Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/7dfe988d873c6eaa62e77916657767f6a942f376.roa
File:                     7dfe988d873c6eaa62e77916657767f6a942f376.roa (raw, json)
Hash identifier:          gQ9swKiVl3DRWZgsPbQniXtKuNXOZ8Fz8xar35W90MA=
Subject key identifier:   3F:95:94:8D:FF:D4:9A:F5:96:07:E0:16:66:87:37:45:8F:D1:7E:5D
Certificate issuer:       /CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
Certificate serial:       16833C
Authority key identifier: E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/7dfe988d873c6eaa62e77916657767f6a942f376.roa
Signing time:             Wed 30 Mar 2022 22:37:30 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     265855
IP address blocks:        45.225.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1475388 (0x16833c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=7dfe988d873c6eaa62e77916657767f6a942f376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e9:d7:2a:03:c8:14:6c:17:0d:6a:5c:1e:8d:
                    76:1f:b5:6a:d5:86:3c:e3:b5:6b:33:8b:30:6f:26:
                    31:a2:0f:8e:19:3b:7c:11:a0:0f:f2:7a:b5:5e:52:
                    9c:a0:27:92:d7:4b:c1:b7:73:f5:fa:c4:02:f8:c0:
                    f3:21:a4:df:aa:0f:bc:cb:a0:8f:d9:23:78:ac:cc:
                    15:25:e9:0a:00:56:02:34:34:fe:f1:38:93:3d:3e:
                    c2:18:b7:a8:5a:1a:5b:c9:79:f2:74:42:7a:6e:93:
                    f3:82:c1:58:c2:ba:18:dd:81:52:f1:e1:93:8f:6d:
                    e0:d5:4c:bf:37:a1:c8:2b:47:1e:c1:24:4e:05:36:
                    11:2e:0f:ff:34:38:77:ac:7f:0b:c5:61:11:b2:64:
                    e1:c1:6e:6a:31:ee:b4:05:c5:b2:26:d9:d2:9d:a2:
                    f2:f7:c1:d6:9d:a0:2c:3f:c6:22:54:e5:da:ab:4a:
                    50:31:3f:a5:cf:62:21:83:17:d5:6c:0a:90:24:63:
                    fb:6d:af:33:9b:ad:7a:0e:7d:91:a7:b0:7b:3c:3a:
                    8f:36:51:45:fa:72:7b:4d:12:1d:d8:98:96:53:7a:
                    60:71:5b:7d:97:c4:c5:87:ee:ae:28:8f:66:61:b7:
                    de:59:6b:de:f1:5b:bd:d8:e0:e8:4c:9f:76:36:9b:
                    c1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:95:94:8D:FF:D4:9A:F5:96:07:E0:16:66:87:37:45:8F:D1:7E:5D
            X509v3 Authority Key Identifier:
                keyid:E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/7dfe988d873c6eaa62e77916657767f6a942f376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:ba:12:bf:ff:e2:b3:93:62:08:ba:ce:d3:aa:ed:e9:b0:f0:
         54:83:de:dd:1f:6d:83:94:27:43:f1:5e:89:6d:21:87:62:03:
         2b:ea:6d:f7:c1:f9:25:f8:11:41:46:88:4f:d5:8a:53:e9:91:
         a1:17:fd:48:83:eb:d3:9d:21:4e:21:dc:55:f3:39:71:6e:36:
         1c:33:b1:3b:df:5b:12:78:d6:28:9a:f7:f4:b4:35:47:32:b7:
         61:d6:3a:40:f5:c8:6a:a9:02:1a:1e:80:db:6c:3a:ac:1c:5a:
         39:9a:20:2a:f5:5a:ef:7c:ce:fe:c2:48:73:6c:a9:b4:22:73:
         09:e6:7e:f1:87:d6:51:c5:b4:c1:3f:ec:59:b0:43:09:ff:5a:
         9e:90:4f:7e:fa:be:85:ee:8c:cd:86:99:de:e4:f6:c3:a9:9a:
         9d:28:40:89:61:92:6b:86:08:3c:2e:b4:af:68:83:04:9b:58:
         a6:05:95:e8:42:f6:89:ac:18:60:bc:37:34:60:3b:87:61:38:
         67:9d:78:f9:9a:bd:af:0d:83:82:0f:b7:75:e7:1f:b8:f5:00:
         46:29:1f:7d:03:0e:31:d7:4b:0d:0a:52:49:e9:80:e2:56:89:
         cb:cb:5d:30:96:ff:9d:a6:15:a2:8c:b4:21:51:e9:28:80:39:
         93:1a:ce:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----