Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/db4206eb7f863091baba138e25540232bc8dd6cb.roa
File:                     db4206eb7f863091baba138e25540232bc8dd6cb.roa (raw, json)
Hash identifier:          u8EE6z7bmsYipOG1+3EEOqXdRSKXfMtOX8nwXVjHlnM=
Subject key identifier:   8B:3D:18:98:33:B9:F4:FB:6E:3F:D4:14:F5:51:9B:6C:E1:5E:17:42
Certificate issuer:       /CN=581e0c9d08ecb217623b5290ee851242221cdc85
Certificate serial:       223693
Authority key identifier: 80:04:EA:0A:FB:6A:C0:26:B6:FE:AC:80:48:FD:11:65:E8:63:F9:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/581e0c9d08ecb217623b5290ee851242221cdc85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/db4206eb7f863091baba138e25540232bc8dd6cb.roa
Signing time:             Wed 05 Jul 2023 01:49:24 +0000
ROA not before:           Tue 04 Jul 2023 01:49:24 +0000
ROA not after:            Sat 05 Jul 2025 01:49:24 +0000
asID:                     52468
IP address blocks:        45.71.202.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2242195 (0x223693)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=581e0c9d08ecb217623b5290ee851242221cdc85
        Validity
            Not Before: Jul  4 01:49:24 2023 GMT
            Not After : Jul  5 01:49:24 2025 GMT
        Subject: CN=db4206eb7f863091baba138e25540232bc8dd6cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:24:49:58:cc:b1:cd:8c:de:7c:b7:ff:a0:34:
                    ee:d1:52:d0:22:d8:6d:b9:02:43:0e:84:68:cb:ea:
                    8d:ef:d0:7d:b9:71:64:ce:26:f0:87:eb:63:9e:7c:
                    98:42:a0:aa:10:ab:33:ca:48:6a:5d:9c:96:6c:00:
                    47:2d:8d:29:1a:71:f7:7c:9c:14:f2:68:c5:c0:82:
                    b7:45:7f:8c:fd:9b:9c:8c:48:59:78:93:05:90:7a:
                    97:4c:e2:2f:f3:70:3b:66:f0:23:f3:9b:2d:99:c4:
                    0b:57:4b:ba:9b:2f:ae:37:93:ff:85:fc:9e:7a:fd:
                    87:c0:88:83:87:46:2c:2c:05:ad:2e:e5:e7:fe:47:
                    a1:ea:30:b2:4c:db:49:a8:a6:52:06:90:b1:1a:23:
                    8a:4d:39:e9:8d:de:23:ef:5c:33:1e:02:36:69:14:
                    60:e1:1f:c7:bb:38:55:5c:71:21:45:94:e4:50:fc:
                    9b:8b:67:e3:0f:d2:de:e1:2a:f8:9e:b7:4c:28:eb:
                    e5:f7:f5:21:0b:5f:e1:27:8d:6e:55:7f:80:0f:1a:
                    26:ad:29:df:83:34:e7:90:f0:8f:eb:39:28:f0:cf:
                    a0:c8:5a:eb:9a:ac:96:e0:07:1c:1b:93:07:a1:5c:
                    d4:ee:59:6b:a7:ca:a2:f1:92:ee:fa:05:94:7c:bd:
                    20:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3D:18:98:33:B9:F4:FB:6E:3F:D4:14:F5:51:9B:6C:E1:5E:17:42
            X509v3 Authority Key Identifier:
                keyid:80:04:EA:0A:FB:6A:C0:26:B6:FE:AC:80:48:FD:11:65:E8:63:F9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/581e0c9d08ecb217623b5290ee851242221cdc85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/db4206eb7f863091baba138e25540232bc8dd6cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/581e0c9d08ecb217623b5290ee851242221cdc85.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:69:4b:91:00:3d:a5:d1:06:be:c6:a4:0d:89:1d:ed:7a:0b:
         e4:3a:d7:9a:e7:3e:56:28:03:8a:f4:ba:66:f4:b6:2d:bf:55:
         b8:40:f5:ad:5a:13:8b:0d:77:89:49:7d:26:74:24:e4:9a:f2:
         d3:17:8c:b0:9a:29:97:0a:9d:7c:5a:c2:ea:7e:18:80:3d:35:
         e8:c6:fd:26:b6:a6:2e:33:a3:e4:9a:c9:bd:1c:a8:6d:92:6a:
         8e:84:9b:0b:f0:cf:f5:71:32:d3:0d:d8:f7:d7:19:74:04:79:
         71:47:05:9b:19:51:3d:e2:cd:f0:6b:fe:39:d2:c3:85:e8:5d:
         8c:4a:12:28:3f:f3:47:5c:69:1f:b7:b6:df:1d:74:28:eb:59:
         0e:b9:c3:43:ce:d4:7b:c3:45:75:1e:89:db:0e:1b:69:01:27:
         be:ef:88:62:3b:ae:d5:bd:cf:1f:4d:4e:7d:f8:65:21:dc:f3:
         e4:43:b3:8f:bd:8c:ee:13:e1:da:f6:72:d4:6f:c6:bd:21:87:
         cf:0c:7b:39:2f:c3:33:da:27:b0:0d:99:a0:42:06:e4:2b:1d:
         46:cc:ba:d6:d1:c6:08:7f:7f:53:2e:f9:01:20:41:71:4a:6e:
         73:e5:de:c4:1d:75:16:76:70:df:70:0a:43:7c:c1:1d:af:fa:
         f1:b8:ec:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----