Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/d0e94aa3d5f83d25e443ede88f380203ff6553d3.roa
File:                     d0e94aa3d5f83d25e443ede88f380203ff6553d3.roa (raw, json)
Hash identifier:          fwM4vvu786j+7Trng7cbFYxN4k1JhtdBJ/8KujFiDgs=
Subject key identifier:   4F:A5:D5:B4:F1:FB:2D:A3:3D:5E:77:73:5B:CD:C2:03:E3:56:58:4B
Certificate issuer:       /CN=7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b
Certificate serial:       033DBD
Authority key identifier: A4:00:D3:7E:74:56:FD:28:CC:9F:E3:3E:2A:CF:4E:9B:4E:84:BB:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/d0e94aa3d5f83d25e443ede88f380203ff6553d3.roa
Signing time:             Thu 12 Jan 2023 16:42:42 +0000
ROA not before:           Wed 11 Jan 2023 16:38:13 +0000
ROA not after:            Sun 12 Jan 2025 16:38:13 +0000
asID:                     52361
IP address blocks:        45.4.216.0/22 maxlen: 22
                          2803:c1c0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212413 (0x33dbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b
        Validity
            Not Before: Jan 11 16:38:13 2023 GMT
            Not After : Jan 12 16:38:13 2025 GMT
        Subject: CN=d0e94aa3d5f83d25e443ede88f380203ff6553d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:92:b4:bb:b3:e8:c6:14:7d:1e:db:f7:56:e6:
                    1a:b7:d3:3a:f1:c0:28:eb:6b:f3:ee:62:ba:84:dd:
                    38:48:d9:e9:34:41:78:9c:52:6f:c1:89:e3:13:c2:
                    0f:a0:82:9d:66:18:a5:7f:02:36:f5:aa:51:1c:c1:
                    12:ed:6c:01:1e:54:4d:8e:72:8b:38:8b:df:f5:24:
                    39:55:67:c6:cd:af:82:38:b8:94:14:9a:33:72:3e:
                    07:4c:dc:44:ee:21:ae:41:e0:c2:e3:a6:9e:cb:66:
                    de:a5:cd:fc:48:5c:2a:33:87:24:77:20:74:b3:2b:
                    ad:3a:f0:a1:72:b3:41:3f:2a:eb:1f:74:9c:c9:71:
                    bc:f5:4a:b3:6f:ab:67:e6:23:0a:21:46:a9:5c:e8:
                    3f:45:aa:a7:c1:d5:f1:52:60:0d:dd:98:94:64:93:
                    79:9a:54:86:88:42:8e:92:fd:21:d8:d4:74:9d:97:
                    69:f9:50:0f:59:5f:57:43:80:7b:af:6f:6f:26:0d:
                    67:99:b2:75:29:2e:c2:33:6d:5a:72:5b:24:c7:9a:
                    f3:d1:6e:7f:a2:25:c0:72:1f:72:2f:81:73:fb:f3:
                    f6:fa:4f:b8:86:77:1b:7a:84:8b:15:88:02:5e:54:
                    d9:d8:eb:bc:8c:93:b2:cf:18:bd:2b:9f:d5:f6:de:
                    06:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A5:D5:B4:F1:FB:2D:A3:3D:5E:77:73:5B:CD:C2:03:E3:56:58:4B
            X509v3 Authority Key Identifier:
                keyid:A4:00:D3:7E:74:56:FD:28:CC:9F:E3:3E:2A:CF:4E:9B:4E:84:BB:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/d0e94aa3d5f83d25e443ede88f380203ff6553d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.216.0/22
                IPv6:
                  2803:c1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:6d:0d:e0:54:5a:d1:95:41:74:f1:8e:40:5d:f3:3b:58:8d:
         e9:7d:38:90:ad:d8:24:77:4d:2f:96:cd:f3:ae:89:27:bb:ba:
         84:02:f4:83:f5:c9:bd:73:42:db:e2:43:d1:e4:00:3f:8e:ab:
         9d:f3:1d:45:d4:48:d5:1b:55:77:c0:34:66:0f:e9:5e:36:85:
         b8:7d:cf:fe:85:ae:5f:08:90:a8:11:67:9a:52:57:cf:bf:9f:
         2d:a5:06:23:c2:9b:ba:6c:28:63:ba:41:ad:a0:44:2e:93:82:
         57:f4:4b:2f:2d:da:d8:b8:c1:99:eb:63:f9:71:7b:e7:37:39:
         f0:e6:c0:23:7e:be:c4:b1:e4:ec:fd:9b:ce:f4:21:b6:fc:a9:
         ff:a8:f5:9f:87:3f:58:c0:e0:75:d0:e6:f7:0b:0a:5c:13:11:
         57:4b:77:b4:ef:80:ce:21:e3:1c:58:f7:2e:0b:c1:ae:59:f7:
         46:2a:2e:a8:c2:c3:8b:d1:85:92:cb:a8:fe:0f:6e:88:c1:f4:
         c9:30:15:2a:3b:89:10:0f:4e:df:a2:ad:9f:0c:ea:66:20:b0:
         77:6b:cd:f6:fc:c3:6b:2c:17:96:09:5f:fc:39:43:ce:42:91:
         83:a0:6c:40:80:89:fb:a1:a5:f2:00:01:e5:dc:1d:06:fd:62:
         94:59:2f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----