Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/e03daef0ae869e60714b5ea87fd82473ca20c259.roa
File:                     e03daef0ae869e60714b5ea87fd82473ca20c259.roa (raw, json)
Hash identifier:          r+hEULB9r3K4q3qxKUsRUrqVB/BRxP/r55D7gV2B924=
Subject key identifier:   B5:BF:16:0F:43:D4:CB:D1:74:C7:47:C1:98:CB:9D:B4:AA:1C:E0:FE
Certificate issuer:       /CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
Certificate serial:       215C8C
Authority key identifier: E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/e03daef0ae869e60714b5ea87fd82473ca20c259.roa
Signing time:             Tue 20 Jun 2023 12:43:28 +0000
ROA not before:           Mon 19 Jun 2023 12:43:27 +0000
ROA not after:            Fri 20 Jun 2025 12:43:27 +0000
asID:                     27951
IP address blocks:        45.225.225.0/24 maxlen: 24
                          2803:da20::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2186380 (0x215c8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
        Validity
            Not Before: Jun 19 12:43:27 2023 GMT
            Not After : Jun 20 12:43:27 2025 GMT
        Subject: CN=e03daef0ae869e60714b5ea87fd82473ca20c259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8c:71:36:86:63:4a:5a:07:da:ab:17:52:06:
                    19:fe:2e:b3:47:49:b3:62:0f:09:39:da:58:c6:d4:
                    08:b5:b5:f4:a2:2e:55:4a:e6:34:ba:e1:36:c2:28:
                    a3:0b:3d:3e:ea:e0:ea:bc:5f:1d:90:d6:ac:d9:2a:
                    df:34:e3:25:4d:5f:c7:eb:01:31:f2:f0:8e:b9:4c:
                    e0:a5:c3:51:cb:de:00:a4:54:07:83:ab:fd:92:a4:
                    c1:9c:13:63:57:81:52:ae:ad:68:74:e4:1a:d1:49:
                    db:41:b9:60:38:28:67:c7:e7:71:9a:eb:52:91:21:
                    5d:9e:f1:76:dc:2c:da:98:b1:4b:97:2a:86:1f:f2:
                    a3:b3:bc:0e:04:12:58:b4:6f:b0:e1:f1:bd:84:ec:
                    77:ab:ae:7c:3a:8f:39:1b:3a:01:60:20:87:fe:1b:
                    a7:26:61:58:7b:00:89:57:a8:00:59:f6:e8:d9:10:
                    6f:10:0c:4c:66:31:b6:9a:fd:26:b1:9d:e9:d8:9e:
                    80:95:43:28:02:2a:2e:ec:76:42:fd:87:da:56:76:
                    fc:29:6c:0a:69:e1:7b:28:b1:97:97:6e:bd:71:93:
                    c7:be:87:9a:ab:f6:7b:2c:e5:4f:1e:08:04:7d:91:
                    68:d4:67:dc:e4:59:d6:c7:5e:1e:60:e9:df:c1:aa:
                    a4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BF:16:0F:43:D4:CB:D1:74:C7:47:C1:98:CB:9D:B4:AA:1C:E0:FE
            X509v3 Authority Key Identifier:
                keyid:E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/e03daef0ae869e60714b5ea87fd82473ca20c259.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.225.0/24
                IPv6:
                  2803:da20::/40

    Signature Algorithm: sha256WithRSAEncryption
         c9:b1:e7:65:c0:a8:3d:b9:a4:4e:4c:f4:4a:d7:18:03:74:69:
         8e:4a:89:4a:f8:0e:a5:63:3e:af:2c:60:55:62:d2:6a:37:b4:
         e2:ac:ec:3e:fe:1b:93:f9:e0:bc:d7:e5:94:ac:c4:8b:2d:2f:
         97:f9:c2:e0:16:e8:bc:7a:05:39:5f:f9:b6:a4:a6:9d:e8:bb:
         75:5d:79:50:a9:12:00:d5:b2:db:0f:c2:9e:c9:87:cf:71:ca:
         ad:bf:f1:b0:bb:d3:e6:1d:99:92:a4:d9:76:bb:0e:94:1f:b2:
         06:01:76:22:29:7e:15:4c:c1:0d:51:d0:0d:4d:fc:34:61:8c:
         09:c4:16:32:5d:56:54:1c:39:01:bf:75:52:a5:02:da:19:79:
         4a:17:b3:77:a6:dd:b0:b8:db:7c:13:df:2a:53:18:b9:74:28:
         fc:8d:62:b6:3b:0e:f5:11:f1:ff:1e:1d:57:bc:b5:34:b1:53:
         1a:e3:56:ae:65:ef:26:6d:95:a9:b8:c6:19:2b:97:ac:26:b0:
         fe:ef:5e:37:e8:8a:97:c1:8d:4a:28:a2:9c:af:9d:39:a9:0d:
         4a:8f:5b:bb:3e:43:e1:d5:11:20:bc:70:6f:2a:c9:5d:e5:25:
         70:8f:89:fe:74:bd:0b:03:b5:75:ba:c4:bd:34:58:a3:92:a4:
         95:37:8e:ff
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIDIVyMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
ZDc3ZWZjMWFiMWI0Yjg0OWFhM2FjNTdjZDAwMzY2ZWE3NWI2NzcwHhcNMjMwNjE5
MTI0MzI3WhcNMjUwNjIwMTI0MzI3WjAzMTEwLwYDVQQDEyhlMDNkYWVmMGFlODY5
ZTYwNzE0YjVlYTg3ZmQ4MjQ3M2NhMjBjMjU5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAooxxNoZjSloH2qsXUgYZ/i6zR0mzYg8JOdpYxtQItbX0oi5V
SuY0uuE2wiijCz0+6uDqvF8dkNas2SrfNOMlTV/H6wEx8vCOuUzgpcNRy94ApFQH
g6v9kqTBnBNjV4FSrq1odOQa0UnbQblgOChnx+dxmutSkSFdnvF23CzamLFLlyqG
H/Kjs7wOBBJYtG+w4fG9hOx3q658Oo85GzoBYCCH/hunJmFYewCJV6gAWfbo2RBv
EAxMZjG2mv0msZ3p2J6AlUMoAiou7HZC/YfaVnb8KWwKaeF7KLGXl269cZPHvoea
q/Z7LOVPHggEfZFo1Gfc5FnWx14eYOnfwaqk7QIDAQABo4ICazCCAmcwHQYDVR0O
BBYEFLW/Fg9D1MvRdMdHwZjLnbSqHOD+MB8GA1UdIwQYMBaAFOUy2F5GWQDaZbBn
V5TRUNPp9E3lMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzNkNzdl
ZmMxYWIxYjRiODQ5YWEzYWM1N2NkMDAzNjZlYTc1YjY3Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmE0YTE0ZjktOTE4MC00Y2ExLThmN2QtOWNkODAx
YWQ2NGVmL2UwM2RhZWYwYWU4NjllNjA3MTRiNWVhODdmZDgyNDczY2EyMGMyNTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iYTRhMTRmOS05MTgwLTRjYTEtOGY3ZC05Y2Q4
MDFhZDY0ZWYvMzNkNzdlZmMxYWIxYjRiODQ5YWEzYWM1N2NkMDAzNjZlYTc1YjY3
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAvBggrBgEFBQcBBwEB/wQg
MB4wDAQCAAEwBgMEAC3h4TAOBAIAAjAIAwYAKAPaIAAwDQYJKoZIhvcNAQELBQAD
ggEBAMmx52XAqD25pE5M9ErXGAN0aY5KiUr4DqVjPq8sYFVi0mo3tOKs7D7+G5P5
4LzX5ZSsxIstL5f5wuAW6Lx6BTlf+bakpp3ou3VdeVCpEgDVstsPwp7Jh89xyq2/
8bC70+YdmZKk2Xa7DpQfsgYBdiIpfhVMwQ1R0A1N/DRhjAnEFjJdVlQcOQG/dVKl
AtoZeUoXs3em3bC423wT3ypTGLl0KPyNYrY7DvUR8f8eHVe8tTSxUxrjVq5l7yZt
lam4xhkrl6wmsP7vXjfoipfBjUooopyvnTmpDUqPW7s+Q+HVESC8cG8qyV3lJXCP
if50vQsDtXW6xL00WKOSpJU3jv8=
-----END CERTIFICATE-----