Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/0fea5366b7d6166663bca88a3d9e35e6bdb9c01f.roa
File:                     0fea5366b7d6166663bca88a3d9e35e6bdb9c01f.roa (raw, json)
Hash identifier:          RqqLbC8KoFi1y5IaXC3pH7JasZ9iXFGCCaivi7lOD/8=
Subject key identifier:   54:79:51:15:FE:43:51:89:A6:4F:09:6B:60:3E:75:AB:05:93:9E:B0
Certificate issuer:       /CN=2ae468b8299e75fa14ef96ff11d36d88a9ac22a1
Certificate serial:       1A652B
Authority key identifier: 93:A1:D3:C1:5F:09:8E:01:D8:F9:B7:9C:0C:87:E7:E9:57:E9:82:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ae468b8299e75fa14ef96ff11d36d88a9ac22a1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/0fea5366b7d6166663bca88a3d9e35e6bdb9c01f.roa
Signing time:             Thu 14 Jul 2022 01:29:48 +0000
ROA not before:           Wed 13 Jul 2022 03:00:00 +0000
ROA not after:            Sat 13 Jul 2024 03:00:00 +0000
asID:                     265824
IP address blocks:        45.70.118.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1729835 (0x1a652b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ae468b8299e75fa14ef96ff11d36d88a9ac22a1
        Validity
            Not Before: Jul 13 03:00:00 2022 GMT
            Not After : Jul 13 03:00:00 2024 GMT
        Subject: CN=0fea5366b7d6166663bca88a3d9e35e6bdb9c01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fe:c5:1f:c5:af:3e:5c:3d:74:52:55:5f:08:
                    cb:ad:2f:f8:a9:77:3f:aa:90:f6:cb:e4:2d:b0:6e:
                    a2:c3:1d:ed:3b:6c:77:48:99:a1:ae:9c:1f:1a:6e:
                    13:04:d6:bf:ce:f8:3a:1c:a9:82:9f:ec:d5:f5:b9:
                    49:db:fc:21:40:c8:7f:6a:61:75:46:4a:0f:36:5a:
                    4c:64:de:ec:4b:9f:d9:a8:24:ce:22:fa:1a:7d:52:
                    8d:fe:b8:f0:c7:2c:5c:58:f9:b3:9c:a6:0f:7c:2f:
                    a8:b3:b8:2d:97:7b:ac:81:2f:37:20:53:d2:43:df:
                    d7:fa:a1:03:1c:72:b4:82:f7:d6:fa:28:92:21:9d:
                    47:f4:c1:c6:d3:22:52:c8:c3:46:82:f8:0a:54:76:
                    d4:51:18:8a:ea:58:73:98:14:57:09:2a:f3:c7:fe:
                    d0:d3:5e:bd:78:d2:14:1d:95:cc:fd:8a:e9:51:ed:
                    3d:00:8b:d4:13:45:12:2e:4e:ef:c6:b3:c6:a6:aa:
                    47:a6:66:54:0b:f3:01:24:5c:01:2d:33:25:70:8c:
                    23:90:f3:eb:eb:b8:86:84:e0:23:e9:9c:3e:f7:5e:
                    55:9a:2a:85:5e:91:fb:2a:22:0b:dd:46:ce:71:1c:
                    e6:b4:16:0a:1b:05:a0:5d:c8:c2:93:5e:b6:08:1a:
                    f4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:79:51:15:FE:43:51:89:A6:4F:09:6B:60:3E:75:AB:05:93:9E:B0
            X509v3 Authority Key Identifier:
                keyid:93:A1:D3:C1:5F:09:8E:01:D8:F9:B7:9C:0C:87:E7:E9:57:E9:82:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ae468b8299e75fa14ef96ff11d36d88a9ac22a1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/0fea5366b7d6166663bca88a3d9e35e6bdb9c01f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/2ae468b8299e75fa14ef96ff11d36d88a9ac22a1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:d4:28:e9:79:6d:40:41:d9:0f:47:37:03:c7:67:c7:51:d6:
         1c:88:d8:42:0c:22:42:aa:ab:49:b4:bf:87:b1:ed:69:5f:ae:
         e9:2b:a1:ce:9d:de:57:f5:9f:f6:df:c2:ca:7b:76:64:18:b3:
         0f:90:a6:80:ea:1e:02:95:79:2d:f1:24:96:9b:74:49:58:1f:
         47:97:d9:7d:cd:02:50:9e:17:88:a7:a8:72:80:6c:42:81:0f:
         3b:91:c8:9b:61:6e:9b:dd:7e:ef:6a:e9:22:5b:f6:10:af:46:
         46:62:03:1d:11:b3:22:dd:a8:d2:39:e7:df:d4:d6:0d:96:73:
         bf:96:2d:42:30:f5:53:a5:f3:b7:d0:5a:ec:98:8e:09:bb:42:
         85:76:1d:72:9f:94:39:61:20:bc:09:34:b5:9b:9d:84:75:e2:
         d6:c4:90:ed:7b:ed:df:28:bc:cf:79:68:24:b7:a6:23:8e:10:
         a4:7c:06:b2:cc:74:28:a3:eb:1e:a4:af:e8:d8:a4:26:d0:67:
         ac:8b:5a:1a:52:05:e6:7d:28:2f:67:d9:aa:3f:2c:ee:4c:37:
         b1:98:39:0a:bf:92:6b:b2:86:1f:95:58:b8:12:9d:66:47:78:
         4d:ba:ba:dc:90:56:27:45:d4:16:70:9b:dc:41:03:31:fb:d9:
         13:54:af:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----