Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/5cbb501434bd582d50e420bc7b8fb8d15cee3ca0.roa
File:                     5cbb501434bd582d50e420bc7b8fb8d15cee3ca0.roa (raw, json)
Hash identifier:          WFTDZhlcv5X4q7iGZong/D+PnChbwCqUNIzOlLiVdgM=
Subject key identifier:   EC:21:35:9A:82:3B:AB:38:F6:C7:4B:15:A4:C0:A9:BC:81:B1:AB:96
Certificate issuer:       /CN=c7c15fafa30bfcd79bf9951262573158d98a275e
Certificate serial:       1DAA64
Authority key identifier: A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/5cbb501434bd582d50e420bc7b8fb8d15cee3ca0.roa
Signing time:             Mon 23 Jan 2023 17:38:15 +0000
ROA not before:           Sun 22 Jan 2023 17:22:36 +0000
ROA not after:            Thu 23 Jan 2025 17:22:36 +0000
asID:                     11830
IP address blocks:        45.232.116.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1944164 (0x1daa64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7c15fafa30bfcd79bf9951262573158d98a275e
        Validity
            Not Before: Jan 22 17:22:36 2023 GMT
            Not After : Jan 23 17:22:36 2025 GMT
        Subject: CN=5cbb501434bd582d50e420bc7b8fb8d15cee3ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:57:56:81:9c:96:3e:11:3f:41:fd:43:89:ed:
                    29:d8:64:33:4b:c4:17:00:8b:73:76:36:a5:14:33:
                    bb:0e:fa:db:e3:01:db:e9:df:6a:0e:c8:0f:fc:4b:
                    ae:5b:67:59:eb:fd:44:54:83:51:83:bd:67:bd:05:
                    e2:41:03:33:b1:1a:0f:69:d2:43:61:14:40:ee:cb:
                    d1:0c:e8:d0:30:8a:ce:2e:f1:b0:15:aa:39:01:ca:
                    d8:cb:a8:f5:0d:91:bf:9e:97:7e:85:0d:15:5d:48:
                    63:df:6c:14:2d:10:c7:7d:cb:31:0b:58:9a:8b:86:
                    e7:b1:6c:65:1f:ae:a6:65:14:6e:18:a7:a4:83:6a:
                    e9:bc:9e:df:b6:aa:a4:33:a6:8e:13:42:34:b2:e0:
                    f7:62:70:bd:c3:9e:f9:a7:e3:66:80:85:ff:cd:de:
                    8f:e4:be:a2:bf:9a:06:0d:f8:2b:60:e0:d0:c5:cd:
                    e7:54:86:8b:3a:fe:ee:9d:d7:4b:83:19:70:71:28:
                    ef:c7:9b:08:2f:b6:81:fe:39:5b:41:81:6b:20:7f:
                    ae:53:0e:fb:9c:34:26:7c:44:3b:be:af:57:fd:39:
                    95:4a:de:e2:64:38:04:97:7e:22:b3:fd:41:74:0c:
                    98:8b:3f:7d:7e:2b:a4:74:52:7d:e7:d6:60:43:7d:
                    38:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:21:35:9A:82:3B:AB:38:F6:C7:4B:15:A4:C0:A9:BC:81:B1:AB:96
            X509v3 Authority Key Identifier:
                keyid:A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/5cbb501434bd582d50e420bc7b8fb8d15cee3ca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/c7c15fafa30bfcd79bf9951262573158d98a275e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:d8:e9:45:ff:88:a0:23:ca:6a:0b:fb:88:93:44:8f:c5:e0:
         e2:17:59:0b:18:aa:d3:2f:43:cb:93:c2:95:1b:0c:cb:43:3d:
         cf:fb:bd:54:d2:e9:8b:b2:73:e9:3a:b7:66:f1:a3:a7:1d:66:
         d5:56:af:e8:79:76:71:15:8a:11:60:dc:90:31:6e:f5:1f:4a:
         56:8f:b4:38:cc:c2:2d:6a:69:c2:fc:8d:70:94:9d:1e:22:9f:
         e6:6a:10:13:48:92:0a:41:47:73:de:7c:43:ee:09:39:b1:1e:
         dc:7b:96:80:60:69:bc:44:2d:c0:9f:d8:c2:64:0a:84:a0:4c:
         9a:0f:a3:15:14:50:fd:86:d7:81:f9:05:05:4f:0f:cf:6c:92:
         4e:01:9d:b8:80:b0:2f:76:86:00:f4:3b:3a:dd:9a:4e:b0:45:
         26:b7:7c:b6:19:28:54:1e:77:cd:fc:63:39:3f:77:84:cf:b9:
         a5:8a:84:db:fc:f5:8c:bc:1c:70:f3:e4:21:f7:3a:63:ab:6d:
         ec:72:15:07:1d:66:30:67:39:c4:45:c5:14:24:a0:59:71:e5:
         f7:02:d8:36:51:0a:a2:d6:50:2c:84:3b:fc:13:e4:a6:62:c0:
         a3:87:85:6a:89:8b:ff:ae:37:9e:e3:70:2c:7a:48:3f:a3:c1:
         46:0f:12:9f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHapkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM3
YzE1ZmFmYTMwYmZjZDc5YmY5OTUxMjYyNTczMTU4ZDk4YTI3NWUwHhcNMjMwMTIy
MTcyMjM2WhcNMjUwMTIzMTcyMjM2WjAzMTEwLwYDVQQDEyg1Y2JiNTAxNDM0YmQ1
ODJkNTBlNDIwYmM3YjhmYjhkMTVjZWUzY2EwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzVdWgZyWPhE/Qf1Die0p2GQzS8QXAItzdjalFDO7Dvrb4wHb
6d9qDsgP/EuuW2dZ6/1EVINRg71nvQXiQQMzsRoPadJDYRRA7svRDOjQMIrOLvGw
Fao5AcrYy6j1DZG/npd+hQ0VXUhj32wULRDHfcsxC1iai4bnsWxlH66mZRRuGKek
g2rpvJ7ftqqkM6aOE0I0suD3YnC9w575p+NmgIX/zd6P5L6iv5oGDfgrYODQxc3n
VIaLOv7unddLgxlwcSjvx5sIL7aB/jlbQYFrIH+uUw77nDQmfEQ7vq9X/TmVSt7i
ZDgEl34is/1BdAyYiz99fiukdFJ959ZgQ304MQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOwhNZqCO6s49sdLFaTAqbyBsauWMB8GA1UdIwQYMBaAFKGwewo8koNx/Cou
jrXotarzdPBHMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzdjMTVm
YWZhMzBiZmNkNzliZjk5NTEyNjI1NzMxNThkOThhMjc1ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmI2YTNhY2MtMmE0Yy00ZmJjLWEyYTYtOTUwZmQx
ZTI2NjdkLzVjYmI1MDE0MzRiZDU4MmQ1MGU0MjBiYzdiOGZiOGQxNWNlZTNjYTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iYjZhM2FjYy0yYTRjLTRmYmMtYTJhNi05NTBm
ZDFlMjY2N2QvYzdjMTVmYWZhMzBiZmNkNzliZjk5NTEyNjI1NzMxNThkOThhMjc1
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3odDANBgkqhkiG9w0BAQsFAAOCAQEAedjpRf+IoCPKagv7
iJNEj8Xg4hdZCxiq0y9Dy5PClRsMy0M9z/u9VNLpi7Jz6Tq3ZvGjpx1m1Vav6Hl2
cRWKEWDckDFu9R9KVo+0OMzCLWppwvyNcJSdHiKf5moQE0iSCkFHc958Q+4JObEe
3HuWgGBpvEQtwJ/YwmQKhKBMmg+jFRRQ/YbXgfkFBU8Pz2ySTgGduICwL3aGAPQ7
Ot2aTrBFJrd8thkoVB53zfxjOT93hM+5pYqE2/z1jLwccPPkIfc6Y6tt7HIVBx1m
MGc5xEXFFCSgWXHl9wLYNlEKotZQLIQ7/BPkpmLAo4eFaomL/643nuNwLHpIP6PB
Rg8Snw==
-----END CERTIFICATE-----