Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df8db7d6-1d2d-47c2-b5c1-f05f60e27deb/1467f7d68ddec01bd642c5ee51b1767dd59331fa.roa
File:                     1467f7d68ddec01bd642c5ee51b1767dd59331fa.roa (raw, json)
Hash identifier:          vPU6/nsDjWYXtvQF1Ek1UpQXHBUfBw2hz+JFTtoRTMs=
Subject key identifier:   BA:26:15:64:EE:2B:9E:13:EB:A8:0E:AB:B0:D1:52:83:63:A8:EB:5A
Certificate issuer:       /CN=08e5d5ba16af3e37e19c92b3d1d2702ab69929f4
Certificate serial:       1BFE1E
Authority key identifier: 77:F1:84:AE:EC:1F:E7:98:9F:6D:2F:63:52:97:45:EB:69:13:D6:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e5d5ba16af3e37e19c92b3d1d2702ab69929f4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/df8db7d6-1d2d-47c2-b5c1-f05f60e27deb/1467f7d68ddec01bd642c5ee51b1767dd59331fa.roa
Signing time:             Thu 12 Jan 2023 23:22:34 +0000
ROA not before:           Tue 23 Mar 2021 14:36:18 +0000
ROA not after:            Tue 24 Mar 2026 14:36:18 +0000
asID:                     272929
IP address blocks:        45.167.248.0/22 maxlen: 24
                          2803:cda0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1834526 (0x1bfe1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e5d5ba16af3e37e19c92b3d1d2702ab69929f4
        Validity
            Not Before: Mar 23 14:36:18 2021 GMT
            Not After : Mar 24 14:36:18 2026 GMT
        Subject: CN=1467f7d68ddec01bd642c5ee51b1767dd59331fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:46:a4:d3:1d:41:c5:41:da:df:92:1b:47:49:
                    37:64:d8:b1:6e:e2:cb:91:b1:a2:11:98:a5:02:9d:
                    3b:d1:86:d4:86:22:fa:d0:4c:c2:ba:c3:2a:00:ab:
                    a3:e9:c5:e5:eb:f5:5e:11:29:ab:f7:f9:8f:bd:4c:
                    30:a9:ec:1f:73:8d:03:21:9e:68:01:65:5c:1e:c6:
                    97:c2:a7:07:5c:e4:3e:0a:d6:22:8c:46:a1:d3:08:
                    66:f1:18:09:5a:b6:97:5e:f4:45:f7:ad:0e:db:46:
                    83:96:90:99:f9:05:34:49:37:a4:ee:00:84:34:d7:
                    4d:c4:86:d3:a8:18:50:58:87:a8:4e:05:84:cf:14:
                    d3:5d:1d:78:f8:1e:d3:8e:57:e7:fd:a6:b5:8e:65:
                    2d:92:85:18:9d:82:95:2b:77:74:a4:bf:c6:a5:63:
                    33:82:ca:9d:ae:34:9d:e3:f2:d6:b2:09:2c:a8:20:
                    69:7c:ca:f4:63:c5:10:f0:ed:55:52:7b:0c:26:29:
                    45:fa:42:ca:de:f9:06:38:85:ef:85:ea:02:02:8d:
                    c8:02:36:09:dc:cb:aa:fc:fc:99:b8:25:92:86:4f:
                    c1:87:8b:ea:33:37:31:56:8a:e2:a5:da:3d:39:42:
                    1a:27:01:c4:b7:c6:d3:2d:8e:99:15:3c:ea:85:ec:
                    e8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:26:15:64:EE:2B:9E:13:EB:A8:0E:AB:B0:D1:52:83:63:A8:EB:5A
            X509v3 Authority Key Identifier:
                keyid:77:F1:84:AE:EC:1F:E7:98:9F:6D:2F:63:52:97:45:EB:69:13:D6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e5d5ba16af3e37e19c92b3d1d2702ab69929f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df8db7d6-1d2d-47c2-b5c1-f05f60e27deb/1467f7d68ddec01bd642c5ee51b1767dd59331fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/df8db7d6-1d2d-47c2-b5c1-f05f60e27deb/08e5d5ba16af3e37e19c92b3d1d2702ab69929f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.248.0/22
                IPv6:
                  2803:cda0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:76:55:4e:a9:27:89:7a:4f:68:be:9c:12:ce:ce:97:76:1d:
         13:42:16:34:7f:4d:5b:a7:7e:29:f0:34:3f:98:46:31:58:b6:
         d9:fa:e4:51:a7:18:47:c3:80:96:ff:7f:f4:24:22:6c:76:8f:
         c3:02:33:dc:e1:2b:ad:94:3c:1f:28:81:23:3a:f4:42:85:82:
         62:67:44:da:11:cb:1b:53:e0:5c:0a:5c:52:05:8f:fb:49:a9:
         d2:83:4d:72:33:fe:11:ad:55:ae:3a:f5:39:6d:35:28:e9:86:
         d0:91:72:5e:ab:2b:98:50:8c:41:1d:6f:64:79:18:0d:f5:37:
         23:c7:78:4a:85:67:07:24:2c:fb:2a:17:f9:98:24:1d:38:7b:
         e1:80:d3:6e:a6:d9:be:11:f1:41:32:53:ed:aa:22:55:f3:ce:
         02:79:2b:25:0f:53:1b:7d:bb:d3:73:95:a6:b4:7a:85:eb:48:
         b2:d0:9c:90:0f:af:b6:f9:c3:20:71:d4:4f:7c:92:0b:c3:ca:
         ab:4d:39:68:30:40:0b:d6:15:ec:a6:06:23:55:89:bf:74:a9:
         a6:18:f0:a7:02:3e:5f:29:c8:e5:f1:4c:b1:5f:c8:5d:00:d0:
         d7:4c:80:1e:71:a3:f2:bb:39:43:b5:34:66:b7:83:4e:5a:db:
         32:aa:00:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----