39aa335b1e1cf40.roa
File:                     cbe2c5c2f353701563981f59a39aa335b1e1cf40.roa (raw, json)
Hash identifier:          idfI1LfDFkYhAHkAw0RMX5UfD9iucRIsUloU/zUk7SM=
Subject key identifier:   CF:D1:33:5F:F5:4E:47:B3:B8:BA:4F:E3:15:0A:44:96:00:AF:97:6C
Certificate issuer:       /CN=349196e5906873d34fd0c8ce899971e00093557a
Certificate serial:       EAD0
Authority key identifier: 91:D7:0E:F8:7D:9A:07:52:D9:46:60:B0:C1:27:3C:50:48:57:6F:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/349196e5906873d34fd0c8ce899971e00093557a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b59dd58f-489d-42cf-8153-4583fa0ab617/cbe2c5c2f353701563981f59a39aa335b1e1cf40.roa
Signing time:             Thu 28 Oct 2021 12:47:25 +0000
ROA not before:           Thu 28 Oct 2021 03:00:00 +0000
ROA not after:            Sat 28 Oct 2023 03:00:00 +0000
asID:                     265702
IP address blocks:        45.5.148.0/22 maxlen: 24
                          2803:99c0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60112 (0xead0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349196e5906873d34fd0c8ce899971e00093557a
        Validity
            Not Before: Oct 28 03:00:00 2021 GMT
            Not After : Oct 28 03:00:00 2023 GMT
        Subject: CN=cbe2c5c2f353701563981f59a39aa335b1e1cf40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ae:29:d4:43:87:0c:95:5e:5e:34:6d:74:c2:
                    a5:c2:ce:b1:9f:4c:b9:61:d5:cc:46:af:b5:f9:15:
                    74:1e:93:65:1c:7d:06:24:fb:5d:bf:3e:7a:8e:03:
                    15:6f:a4:01:f5:4b:f0:47:3d:1e:bf:9d:3a:45:bc:
                    7b:6e:58:5a:de:03:91:f3:a7:f6:4d:ca:5c:44:28:
                    ad:a1:c1:1e:c6:bc:e8:fe:ac:a0:0a:85:c0:5c:29:
                    6f:64:90:24:12:46:d7:7f:56:35:3f:c7:d9:c6:de:
                    15:d9:32:9a:02:76:1d:6d:75:fc:11:a1:5b:64:3b:
                    a9:a1:5d:97:40:64:8c:ea:e6:57:c3:56:dc:fc:52:
                    e7:f5:0e:66:d8:1f:8f:e9:c9:61:c0:19:b3:25:68:
                    21:c6:99:dd:fd:de:4b:be:f3:72:5c:3f:f4:3f:d5:
                    28:c3:82:15:78:a3:0a:ac:0c:43:a6:7b:df:54:08:
                    2e:eb:3d:45:7d:59:73:d3:a7:b5:76:4c:b0:34:b8:
                    a7:05:9a:17:2c:0f:ac:3f:d2:0f:6e:80:aa:5b:ae:
                    07:57:1f:42:fc:56:88:30:83:a0:ef:51:f6:e0:10:
                    0e:38:9b:a8:5f:25:b5:c0:b9:7e:a1:9f:3a:62:47:
                    e7:a0:e0:54:a3:34:40:e0:f3:ce:dc:5d:15:6a:5e:
                    4e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D1:33:5F:F5:4E:47:B3:B8:BA:4F:E3:15:0A:44:96:00:AF:97:6C
            X509v3 Authority Key Identifier:
                keyid:91:D7:0E:F8:7D:9A:07:52:D9:46:60:B0:C1:27:3C:50:48:57:6F:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/349196e5906873d34fd0c8ce899971e00093557a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b59dd58f-489d-42cf-8153-4583fa0ab617/cbe2c5c2f353701563981f59a39aa335b1e1cf40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b59dd58f-489d-42cf-8153-4583fa0ab617/349196e5906873d34fd0c8ce899971e00093557a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.148.0/22
                IPv6:
                  2803:99c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:45:2a:d2:a7:26:be:5d:2d:98:e9:1a:19:f2:94:e7:b9:86:
         55:40:da:bb:71:b5:78:06:26:5c:41:40:7d:47:19:05:57:3b:
         80:95:45:84:05:a5:53:a9:96:c1:62:e9:50:98:4a:a9:68:1c:
         2f:28:fd:07:d4:dc:75:b3:c7:d1:77:fb:16:75:08:ea:f4:39:
         6f:c6:ec:01:93:fc:31:69:19:1b:15:06:3e:92:d6:dd:fb:02:
         c0:fe:4f:e8:ad:6d:37:bc:3d:03:46:cf:56:3c:9a:85:d2:75:
         97:65:d6:ac:54:4d:91:1a:f2:9b:9c:87:5f:5b:0c:07:0e:6f:
         57:b0:57:9f:6e:b9:24:37:c7:1c:87:35:86:bf:f0:f5:89:e7:
         5b:10:20:57:fc:d4:5f:50:68:44:b7:e3:d7:51:d5:43:1b:2f:
         cb:69:06:86:c4:77:0b:7e:a3:f7:49:5b:83:76:ad:5a:b9:a8:
         d5:04:ce:18:09:ff:9b:f4:15:fb:7c:3d:5a:ff:d0:4e:c8:8e:
         f6:ce:8a:b9:26:52:f7:98:85:bd:32:3c:ce:fe:8d:c2:f5:ea:
         d1:ab:83:fb:c8:4e:83:c2:2b:e2:53:f9:96:ce:69:11:3f:af:
         a0:f1:b9:b7:a3:a9:9f:e0:6b:85:23:91:42:a1:d1:dd:69:42:
         8c:1e:22:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----