Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/fcfdfb62bd19b9568a2f2f9d91d502b4dd020f99.roa
File:                     fcfdfb62bd19b9568a2f2f9d91d502b4dd020f99.roa (raw, json)
Hash identifier:          MpQb2lKi+KlUIAwRte3t8DP1fyWr+6mZ+Ybb+dQCJy0=
Subject key identifier:   70:EB:36:A4:32:65:5B:5B:78:A7:53:D2:0C:D2:A5:69:9C:D1:93:B2
Certificate issuer:       /CN=2ae468b8299e75fa14ef96ff11d36d88a9ac22a1
Certificate serial:       1A6B18
Authority key identifier: 93:A1:D3:C1:5F:09:8E:01:D8:F9:B7:9C:0C:87:E7:E9:57:E9:82:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ae468b8299e75fa14ef96ff11d36d88a9ac22a1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/fcfdfb62bd19b9568a2f2f9d91d502b4dd020f99.roa
Signing time:             Thu 14 Jul 2022 01:30:12 +0000
ROA not before:           Wed 13 Jul 2022 03:00:00 +0000
ROA not after:            Sat 13 Jul 2024 03:00:00 +0000
asID:                     265824
IP address blocks:        45.70.117.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1731352 (0x1a6b18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ae468b8299e75fa14ef96ff11d36d88a9ac22a1
        Validity
            Not Before: Jul 13 03:00:00 2022 GMT
            Not After : Jul 13 03:00:00 2024 GMT
        Subject: CN=fcfdfb62bd19b9568a2f2f9d91d502b4dd020f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:aa:3c:ef:9a:b6:15:e6:d8:4b:27:8f:81:fe:
                    b2:1d:89:f3:e5:bd:8f:ab:7a:3d:9d:e5:1a:01:c8:
                    b6:90:3e:77:ab:49:7a:9a:bd:86:ee:7a:aa:6c:80:
                    77:08:cb:e3:b1:56:6a:7b:61:a4:7e:3e:35:20:c4:
                    fa:e3:18:bf:20:19:f7:63:92:12:b6:97:8f:11:74:
                    50:0f:39:10:12:c7:a0:13:a8:00:5c:d8:7e:fb:88:
                    34:d2:87:12:73:78:e1:e6:16:f7:4f:66:cd:5c:0c:
                    b2:cb:01:1c:a7:8d:85:e8:6d:c1:3c:2a:d0:92:c3:
                    a4:55:58:39:4c:b1:f7:f8:19:bd:11:1d:4e:69:3e:
                    48:d3:8e:e3:a8:6f:4c:9f:c2:3a:b8:ab:ea:d7:fd:
                    22:92:8f:16:6d:df:61:3d:0d:14:2a:26:87:7d:05:
                    06:25:6b:ac:9f:ac:6a:c2:ff:43:3f:08:dd:61:ae:
                    be:e8:ab:77:e1:ee:ff:a2:e4:2e:bb:43:89:c4:46:
                    e0:1a:90:b4:86:2d:d9:c3:2f:0b:d1:7e:a8:b1:99:
                    07:dc:15:ea:94:d3:bc:76:f3:99:97:d2:9c:23:78:
                    34:7e:4c:05:dd:c3:28:6d:8b:5e:44:6d:91:b9:29:
                    c6:94:a4:dc:d1:ac:c9:0f:a8:f1:5a:13:b0:68:f5:
                    64:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EB:36:A4:32:65:5B:5B:78:A7:53:D2:0C:D2:A5:69:9C:D1:93:B2
            X509v3 Authority Key Identifier:
                keyid:93:A1:D3:C1:5F:09:8E:01:D8:F9:B7:9C:0C:87:E7:E9:57:E9:82:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ae468b8299e75fa14ef96ff11d36d88a9ac22a1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/fcfdfb62bd19b9568a2f2f9d91d502b4dd020f99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/2ae468b8299e75fa14ef96ff11d36d88a9ac22a1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:bf:77:e9:7d:0f:02:a5:05:b7:bb:ca:75:e6:b7:ce:dd:93:
         6b:6c:9c:0f:9a:4f:53:6d:0e:50:ff:3c:7f:26:bd:c3:9c:cb:
         fa:48:8b:49:3e:c1:7f:ed:3e:60:28:c1:d2:06:9c:f9:20:ad:
         ce:2b:1e:44:6f:58:7e:10:06:82:25:6f:c2:0d:97:68:37:36:
         35:2e:65:e2:35:ef:4f:7a:4b:d9:82:9a:c9:cd:89:1d:aa:99:
         b8:ec:f1:97:8d:65:30:16:f8:3f:d9:a6:45:b6:9a:c2:58:03:
         46:4f:fe:38:16:71:d8:56:72:8a:4c:d0:fa:f6:f2:e6:17:c8:
         f2:ae:b8:eb:a4:8d:86:d5:bd:7e:ea:85:8b:9d:a7:20:58:47:
         4f:73:24:f8:79:7b:01:ca:54:b9:1a:d5:2d:37:20:71:4c:29:
         60:f7:3c:00:2d:15:45:7b:3f:5e:6d:1c:43:a6:f3:2a:5b:ed:
         70:dc:40:fc:fa:2f:4b:94:8f:cf:69:5d:e7:94:85:27:9d:f9:
         2a:f3:ec:cd:1c:b0:00:6e:aa:13:50:fb:6b:4c:f7:33:f7:54:
         7b:46:4e:a5:e8:d4:b0:2b:4f:87:8d:78:d3:c0:88:99:4b:bb:
         66:84:d9:9f:da:b0:4a:0c:12:3b:ec:f7:68:2e:17:e1:ce:af:
         ec:68:07:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----