Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1ded89d-f822-47bb-add4-e8e0a9f74b07/02b01d714fb15d5b40abb7dd380d14a32e498782.roa
File:                     02b01d714fb15d5b40abb7dd380d14a32e498782.roa (raw, json)
Hash identifier:          kPh2tnWJmcyLudWxjq6kluehPy81qW3gyNC3TeZX3EY=
Subject key identifier:   AC:14:AF:92:A6:A7:DE:2D:D7:64:47:4E:20:56:E1:70:7C:A5:60:F1
Certificate issuer:       /CN=3476fd496b3fa9d336c8e155ff2575d684f68bf9
Certificate serial:       0548
Authority key identifier: CC:EB:BA:C1:F9:27:06:5E:44:CE:E7:6E:48:D4:E5:A9:17:4B:0C:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3476fd496b3fa9d336c8e155ff2575d684f68bf9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c1ded89d-f822-47bb-add4-e8e0a9f74b07/02b01d714fb15d5b40abb7dd380d14a32e498782.roa
Signing time:             Sat 04 Feb 2023 05:27:42 +0000
ROA not before:           Fri 03 Feb 2023 05:26:29 +0000
ROA not after:            Tue 04 Feb 2025 05:26:29 +0000
asID:                     262196
IP address blocks:        45.228.56.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1352 (0x548)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3476fd496b3fa9d336c8e155ff2575d684f68bf9
        Validity
            Not Before: Feb  3 05:26:29 2023 GMT
            Not After : Feb  4 05:26:29 2025 GMT
        Subject: CN=02b01d714fb15d5b40abb7dd380d14a32e498782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:41:b3:3b:01:67:1c:38:d6:cf:a0:75:8f:e9:
                    c9:4f:48:e7:5c:54:4c:7e:92:10:46:e5:7d:66:e0:
                    85:ed:73:d5:d6:56:36:ac:87:f6:c3:ee:d1:77:dd:
                    7f:f5:15:90:59:09:e0:49:0f:50:b5:67:18:82:51:
                    be:f8:5e:6f:ce:b1:e0:a6:84:06:d3:f7:bb:cb:ed:
                    8b:97:56:ad:44:a8:9c:4a:50:c5:62:36:f7:48:ba:
                    50:0f:8e:9a:d7:9d:f5:83:3a:a0:4a:77:31:b9:8b:
                    4c:f1:e4:b2:a5:01:55:0f:40:f7:f2:bf:d0:84:e0:
                    f7:ce:67:0c:bb:44:db:cb:e5:27:a7:1b:13:fd:0b:
                    55:4a:b5:90:30:fb:91:32:f2:d7:bc:c8:5a:19:ef:
                    c9:4c:89:c6:cc:58:63:36:e1:9b:ab:23:3b:89:32:
                    86:ee:77:ec:de:c3:b3:12:9a:49:c8:f6:d5:9b:75:
                    a3:e9:56:12:d9:d2:e1:d0:d1:e9:bc:a6:f1:cc:b3:
                    cc:7f:b6:7c:3d:8a:b6:60:77:2f:64:70:ac:5d:30:
                    85:91:f9:f5:43:aa:86:98:47:f3:cb:95:77:ca:56:
                    cb:62:e6:04:e1:3b:95:a7:09:7e:37:db:8a:a0:3a:
                    3a:82:c9:31:6d:cd:69:d9:be:43:9d:2c:e5:2d:5f:
                    b7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:14:AF:92:A6:A7:DE:2D:D7:64:47:4E:20:56:E1:70:7C:A5:60:F1
            X509v3 Authority Key Identifier:
                keyid:CC:EB:BA:C1:F9:27:06:5E:44:CE:E7:6E:48:D4:E5:A9:17:4B:0C:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3476fd496b3fa9d336c8e155ff2575d684f68bf9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1ded89d-f822-47bb-add4-e8e0a9f74b07/02b01d714fb15d5b40abb7dd380d14a32e498782.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c1ded89d-f822-47bb-add4-e8e0a9f74b07/3476fd496b3fa9d336c8e155ff2575d684f68bf9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:76:4b:72:c1:79:8e:ec:a5:33:00:15:aa:fb:f7:b8:43:20:
         73:7e:1d:15:a8:49:2c:0b:d3:58:46:c9:9e:15:9b:1b:60:6f:
         a9:95:c7:25:a1:a6:b3:29:e4:34:62:78:e7:3c:b5:dc:06:a6:
         bf:27:d5:44:af:bc:0e:09:72:5c:47:88:a2:dd:d1:02:71:9b:
         53:5e:68:7c:da:44:0b:db:0c:d8:49:ae:1c:c3:8d:2f:3d:67:
         71:5c:25:26:43:74:52:15:ed:84:21:33:e9:b0:bd:df:aa:b7:
         70:5e:51:4a:bc:29:db:dc:70:e2:a3:96:3a:9a:a3:3e:52:ab:
         21:30:df:6a:5d:ef:85:03:88:24:86:dc:1b:b0:02:cc:ca:26:
         a2:f8:d1:d0:b3:17:c1:20:0a:e8:89:9a:e4:14:f0:c9:99:df:
         3d:d9:4e:7b:0f:d7:e2:d0:d8:d2:8b:6f:4b:e1:62:00:8a:af:
         27:b2:2d:7f:e1:99:55:a5:81:d4:53:4c:d1:a7:6f:a2:61:35:
         6f:41:9a:1e:9b:b6:3b:c5:04:95:89:b5:1f:e7:3c:cf:ed:02:
         c9:05:87:a8:e4:ca:38:e2:1b:83:aa:7f:bf:18:49:85:94:c4:
         9a:06:2b:de:1f:1c:db:ac:56:9d:9d:06:7e:02:9a:e5:3d:b5:
         bc:6f:db:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----