Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/9b736d613a4e7d63fb54a0d7f2b3915bbccb23f4.roa
File:                     9b736d613a4e7d63fb54a0d7f2b3915bbccb23f4.roa (raw, json)
Hash identifier:          qDibCcsK/tHinHBDozhd+ozFcrzS/ro1c08MU3y2s0Q=
Subject key identifier:   61:BB:48:EF:49:A9:3E:A6:D6:C7:06:1F:AD:E4:AF:03:90:E5:D7:7B
Certificate issuer:       /CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
Certificate serial:       215814
Authority key identifier: E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/9b736d613a4e7d63fb54a0d7f2b3915bbccb23f4.roa
Signing time:             Tue 20 Jun 2023 12:43:27 +0000
ROA not before:           Mon 19 Jun 2023 12:43:27 +0000
ROA not after:            Fri 20 Jun 2025 12:43:27 +0000
asID:                     265855
IP address blocks:        45.225.224.0/22 maxlen: 24
                          45.225.224.0/24 maxlen: 24
                          45.225.226.0/23 maxlen: 24
                          2803:da20::/32 maxlen: 48
                          2803:da20:100::/40 maxlen: 40
                          2803:da20:200::/39 maxlen: 40
                          2803:da20:400::/38 maxlen: 40
                          2803:da20:5cc9::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2185236 (0x215814)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
        Validity
            Not Before: Jun 19 12:43:27 2023 GMT
            Not After : Jun 20 12:43:27 2025 GMT
        Subject: CN=9b736d613a4e7d63fb54a0d7f2b3915bbccb23f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f3:2c:d1:c8:de:a7:eb:07:0e:36:2f:ae:62:
                    a3:5d:1d:99:bf:47:79:f2:dd:91:3e:ee:57:83:7a:
                    90:5d:45:10:78:83:e3:5f:7f:7b:87:63:61:5b:58:
                    c5:5e:7a:59:5f:d4:32:76:84:df:18:fe:73:66:56:
                    cb:8d:0b:4d:76:b3:09:75:c8:28:4a:c1:00:4f:d7:
                    77:35:9d:29:35:5a:84:a2:5e:22:e9:4d:83:c7:5b:
                    03:51:c5:5a:f8:ec:29:fe:d7:2f:16:16:71:76:00:
                    cd:38:33:1c:1a:ca:8c:5b:2b:ce:03:2f:35:2e:d0:
                    25:2b:bd:de:3c:17:5c:7b:2d:60:96:ad:f9:bd:f7:
                    98:e8:4d:8f:6c:c9:9a:99:9c:3c:84:fa:09:11:94:
                    06:3b:6f:7f:4c:03:ff:71:4d:37:4d:9f:50:5e:f7:
                    14:11:30:0e:02:5a:39:89:d1:60:89:92:f1:77:74:
                    ee:4d:b4:76:8b:33:d9:93:2c:68:cc:d0:ad:bb:0c:
                    cd:1a:4b:60:49:e4:f7:69:c9:5f:e2:f4:7a:b7:4c:
                    ff:bd:f1:02:1c:71:71:82:64:06:6f:6d:d0:94:f4:
                    90:c7:18:74:27:22:3b:2d:99:b0:46:2e:15:d8:4a:
                    5a:9f:5f:5b:66:d3:da:fd:15:a4:bc:ed:cb:15:b0:
                    82:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BB:48:EF:49:A9:3E:A6:D6:C7:06:1F:AD:E4:AF:03:90:E5:D7:7B
            X509v3 Authority Key Identifier:
                keyid:E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/9b736d613a4e7d63fb54a0d7f2b3915bbccb23f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.224.0/22
                IPv6:
                  2803:da20::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:be:d2:a5:72:5d:8f:d7:98:82:f0:8b:fe:2c:2d:02:87:29:
         10:9b:9a:2f:29:23:e3:9e:d4:20:20:3f:9a:ef:71:07:69:f3:
         d6:66:a3:ae:04:55:ce:df:01:49:98:66:3d:50:78:75:0b:c0:
         c6:b9:20:9f:d9:f8:a9:75:9d:ce:70:ae:32:d4:37:e2:72:5d:
         67:f9:87:08:88:bb:0f:af:fc:8c:67:fd:46:13:cd:8f:4a:c5:
         96:90:01:38:27:c0:34:6c:53:3f:e8:43:ce:b3:fc:5b:2d:1f:
         e2:97:0f:e0:c0:08:8f:e1:71:61:86:2f:63:88:50:99:f9:e7:
         07:b1:a7:7d:a2:52:85:04:68:60:a1:e9:ba:79:7d:09:55:6c:
         91:6c:f5:07:59:fc:63:44:37:d8:d6:63:d1:28:2a:dc:ad:85:
         bf:10:92:76:cc:02:23:44:32:41:2e:9d:62:e2:b5:da:ac:a8:
         b7:4f:5e:10:70:5f:b6:1b:c7:ce:5d:1f:49:09:ec:64:ae:9c:
         16:76:81:68:93:96:fb:2e:13:5a:52:09:b8:bf:5d:24:5e:59:
         bb:e1:e4:a1:7f:6b:39:19:9e:8b:b0:04:bd:22:01:1d:25:33:
         28:41:f1:0e:34:e5:a4:e5:df:ca:44:f0:91:50:2e:28:d1:eb:
         22:b0:85:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----