Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/f05d89e92ad75fd06b96462c1f3e42abd78f625a.roa
File:                     f05d89e92ad75fd06b96462c1f3e42abd78f625a.roa (raw, json)
Hash identifier:          Fd/G1Pr3Rb69oGL+A8CcxIbFNxFbW5Aj+0+x1ajc0h4=
Subject key identifier:   67:7F:4D:93:E4:6E:00:A8:F7:9D:A2:49:37:CA:25:EE:C3:E7:45:6B
Certificate issuer:       /CN=aaf4571e3a5915e171eb5856008590d6211ff016
Certificate serial:       125711
Authority key identifier: 81:0F:F0:61:CE:B2:2C:B9:C7:D3:22:2D:E9:76:43:7C:B8:C3:FA:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aaf4571e3a5915e171eb5856008590d6211ff016.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/f05d89e92ad75fd06b96462c1f3e42abd78f625a.roa
Signing time:             Wed 24 May 2023 08:30:01 +0000
ROA not before:           Tue 23 May 2023 08:30:01 +0000
ROA not after:            Thu 22 May 2025 08:30:01 +0000
asID:                     204300
IP address blocks:        45.4.204.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1201937 (0x125711)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf4571e3a5915e171eb5856008590d6211ff016
        Validity
            Not Before: May 23 08:30:01 2023 GMT
            Not After : May 22 08:30:01 2025 GMT
        Subject: CN=f05d89e92ad75fd06b96462c1f3e42abd78f625a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b1:26:fd:90:e9:fd:0a:15:c3:1b:2a:ad:96:
                    20:d5:6e:29:c1:4c:c4:62:0f:81:ff:d0:99:99:91:
                    17:a8:db:38:87:e9:22:ca:92:c1:71:a0:73:cf:ae:
                    9b:3f:a0:47:f9:f4:4c:d2:e2:3e:7e:d0:59:9e:6d:
                    ae:d1:8f:44:95:80:4e:b5:a7:cb:a9:36:62:9f:8d:
                    77:6a:08:b8:d7:74:da:87:6a:9f:2f:07:0b:ce:c6:
                    96:b1:f3:e5:24:68:bc:7b:20:6b:07:15:a0:65:b0:
                    ae:06:b5:8a:09:6a:30:1c:cb:fa:59:88:b5:f8:7a:
                    74:d7:41:13:5f:30:2f:a0:b4:a3:f7:31:29:13:f0:
                    5f:42:2b:85:cb:30:fa:8a:03:a8:d8:1e:97:0b:6d:
                    ea:b9:18:fa:35:dd:42:8e:95:39:0d:8c:60:ef:9e:
                    e5:01:05:eb:24:54:a9:36:52:43:bd:6f:e1:ae:d3:
                    db:d9:22:7d:14:5e:e5:e1:e1:15:65:dd:02:86:7f:
                    02:6b:0a:78:31:5b:4d:30:6a:b1:5f:93:7f:57:e8:
                    a1:8e:5f:09:4d:d4:03:13:af:47:33:da:42:d1:6a:
                    72:1e:ae:5c:da:15:67:de:ef:1f:4a:7f:04:d4:04:
                    0f:5c:1f:dc:dd:75:3b:55:05:cd:58:fd:78:c7:ad:
                    ee:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7F:4D:93:E4:6E:00:A8:F7:9D:A2:49:37:CA:25:EE:C3:E7:45:6B
            X509v3 Authority Key Identifier:
                keyid:81:0F:F0:61:CE:B2:2C:B9:C7:D3:22:2D:E9:76:43:7C:B8:C3:FA:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aaf4571e3a5915e171eb5856008590d6211ff016.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/f05d89e92ad75fd06b96462c1f3e42abd78f625a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/aaf4571e3a5915e171eb5856008590d6211ff016.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:53:7d:43:b4:ae:d5:6b:3c:95:e7:28:28:ad:c1:83:4a:61:
         8a:99:70:a2:73:9a:46:60:ff:fc:5d:11:3c:8c:c6:2d:cd:b1:
         c3:5b:7a:ce:e2:9a:e0:76:63:38:25:a9:43:69:c4:2b:12:03:
         05:da:f9:98:ee:a1:96:0d:5b:2a:2b:fa:17:62:65:e8:b4:5e:
         50:de:2f:d4:59:bd:6c:f1:76:54:08:09:25:a1:90:23:ad:50:
         65:a1:30:a5:ca:3f:35:57:f2:66:01:ae:a5:f2:75:ec:25:d8:
         b5:28:a1:69:22:29:21:d8:c4:15:35:a1:cb:dc:36:9c:1c:67:
         21:7c:7e:91:cd:25:d5:95:30:f9:4e:51:39:7a:54:ac:ad:30:
         cf:9f:fb:75:0b:8c:ec:ae:5c:bb:bc:8f:aa:f6:2a:6d:80:bb:
         45:4e:c5:ec:e3:e4:9b:5b:d0:b3:d9:7a:95:35:ed:c3:7e:cb:
         88:79:7c:55:d2:93:7f:cf:e8:07:6a:08:01:41:8e:52:76:cf:
         d4:3c:2a:16:7b:dd:23:c6:0f:c9:8f:d7:b4:5e:92:4e:da:ed:
         f6:27:f2:26:93:36:11:6a:44:70:e7:d1:22:04:07:11:aa:f7:
         ee:a7:a8:5e:3c:45:96:d7:30:dd:ef:da:00:98:55:40:06:c1:
         32:b2:98:ba
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDElcRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFh
ZjQ1NzFlM2E1OTE1ZTE3MWViNTg1NjAwODU5MGQ2MjExZmYwMTYwHhcNMjMwNTIz
MDgzMDAxWhcNMjUwNTIyMDgzMDAxWjAzMTEwLwYDVQQDEyhmMDVkODllOTJhZDc1
ZmQwNmI5NjQ2MmMxZjNlNDJhYmQ3OGY2MjVhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgbEm/ZDp/QoVwxsqrZYg1W4pwUzEYg+B/9CZmZEXqNs4h+ki
ypLBcaBzz66bP6BH+fRM0uI+ftBZnm2u0Y9ElYBOtafLqTZin413agi413Tah2qf
LwcLzsaWsfPlJGi8eyBrBxWgZbCuBrWKCWowHMv6WYi1+Hp010ETXzAvoLSj9zEp
E/BfQiuFyzD6igOo2B6XC23quRj6Nd1CjpU5DYxg757lAQXrJFSpNlJDvW/hrtPb
2SJ9FF7l4eEVZd0Chn8Cawp4MVtNMGqxX5N/V+ihjl8JTdQDE69HM9pC0WpyHq5c
2hVn3u8fSn8E1AQPXB/c3XU7VQXNWP14x63udQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGd/TZPkbgCo952iSTfKJe7D50VrMB8GA1UdIwQYMBaAFIEP8GHOsiy5x9Mi
Lel2Q3y4w/ohMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWFmNDU3
MWUzYTU5MTVlMTcxZWI1ODU2MDA4NTkwZDYyMTFmZjAxNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTU0YjkzZjEtOTk1Zi00YzhhLTgxNWItYmIwMzA4
ZDg0OGNkL2YwNWQ4OWU5MmFkNzVmZDA2Yjk2NDYyYzFmM2U0MmFiZDc4ZjYyNWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNTRiOTNmMS05OTVmLTRjOGEtODE1Yi1iYjAz
MDhkODQ4Y2QvYWFmNDU3MWUzYTU5MTVlMTcxZWI1ODU2MDA4NTkwZDYyMTFmZjAx
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAS0EzDANBgkqhkiG9w0BAQsFAAOCAQEAQFN9Q7Su1Ws8leco
KK3Bg0phiplwonOaRmD//F0RPIzGLc2xw1t6zuKa4HZjOCWpQ2nEKxIDBdr5mO6h
lg1bKiv6F2Jl6LReUN4v1Fm9bPF2VAgJJaGQI61QZaEwpco/NVfyZgGupfJ17CXY
tSihaSIpIdjEFTWhy9w2nBxnIXx+kc0l1ZUw+U5ROXpUrK0wz5/7dQuM7K5cu7yP
qvYqbYC7RU7F7OPkm1vQs9l6lTXtw37LiHl8VdKTf8/oB2oIAUGOUnbP1DwqFnvd
I8YPyY/XtF6STtrt9ifyJpM2EWpEcOfRIgQHEar37qeoXjxFltcw3e/aAJhVQAbB
MrKYug==
-----END CERTIFICATE-----