Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/4664afb6b35fb2884d0773dd969f136ef032d52e.roa
File:                     4664afb6b35fb2884d0773dd969f136ef032d52e.roa (raw, json)
Hash identifier:          r4mEo8HuW37ncI2MxRj03aos0kCL1/NJzj4F37z0+oY=
Subject key identifier:   1F:13:A2:A4:25:10:3F:AE:B9:BD:5B:49:07:3F:1F:02:7B:87:B8:33
Certificate issuer:       /CN=2ae468b8299e75fa14ef96ff11d36d88a9ac22a1
Certificate serial:       19FE03
Authority key identifier: 93:A1:D3:C1:5F:09:8E:01:D8:F9:B7:9C:0C:87:E7:E9:57:E9:82:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ae468b8299e75fa14ef96ff11d36d88a9ac22a1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/4664afb6b35fb2884d0773dd969f136ef032d52e.roa
Signing time:             Fri 01 Jul 2022 22:19:06 +0000
ROA not before:           Fri 01 Jul 2022 03:00:00 +0000
ROA not after:            Mon 01 Jul 2024 03:00:00 +0000
asID:                     265824
IP address blocks:        45.70.116.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1703427 (0x19fe03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ae468b8299e75fa14ef96ff11d36d88a9ac22a1
        Validity
            Not Before: Jul  1 03:00:00 2022 GMT
            Not After : Jul  1 03:00:00 2024 GMT
        Subject: CN=4664afb6b35fb2884d0773dd969f136ef032d52e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:33:c6:ac:9a:2e:a7:05:24:88:9d:7a:71:65:
                    ec:27:aa:38:e3:f8:66:86:06:99:9e:37:6b:3e:1c:
                    1e:73:09:21:b6:fc:0d:d1:ef:05:e8:47:d7:08:ef:
                    ef:0d:01:f7:99:3b:c7:2e:74:de:37:8c:e1:c5:f2:
                    a6:df:4b:f9:c2:47:56:42:f2:70:d0:1a:24:c2:f8:
                    c2:d0:cb:c1:ed:ff:9d:bd:fc:5b:67:52:ef:59:a9:
                    f9:ea:4d:81:05:13:2c:c9:e5:15:f7:22:9a:a9:b5:
                    3a:38:20:ec:0a:89:2c:07:32:7e:7a:dc:90:57:3f:
                    a9:22:42:54:84:6c:41:65:58:ee:e8:4b:f6:55:66:
                    89:17:f0:01:2f:39:4a:05:8a:ef:9a:aa:31:aa:1e:
                    50:e3:c3:84:c8:6a:ee:7e:33:83:bd:49:65:93:fb:
                    61:c3:32:cb:d3:31:ff:b4:7f:36:bb:25:47:dd:45:
                    ca:40:21:50:ed:8d:99:94:30:32:ec:1e:eb:f1:60:
                    ad:34:b5:2a:5d:a6:0d:d9:2f:4f:4d:e9:52:80:e5:
                    c3:b7:c3:04:5a:e6:36:0b:d8:38:72:5e:15:a9:94:
                    cc:eb:59:a8:cc:df:f0:d5:d2:56:36:56:48:5d:61:
                    a2:2f:f1:90:f9:e8:ae:2f:f9:58:fb:df:5d:76:b3:
                    1e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:13:A2:A4:25:10:3F:AE:B9:BD:5B:49:07:3F:1F:02:7B:87:B8:33
            X509v3 Authority Key Identifier:
                keyid:93:A1:D3:C1:5F:09:8E:01:D8:F9:B7:9C:0C:87:E7:E9:57:E9:82:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ae468b8299e75fa14ef96ff11d36d88a9ac22a1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/4664afb6b35fb2884d0773dd969f136ef032d52e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/2ae468b8299e75fa14ef96ff11d36d88a9ac22a1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:5f:5e:0a:17:a6:02:35:b5:0d:40:cb:40:c1:23:d4:59:f4:
         38:f5:73:ca:f7:88:0c:c0:01:d2:76:63:91:3b:d7:4c:25:77:
         6e:e7:04:cb:6b:bb:0d:65:e4:ea:a7:a5:f6:df:1a:0a:97:66:
         31:a0:17:e6:43:80:38:b6:23:cc:b8:1b:81:0a:1d:cb:af:bf:
         00:b0:3e:57:03:6f:3d:60:76:bb:ea:dc:09:fd:a8:de:38:54:
         65:2b:67:2c:93:73:25:ae:9a:e9:1c:e5:e7:6b:bf:f8:e9:a7:
         36:64:7c:24:bc:f1:c0:26:8b:ef:0f:df:c7:e4:c1:3a:07:d6:
         9c:f9:c2:57:1d:aa:85:4b:6f:97:07:b5:40:fd:4e:13:49:4c:
         44:c4:17:ed:19:82:bd:a4:a2:ad:59:a7:e5:f2:ee:71:0e:60:
         03:9a:64:75:4a:08:d8:17:b1:f8:1e:11:c0:7c:a7:13:2a:d2:
         e6:3d:73:f9:7c:99:ad:60:40:9a:de:07:d4:b7:f3:b2:4e:4c:
         69:ef:6f:3e:69:aa:75:51:79:3f:33:78:bc:87:fc:1d:38:9e:
         ef:f6:ec:44:51:41:05:12:42:1b:4e:57:78:88:21:16:f7:f2:
         bd:c6:fa:67:ae:d9:7b:c2:e3:db:63:b2:d0:c8:d3:53:a5:50:
         04:1e:3f:97
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGf4DMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJh
ZTQ2OGI4Mjk5ZTc1ZmExNGVmOTZmZjExZDM2ZDg4YTlhYzIyYTEwHhcNMjIwNzAx
MDMwMDAwWhcNMjQwNzAxMDMwMDAwWjAzMTEwLwYDVQQDEyg0NjY0YWZiNmIzNWZi
Mjg4NGQwNzczZGQ5NjlmMTM2ZWYwMzJkNTJlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgTPGrJoupwUkiJ16cWXsJ6o44/hmhgaZnjdrPhwecwkhtvwN
0e8F6EfXCO/vDQH3mTvHLnTeN4zhxfKm30v5wkdWQvJw0BokwvjC0MvB7f+dvfxb
Z1LvWan56k2BBRMsyeUV9yKaqbU6OCDsCoksBzJ+etyQVz+pIkJUhGxBZVju6Ev2
VWaJF/ABLzlKBYrvmqoxqh5Q48OEyGrufjODvUllk/thwzLL0zH/tH82uyVH3UXK
QCFQ7Y2ZlDAy7B7r8WCtNLUqXaYN2S9PTelSgOXDt8MEWuY2C9g4cl4VqZTM61mo
zN/w1dJWNlZIXWGiL/GQ+eiuL/lY+99ddrMeWQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFB8ToqQlED+uub1bSQc/HwJ7h7gzMB8GA1UdIwQYMBaAFJOh08FfCY4B2Pm3
nAyH5+lX6YKhMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmFlNDY4
YjgyOTllNzVmYTE0ZWY5NmZmMTFkMzZkODhhOWFjMjJhMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTYwYTJkMDgtOTdiMS00OTY2LTllNzYtZjgxZDYz
OWNmMGI4LzQ2NjRhZmI2YjM1ZmIyODg0ZDA3NzNkZDk2OWYxMzZlZjAzMmQ1MmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNjBhMmQwOC05N2IxLTQ5NjYtOWU3Ni1mODFk
NjM5Y2YwYjgvMmFlNDY4YjgyOTllNzVmYTE0ZWY5NmZmMTFkMzZkODhhOWFjMjJh
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi1GdDANBgkqhkiG9w0BAQsFAAOCAQEANF9eChemAjW1DUDL
QMEj1Fn0OPVzyveIDMAB0nZjkTvXTCV3bucEy2u7DWXk6qel9t8aCpdmMaAX5kOA
OLYjzLgbgQody6+/ALA+VwNvPWB2u+rcCf2o3jhUZStnLJNzJa6a6Rzl52u/+Omn
NmR8JLzxwCaL7w/fx+TBOgfWnPnCVx2qhUtvlwe1QP1OE0lMRMQX7RmCvaSirVmn
5fLucQ5gA5pkdUoI2Bex+B4RwHynEyrS5j1z+XyZrWBAmt4H1Lfzsk5Mae9vPmmq
dVF5PzN4vIf8HTie7/bsRFFBBRJCG05XeIghFvfyvcb6Z67Ze8Lj22Oy0MjTU6VQ
BB4/lw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:56 2023 by rpki-client on console-ams.rpki-client.org