Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/b55a71be1a64884f5a892c7f302ad7d5f53f4dad.roa
File:                     b55a71be1a64884f5a892c7f302ad7d5f53f4dad.roa (raw, json)
Hash identifier:          ze7LaBa4kbdc3RggGgxp8TAolx4hALEOE4zjYh9Dbh8=
Subject key identifier:   4E:0B:58:19:8D:C3:33:39:A7:90:1F:8B:57:52:56:77:F4:61:99:89
Certificate issuer:       /CN=2ae468b8299e75fa14ef96ff11d36d88a9ac22a1
Certificate serial:       206FE5
Authority key identifier: 93:A1:D3:C1:5F:09:8E:01:D8:F9:B7:9C:0C:87:E7:E9:57:E9:82:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ae468b8299e75fa14ef96ff11d36d88a9ac22a1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/b55a71be1a64884f5a892c7f302ad7d5f53f4dad.roa
Signing time:             Thu 09 Mar 2023 21:19:43 +0000
ROA not before:           Wed 08 Mar 2023 21:18:54 +0000
ROA not after:            Sun 09 Mar 2025 22:18:54 +0000
asID:                     265823
IP address blocks:        45.70.116.0/22 maxlen: 24
                          2803:d420::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2125797 (0x206fe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ae468b8299e75fa14ef96ff11d36d88a9ac22a1
        Validity
            Not Before: Mar  8 21:18:54 2023 GMT
            Not After : Mar  9 22:18:54 2025 GMT
        Subject: CN=b55a71be1a64884f5a892c7f302ad7d5f53f4dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:63:01:1b:fb:a7:cb:6a:b1:57:2d:be:37:45:
                    41:35:b3:79:44:24:ac:03:bb:1f:99:f4:36:4b:6f:
                    a4:43:af:8c:6d:48:53:64:26:44:c4:0e:c1:35:40:
                    0c:df:cf:59:42:50:f2:20:17:b8:c6:c9:b4:24:55:
                    e5:00:9c:d5:7e:a2:04:b0:6b:00:1f:dc:e0:fd:24:
                    51:65:62:46:1b:37:5a:14:3e:01:52:a5:41:3b:4a:
                    26:0b:54:2a:98:51:68:f2:b7:d5:a6:05:aa:82:91:
                    0b:6b:87:37:10:07:1f:3b:75:d6:66:4b:33:ec:85:
                    03:87:e2:07:f7:8b:17:48:9b:ce:b8:db:84:be:87:
                    fc:f5:4c:39:81:60:cd:9a:cc:9f:92:82:33:a3:4f:
                    3a:51:17:b1:e5:b3:55:32:e3:b8:f1:34:f9:92:44:
                    8a:a6:9e:76:4e:0f:f7:47:46:7b:3b:4b:01:43:c6:
                    33:ea:11:3b:4b:3d:3b:49:58:43:ae:7e:f1:30:b0:
                    36:42:4a:76:a3:70:d9:40:fc:c3:88:5d:ac:ea:24:
                    b9:2e:03:b6:3d:c1:29:72:b9:8f:72:77:65:97:25:
                    cf:30:1d:fc:70:60:63:14:36:b8:74:eb:90:ac:d4:
                    0d:e6:12:8d:80:08:b6:a7:4b:d7:7a:7c:4c:41:2a:
                    1c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0B:58:19:8D:C3:33:39:A7:90:1F:8B:57:52:56:77:F4:61:99:89
            X509v3 Authority Key Identifier:
                keyid:93:A1:D3:C1:5F:09:8E:01:D8:F9:B7:9C:0C:87:E7:E9:57:E9:82:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ae468b8299e75fa14ef96ff11d36d88a9ac22a1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/b55a71be1a64884f5a892c7f302ad7d5f53f4dad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/2ae468b8299e75fa14ef96ff11d36d88a9ac22a1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.116.0/22
                IPv6:
                  2803:d420::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:5c:3a:63:8b:6c:64:f5:5b:28:4c:2b:4b:ea:bc:45:fb:a2:
         0c:33:04:de:8b:1c:b0:d3:2e:06:af:3e:97:8a:e4:8e:db:36:
         35:ab:da:e6:29:9d:f1:c5:63:b0:4f:e1:b1:19:87:7d:ac:9b:
         01:a5:33:a2:0b:69:e5:f6:db:8b:77:0c:84:77:65:b5:40:c0:
         29:2d:8f:c2:cf:cb:7e:fc:eb:b2:46:2a:2f:c7:4d:ce:36:c0:
         a1:dc:be:8b:aa:b8:4f:3c:6c:51:c2:43:d3:7e:cb:0f:29:6b:
         6a:e3:0c:86:a2:35:3c:a9:30:f4:6f:50:b2:a3:11:6c:bb:65:
         28:20:70:36:f4:7e:50:d6:b2:40:bd:7b:b8:e1:98:4b:77:b5:
         15:e3:37:b4:02:8f:1c:dd:6e:24:6d:8c:d9:52:fb:4b:e7:91:
         80:ed:3a:44:6a:02:2e:66:9c:54:93:e2:ab:97:06:42:cb:63:
         60:a8:c4:65:04:3f:40:96:de:80:ee:0b:f2:b2:f3:a8:a4:cc:
         90:80:ba:0b:10:73:65:2d:65:92:4c:db:d3:d1:de:c3:b6:ed:
         0b:24:6e:1b:f0:8b:ef:05:c1:14:be:77:de:71:b9:f0:b0:aa:
         94:11:02:0c:23:95:0d:2f:ca:fd:42:e6:11:a0:e3:16:0e:4b:
         e8:7f:47:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----