Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/de4e5620-d900-4606-8016-f3fea25ed051/69cf2ebde9f5cd172f1e8d30595dc563c4c92e03.roa
File:                     69cf2ebde9f5cd172f1e8d30595dc563c4c92e03.roa (raw, json)
Hash identifier:          pJmY/SL5VwC4hpwPGLfPllGvxd4C+XetIGYRrBtpvEE=
Subject key identifier:   70:40:E1:29:C0:EF:3B:3C:81:0E:8C:93:58:44:8D:29:DB:FD:4C:82
Certificate issuer:       /CN=2a96158adc7e9d3c9c541c010ab3e9435225e88f
Certificate serial:       058FAA
Authority key identifier: C1:8C:F1:B8:10:78:69:1C:C2:02:8C:1F:4A:A4:74:E8:BD:BC:0E:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a96158adc7e9d3c9c541c010ab3e9435225e88f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/de4e5620-d900-4606-8016-f3fea25ed051/69cf2ebde9f5cd172f1e8d30595dc563c4c92e03.roa
Signing time:             Tue 24 May 2022 00:52:35 +0000
ROA not before:           Sun 28 Nov 2021 03:00:00 +0000
ROA not after:            Tue 28 Nov 2023 03:00:00 +0000
asID:                     3257
IP address blocks:        45.238.156.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364458 (0x58faa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a96158adc7e9d3c9c541c010ab3e9435225e88f
        Validity
            Not Before: Nov 28 03:00:00 2021 GMT
            Not After : Nov 28 03:00:00 2023 GMT
        Subject: CN=69cf2ebde9f5cd172f1e8d30595dc563c4c92e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:38:2a:14:49:10:41:ae:6d:ad:21:89:fe:f7:
                    48:bf:00:78:98:50:3d:18:61:01:87:31:e8:66:9a:
                    d2:08:0c:c3:5b:57:c4:7f:73:b4:4d:f3:09:82:ea:
                    48:36:4b:ac:79:78:60:af:19:48:bf:ff:ee:17:29:
                    ea:13:f6:23:19:c8:de:6d:6c:61:1b:23:49:2e:40:
                    f0:24:b6:45:e5:c9:fb:2f:32:ac:09:bb:3c:48:96:
                    14:fe:af:31:f6:01:6d:9a:a6:59:f7:5e:df:17:f6:
                    72:db:68:2a:b8:71:50:6b:5f:84:6a:e8:ea:35:3b:
                    64:22:0f:28:8d:b5:52:d0:40:25:ec:74:68:8d:59:
                    15:bc:85:54:84:4d:bb:8f:91:ea:88:28:7d:c1:b5:
                    b1:bd:fb:3f:b0:d6:0b:fc:1a:0b:8d:72:6e:da:71:
                    63:d4:07:3d:91:b4:ca:2f:76:77:4e:d9:7f:35:ef:
                    49:8a:f0:16:d3:96:bd:f8:b2:f0:51:83:6f:71:1f:
                    12:f1:e3:44:b4:0d:aa:f6:7e:eb:64:73:c7:ca:ef:
                    f8:40:38:90:f1:e1:66:a2:52:19:76:f4:04:43:af:
                    42:7e:1b:f3:34:b5:31:f9:8c:ff:1f:2f:7e:6d:73:
                    33:17:c2:ec:c5:29:2b:82:5d:f7:ff:b9:db:fa:79:
                    06:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:40:E1:29:C0:EF:3B:3C:81:0E:8C:93:58:44:8D:29:DB:FD:4C:82
            X509v3 Authority Key Identifier:
                keyid:C1:8C:F1:B8:10:78:69:1C:C2:02:8C:1F:4A:A4:74:E8:BD:BC:0E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a96158adc7e9d3c9c541c010ab3e9435225e88f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/de4e5620-d900-4606-8016-f3fea25ed051/69cf2ebde9f5cd172f1e8d30595dc563c4c92e03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/de4e5620-d900-4606-8016-f3fea25ed051/2a96158adc7e9d3c9c541c010ab3e9435225e88f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:05:79:3f:bd:52:b8:52:b4:7d:2b:b5:64:42:a2:a0:13:ee:
         25:b6:81:9d:a6:dd:cc:f4:6b:4b:11:a9:07:8c:07:ad:d5:76:
         82:45:55:19:b2:a4:ec:d6:b7:89:65:f5:d9:8d:61:f3:a0:71:
         9f:a7:ac:44:60:16:64:d9:f2:6a:79:d4:fb:81:29:e6:49:22:
         6a:1c:66:24:0a:02:4a:44:7a:95:fd:7d:18:51:7a:ef:69:fe:
         67:17:cb:5b:00:dd:a4:49:5a:50:63:50:ff:39:b2:b5:f6:8e:
         ba:df:12:a5:0d:fc:97:c1:2a:7f:cf:30:b3:74:0a:bb:80:31:
         31:d6:60:9e:c2:e5:98:0d:e2:42:3f:bf:89:34:96:70:ea:05:
         f7:94:5b:02:3e:13:5d:d5:a6:f9:15:d3:97:3e:b0:06:a8:3c:
         ef:02:9c:b8:4f:31:57:c7:fd:8b:f4:87:9a:4c:99:f1:1b:82:
         04:66:fe:ce:83:3f:00:a3:6a:6d:fa:c6:2f:d8:3f:8e:bd:58:
         ab:f2:f8:8c:6d:50:0d:66:7d:bf:33:f7:a1:81:64:14:eb:02:
         4c:45:34:01:c1:34:f7:50:28:f2:ce:36:c9:a8:dc:be:ff:8a:
         81:8c:83:8b:58:8b:88:3c:2b:e7:2d:1e:c5:e8:55:01:07:e9:
         4d:99:70:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----