Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c7b1a5b9-b6a8-44eb-9a6c-23e41aaae47f/7329fa0f76d652ac89bcd23c5f975bc110e888eb.roa
File:                     7329fa0f76d652ac89bcd23c5f975bc110e888eb.roa (raw, json)
Hash identifier:          IkdY3tgbTJoyyu2GRHCmdkT/VbGovthsFURrVV30Xbc=
Subject key identifier:   4E:B7:EF:BC:0E:6A:91:37:27:A3:DB:10:6C:0C:51:03:34:FE:ED:63
Certificate issuer:       /CN=09c79d30288209739f9c6d166171b04bde05c914
Certificate serial:       6666
Authority key identifier: ED:40:B4:A9:17:52:42:77:66:C6:15:48:DE:D6:2F:F1:9E:BF:D8:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09c79d30288209739f9c6d166171b04bde05c914.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c7b1a5b9-b6a8-44eb-9a6c-23e41aaae47f/7329fa0f76d652ac89bcd23c5f975bc110e888eb.roa
Signing time:             Tue 23 May 2023 10:16:11 +0000
ROA not before:           Mon 22 May 2023 10:16:10 +0000
ROA not after:            Fri 23 May 2025 10:16:10 +0000
asID:                     266836
IP address blocks:        45.238.16.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26214 (0x6666)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c79d30288209739f9c6d166171b04bde05c914
        Validity
            Not Before: May 22 10:16:10 2023 GMT
            Not After : May 23 10:16:10 2025 GMT
        Subject: CN=7329fa0f76d652ac89bcd23c5f975bc110e888eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:19:90:18:39:a5:0e:ce:9b:ef:c0:6c:57:ba:
                    76:08:fc:33:7d:7b:f5:23:d8:81:fa:cb:97:fa:12:
                    a2:89:81:2f:5b:ec:80:56:a9:db:48:7b:8a:cf:5f:
                    ca:a8:a7:b6:e1:f0:f0:53:5b:b1:65:72:1a:63:f0:
                    75:c7:c9:6d:e4:b7:a6:86:31:f3:09:18:09:f7:45:
                    29:c3:33:82:a5:a9:fc:2f:00:b9:3a:80:55:3b:ff:
                    d6:e1:a9:68:42:a7:5e:c1:48:5e:f7:75:30:e2:ed:
                    11:5b:2a:1b:a3:24:13:3a:12:bd:a0:66:f8:a8:3f:
                    49:b9:a4:04:5c:d8:ea:a3:31:02:55:d5:eb:7e:ef:
                    da:b8:06:01:4a:2f:64:40:4f:7a:0e:d8:9c:a2:85:
                    c3:12:1d:6d:0d:63:a9:3c:42:4f:95:e7:8b:69:70:
                    2c:93:ef:e4:cf:d7:e8:0c:d1:81:f2:eb:99:e5:7f:
                    3a:aa:87:98:80:e6:a4:07:23:d5:98:59:ab:33:a1:
                    05:4f:cb:2f:35:5b:af:35:d2:e5:07:70:96:bb:e9:
                    81:0f:02:6c:1b:e4:1d:29:d5:fe:b7:db:2b:c7:e1:
                    63:f1:84:c0:2f:38:53:43:94:df:e7:3c:e2:0a:2d:
                    45:d7:28:7c:94:1c:08:df:0e:99:cc:f1:66:65:24:
                    b2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B7:EF:BC:0E:6A:91:37:27:A3:DB:10:6C:0C:51:03:34:FE:ED:63
            X509v3 Authority Key Identifier:
                keyid:ED:40:B4:A9:17:52:42:77:66:C6:15:48:DE:D6:2F:F1:9E:BF:D8:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09c79d30288209739f9c6d166171b04bde05c914.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c7b1a5b9-b6a8-44eb-9a6c-23e41aaae47f/7329fa0f76d652ac89bcd23c5f975bc110e888eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c7b1a5b9-b6a8-44eb-9a6c-23e41aaae47f/09c79d30288209739f9c6d166171b04bde05c914.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:2f:65:82:ac:20:d6:82:41:26:cf:a6:6a:b6:31:44:a1:4b:
         68:c8:3f:61:8e:ac:6f:67:e3:0f:41:da:51:80:82:d3:51:31:
         63:2c:25:4e:fc:51:db:b1:2c:3d:ba:55:4e:0e:d3:c7:22:b7:
         65:96:7e:0b:85:30:62:75:71:da:03:ba:61:62:24:bd:75:91:
         1d:2e:2e:e4:c8:3c:06:a3:c3:9c:85:76:db:8a:da:ac:a3:3f:
         28:d6:24:1e:5e:3f:51:11:f2:a9:1c:f5:82:33:a6:d2:21:5f:
         a5:7a:38:a4:94:2b:23:ef:f5:39:d8:e0:4c:2c:1e:83:5b:05:
         57:80:f4:83:2c:86:eb:10:12:51:d5:0c:6a:32:91:a0:f2:b3:
         97:90:5e:cd:63:31:f3:ef:46:6d:49:56:07:52:c1:46:78:ea:
         f5:43:c6:f4:7a:19:71:0d:df:13:18:c7:6f:e2:67:ea:43:fe:
         67:2a:89:6a:88:27:67:fd:ee:08:da:81:81:4f:32:43:d9:c0:
         30:f2:d5:8d:b5:b1:dd:bc:93:87:da:ee:b8:51:f2:8e:87:d3:
         29:9a:d4:5b:2e:4f:94:71:82:7e:02:0a:92:da:5e:74:60:61:
         50:83:6a:10:88:bd:86:34:af:a3:1b:5f:31:ec:9b:76:26:d8:
         5a:46:27:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----