Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b69f6dfd-bc4d-45cc-8354-7802abb6454d/35e47167a4ee1f92c8755d9c88e793847ed1487b.roa
File:                     35e47167a4ee1f92c8755d9c88e793847ed1487b.roa (raw, json)
Hash identifier:          CiGW4p0oKsES9wt8TFtT81gHTvghSZBF/vUD8opzang=
Subject key identifier:   2E:7B:EC:60:78:47:47:75:07:A2:8E:6B:97:44:B3:52:92:07:78:70
Certificate issuer:       /CN=92f99288a81ebe400af2542cf1335efd001a7734
Certificate serial:       0D235D
Authority key identifier: 48:EB:CE:32:EB:E8:D3:56:71:5F:74:23:E9:91:02:5E:16:3B:39:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92f99288a81ebe400af2542cf1335efd001a7734.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b69f6dfd-bc4d-45cc-8354-7802abb6454d/35e47167a4ee1f92c8755d9c88e793847ed1487b.roa
Signing time:             Wed 24 Mar 2021 22:49:44 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     265696
IP address blocks:        45.5.174.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861021 (0xd235d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f99288a81ebe400af2542cf1335efd001a7734
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=35e47167a4ee1f92c8755d9c88e793847ed1487b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e7:ef:7e:89:67:2f:80:b9:97:76:3a:62:24:
                    cf:24:29:8f:70:2a:82:e3:ab:42:c9:34:b0:22:c8:
                    32:10:db:30:9b:c7:53:32:dd:55:7e:a1:12:2c:58:
                    e2:88:98:f8:69:ba:3c:27:d1:9b:11:b0:3e:07:f5:
                    ba:85:c6:4e:fc:8f:17:2f:06:99:57:b5:d7:fb:f5:
                    cb:ca:b5:1a:26:0f:7c:5d:ba:6d:c7:06:75:7d:10:
                    b0:8d:5b:e6:8d:01:ba:de:69:af:c4:2a:15:47:4a:
                    dc:18:aa:a2:d4:67:e5:af:cd:9e:be:f3:b1:f7:26:
                    72:a3:61:23:06:9a:b4:ee:ea:e2:4e:7a:fa:b4:7e:
                    02:4f:92:c1:b7:42:23:d1:2d:f1:5f:27:89:a6:8f:
                    e1:fa:c4:f5:e6:04:d6:55:b5:ab:95:e8:b6:22:9d:
                    56:6c:93:17:16:fb:91:5a:d4:63:29:7b:27:61:e0:
                    2f:cd:ba:39:8d:60:14:3b:93:b1:4d:c1:20:de:9e:
                    46:64:45:84:42:a1:87:54:d6:eb:cd:ba:a8:63:62:
                    03:7b:c4:60:ad:3f:3b:1d:f9:73:10:8d:86:c7:22:
                    0f:ac:09:3e:79:9d:6c:ba:fe:13:55:99:22:20:1b:
                    1c:b2:9c:ef:97:11:19:f3:24:d4:96:9e:cb:c5:60:
                    43:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7B:EC:60:78:47:47:75:07:A2:8E:6B:97:44:B3:52:92:07:78:70
            X509v3 Authority Key Identifier:
                keyid:48:EB:CE:32:EB:E8:D3:56:71:5F:74:23:E9:91:02:5E:16:3B:39:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92f99288a81ebe400af2542cf1335efd001a7734.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b69f6dfd-bc4d-45cc-8354-7802abb6454d/35e47167a4ee1f92c8755d9c88e793847ed1487b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b69f6dfd-bc4d-45cc-8354-7802abb6454d/92f99288a81ebe400af2542cf1335efd001a7734.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:f2:25:f2:52:37:96:bf:dc:ab:71:f3:6f:8d:24:28:e8:5b:
         8e:96:9a:f3:2e:ba:6b:95:c0:18:80:cc:7c:e8:50:d5:d1:5e:
         47:12:95:4b:19:6f:c1:0f:1b:7f:bc:11:27:98:ae:91:52:01:
         78:2d:49:cd:91:c0:2d:e0:09:17:f9:54:fa:8e:85:2d:43:d6:
         bb:8a:96:58:2a:ef:96:2b:15:6c:6f:ff:da:e0:42:e0:45:bd:
         4d:5f:47:b9:f6:43:7c:7d:3c:d7:61:3e:12:a7:ad:d0:e0:22:
         94:61:6c:e6:00:d8:12:bb:95:84:d5:24:50:44:74:b4:83:9a:
         45:fd:58:d9:f5:67:8c:54:84:ab:78:0d:46:f7:a0:03:9d:58:
         bf:2d:6b:0a:62:55:53:38:a5:f9:b4:02:ce:63:d6:1a:d4:17:
         7a:66:e8:85:4a:1a:56:5d:24:fd:b7:90:02:83:88:42:7e:18:
         99:82:a5:21:a2:c7:4d:51:9b:73:6b:02:ba:d5:8c:26:48:0b:
         3a:bd:fa:19:c6:25:c4:89:4a:52:1d:3e:70:bb:62:01:c7:23:
         86:40:7b:1d:1a:c3:06:90:9f:79:32:ad:4c:21:59:e4:75:f3:
         03:01:7c:80:83:3e:ac:04:73:e4:4f:83:c9:b9:72:c6:47:30:
         6e:7e:b7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----