Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/af25318a9af6f7a0cfac5811dcbee4c15c4c64a8.roa
File:                     af25318a9af6f7a0cfac5811dcbee4c15c4c64a8.roa (raw, json)
Hash identifier:          +dHhTgzuMRn38MwFL9/m7VJEM2Djq0n2THUsuM1MQqY=
Subject key identifier:   05:10:9E:99:4F:DD:C7:A5:04:F0:43:20:89:32:FA:09:4D:D2:A7:D2
Certificate issuer:       /CN=7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b
Certificate serial:       03295E
Authority key identifier: A4:00:D3:7E:74:56:FD:28:CC:9F:E3:3E:2A:CF:4E:9B:4E:84:BB:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/af25318a9af6f7a0cfac5811dcbee4c15c4c64a8.roa
Signing time:             Tue 10 Jan 2023 14:02:59 +0000
ROA not before:           Mon 09 Jan 2023 14:01:07 +0000
ROA not after:            Fri 10 Jan 2025 14:01:07 +0000
asID:                     265679
IP address blocks:        45.4.216.0/22 maxlen: 22
                          2803:c1c0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207198 (0x3295e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b
        Validity
            Not Before: Jan  9 14:01:07 2023 GMT
            Not After : Jan 10 14:01:07 2025 GMT
        Subject: CN=af25318a9af6f7a0cfac5811dcbee4c15c4c64a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:07:f9:cd:66:b3:a5:f5:03:de:74:af:f7:10:
                    00:33:c7:03:0c:8c:73:97:a3:56:a0:b9:1a:d2:e1:
                    ec:9e:cb:1b:ad:69:61:85:b6:81:33:2c:7c:56:e1:
                    21:b1:61:ad:c8:33:9c:1d:6f:c4:63:56:55:51:a8:
                    cd:f4:44:98:4d:63:fb:aa:f6:28:51:eb:c2:f3:cf:
                    ff:45:12:03:2c:95:15:1f:d3:e9:cc:b0:6c:c6:cc:
                    7a:1a:27:0a:62:e3:fd:a2:b9:d2:fd:7a:c0:c7:87:
                    f7:4f:34:7b:08:5f:1c:42:9d:2b:46:34:22:8b:8b:
                    f6:0e:f8:cf:74:ef:3e:da:e8:33:f4:69:0b:b5:ea:
                    cd:59:f2:6d:4e:68:43:5a:44:2e:29:56:86:f8:66:
                    b7:b5:f5:1b:34:ba:f3:d8:f8:2e:d0:a4:dc:18:4d:
                    0a:9f:4f:2f:9d:8a:00:34:a0:d6:4e:ef:9a:4e:a5:
                    71:f9:19:7a:b2:0b:e2:2c:37:cd:38:c1:e5:98:b3:
                    f5:63:1b:fa:8d:72:45:82:d1:db:c9:61:f4:5e:13:
                    5a:51:e1:f0:fd:4a:3e:b7:ec:9d:10:96:f2:da:fb:
                    bf:43:e3:f9:ff:8b:d8:bf:5e:47:4e:83:e1:0c:ba:
                    07:06:e1:94:b8:4c:e2:81:c8:78:8d:46:82:f9:46:
                    a5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:10:9E:99:4F:DD:C7:A5:04:F0:43:20:89:32:FA:09:4D:D2:A7:D2
            X509v3 Authority Key Identifier:
                keyid:A4:00:D3:7E:74:56:FD:28:CC:9F:E3:3E:2A:CF:4E:9B:4E:84:BB:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/af25318a9af6f7a0cfac5811dcbee4c15c4c64a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.216.0/22
                IPv6:
                  2803:c1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:34:a7:06:4d:c5:90:c2:5c:8a:89:80:0d:fa:0a:97:78:8e:
         d3:35:e0:46:8d:b2:6b:e0:52:08:3f:90:64:58:02:fb:3c:15:
         20:9d:30:54:3f:18:94:8b:81:d0:e8:45:db:6d:9f:67:c4:84:
         c7:91:16:9a:61:7d:dc:d0:e2:15:fc:49:be:4e:fd:10:b6:04:
         16:6a:d1:72:96:34:18:d8:fd:e5:4f:b3:50:08:84:2d:16:16:
         d5:19:28:36:fd:21:86:ed:93:ad:b2:ee:2c:c8:68:d6:36:69:
         c5:37:f9:f8:1a:5a:85:af:25:16:b1:ea:af:cd:26:c6:27:d4:
         cb:cd:52:a7:48:df:2d:74:19:64:01:76:bf:aa:7e:00:68:40:
         69:d9:8f:eb:36:19:33:6c:99:cf:ba:2d:26:df:92:8b:23:31:
         2a:53:f1:2e:c5:ee:b9:3d:e3:1c:bf:45:51:1a:f4:23:97:5e:
         09:3d:1a:96:df:3a:e8:f0:25:0b:48:b1:6f:63:b7:10:2c:3b:
         e8:46:38:71:2e:ab:91:54:f5:49:c8:13:e8:7b:e3:5d:1e:29:
         74:93:fa:f9:71:bc:94:f6:ae:90:14:4e:71:89:e0:99:b7:56:
         96:2e:0b:78:46:e6:7d:d3:82:1b:af:10:c8:15:93:03:98:4b:
         05:e6:bb:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDAyleMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdh
ODZkN2IxMzhkOTc0YTFmMGM3MDgzOGViNmZiMmExMGFlMWFiNWIwHhcNMjMwMTA5
MTQwMTA3WhcNMjUwMTEwMTQwMTA3WjAzMTEwLwYDVQQDEyhhZjI1MzE4YTlhZjZm
N2EwY2ZhYzU4MTFkY2JlZTRjMTVjNGM2NGE4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiQf5zWazpfUD3nSv9xAAM8cDDIxzl6NWoLka0uHsnssbrWlh
hbaBMyx8VuEhsWGtyDOcHW/EY1ZVUajN9ESYTWP7qvYoUevC88//RRIDLJUVH9Pp
zLBsxsx6GicKYuP9ornS/XrAx4f3TzR7CF8cQp0rRjQii4v2DvjPdO8+2ugz9GkL
terNWfJtTmhDWkQuKVaG+Ga3tfUbNLrz2Pgu0KTcGE0Kn08vnYoANKDWTu+aTqVx
+Rl6sgviLDfNOMHlmLP1Yxv6jXJFgtHbyWH0XhNaUeHw/Uo+t+ydEJby2vu/Q+P5
/4vYv15HToPhDLoHBuGUuEzigch4jUaC+UalGQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFAUQnplP3celBPBDIIky+glN0qfSMB8GA1UdIwQYMBaAFKQA0350Vv0ozJ/j
PirPTptOhLvvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2E4NmQ3
YjEzOGQ5NzRhMWYwYzcwODM4ZWI2ZmIyYTEwYWUxYWI1Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmE5ZDVjYTgtNzM5Ny00MDNjLWJiN2EtMjY1NGIw
MDgzMjEwL2FmMjUzMThhOWFmNmY3YTBjZmFjNTgxMWRjYmVlNGMxNWM0YzY0YTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iYTlkNWNhOC03Mzk3LTQwM2MtYmI3YS0yNjU0
YjAwODMyMTAvN2E4NmQ3YjEzOGQ5NzRhMWYwYzcwODM4ZWI2ZmIyYTEwYWUxYWI1
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi0E2DANBAIAAjAHAwUAKAPBwDANBgkqhkiG9w0BAQsFAAOC
AQEAJDSnBk3FkMJciomADfoKl3iO0zXgRo2ya+BSCD+QZFgC+zwVIJ0wVD8YlIuB
0OhF222fZ8SEx5EWmmF93NDiFfxJvk79ELYEFmrRcpY0GNj95U+zUAiELRYW1Rko
Nv0hhu2TrbLuLMho1jZpxTf5+Bpaha8lFrHqr80mxifUy81Sp0jfLXQZZAF2v6p+
AGhAadmP6zYZM2yZz7otJt+SiyMxKlPxLsXuuT3jHL9FURr0I5deCT0alt866PAl
C0ixb2O3ECw76EY4cS6rkVT1ScgT6HvjXR4pdJP6+XG8lPaukBROcYngmbdWli4L
eEbmfdOCG68QyBWTA5hLBea76w==
-----END CERTIFICATE-----