Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/9e0faf191e939e5ba9a4161fe23eeb4135b9c120.roa
File:                     9e0faf191e939e5ba9a4161fe23eeb4135b9c120.roa (raw, json)
Hash identifier:          MqZrWYsoKi5anfXe4seDtQePaHpmIE4X3q1mvN13TfU=
Subject key identifier:   8B:4A:CF:82:34:D4:DB:4C:1F:3F:31:44:FC:63:87:68:C1:9D:CA:5E
Certificate issuer:       /CN=aaf4571e3a5915e171eb5856008590d6211ff016
Certificate serial:       125C55
Authority key identifier: 81:0F:F0:61:CE:B2:2C:B9:C7:D3:22:2D:E9:76:43:7C:B8:C3:FA:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aaf4571e3a5915e171eb5856008590d6211ff016.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/9e0faf191e939e5ba9a4161fe23eeb4135b9c120.roa
Signing time:             Wed 24 May 2023 08:30:02 +0000
ROA not before:           Tue 23 May 2023 08:30:02 +0000
ROA not after:            Thu 22 May 2025 08:30:02 +0000
asID:                     204300
IP address blocks:        45.4.204.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1203285 (0x125c55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf4571e3a5915e171eb5856008590d6211ff016
        Validity
            Not Before: May 23 08:30:02 2023 GMT
            Not After : May 22 08:30:02 2025 GMT
        Subject: CN=9e0faf191e939e5ba9a4161fe23eeb4135b9c120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6c:16:94:73:e1:ec:92:2f:e5:d5:4c:cd:21:
                    dc:e2:d3:93:3b:b6:8e:e5:ac:8f:c2:e2:2f:08:4e:
                    0a:a1:6c:06:46:4d:85:0c:6a:d2:84:74:77:bf:df:
                    dd:de:fa:b4:cc:a1:dd:a8:ea:98:3a:08:7c:b4:59:
                    73:db:22:d9:23:27:36:9b:80:6f:86:e1:4d:16:84:
                    53:80:b1:3f:ee:59:8e:8b:4a:ad:ad:78:7e:14:99:
                    d2:0d:ef:62:98:cc:c7:4a:8d:d1:04:7c:08:31:52:
                    dd:f1:de:80:a5:3c:91:98:ce:bd:ec:e4:13:5b:17:
                    a0:76:24:99:5a:2a:d5:e4:9a:2e:1f:3b:2e:74:d6:
                    e0:b6:d2:6a:5e:c5:e8:da:bd:18:1d:b7:8f:b6:c8:
                    44:9f:a3:d5:cf:c7:14:49:f3:ba:d3:b5:c6:39:2b:
                    a9:d4:3b:88:98:d9:60:2c:54:52:60:de:d8:bc:89:
                    69:87:00:29:9c:1a:55:29:c4:52:fc:13:9d:ba:cc:
                    a9:2d:9a:54:8b:55:4d:34:7c:ca:3e:de:fd:64:bb:
                    a4:a7:81:a3:fd:f3:fa:a1:77:d8:e7:3e:f6:c5:c8:
                    ad:24:f1:96:aa:36:0d:13:75:8e:46:b6:a0:86:ce:
                    d0:66:a1:62:0e:d6:0a:b1:d4:91:02:d7:03:99:a9:
                    5a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4A:CF:82:34:D4:DB:4C:1F:3F:31:44:FC:63:87:68:C1:9D:CA:5E
            X509v3 Authority Key Identifier:
                keyid:81:0F:F0:61:CE:B2:2C:B9:C7:D3:22:2D:E9:76:43:7C:B8:C3:FA:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aaf4571e3a5915e171eb5856008590d6211ff016.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/9e0faf191e939e5ba9a4161fe23eeb4135b9c120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/aaf4571e3a5915e171eb5856008590d6211ff016.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:b8:a1:cc:0f:64:f8:1e:b6:dc:89:02:61:b5:f6:e5:bc:fa:
         65:09:f8:a5:93:d7:07:b7:1c:2c:6d:e9:83:c4:bb:cc:06:19:
         90:36:d6:20:f2:16:b4:09:21:49:40:0f:0b:9d:83:96:e7:9e:
         84:87:e3:81:75:b7:a9:51:2e:e5:d6:62:8b:6b:e0:bf:1b:2c:
         ea:e6:67:74:d7:81:30:19:72:0e:a0:a8:aa:0e:92:42:7d:bf:
         5f:5d:5b:ca:a8:cc:6d:0d:47:78:9a:c1:b4:6e:eb:ce:1c:19:
         2d:f4:30:21:05:6c:95:e3:06:fe:6e:db:25:73:f7:1b:54:e3:
         f0:e6:ba:b2:b1:b9:b7:e4:a8:ed:6c:20:bb:9d:91:1c:16:45:
         a6:57:3a:87:a2:07:c5:d3:be:30:1e:36:4d:df:58:86:01:ca:
         b3:80:6a:03:1d:e5:24:09:9a:da:ff:04:6d:af:7c:96:2b:09:
         65:c8:29:b8:ba:84:1a:2e:1b:28:02:9c:7d:1a:df:c6:5a:bb:
         0a:14:1c:c1:1e:24:c2:6b:5b:9b:4e:f1:38:ce:d5:74:a3:22:
         70:84:57:c6:de:ab:e9:e2:34:67:cd:56:3e:78:da:7a:97:48:
         e2:03:15:b2:3e:15:20:e4:1c:da:57:54:34:83:04:09:38:c7:
         7d:83:bd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----