Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e88e5cb6-d396-4124-944b-b4bd37ac5ead/a0ae1dd515276674be363c5b41948831f12cb5e0.roa
File:                     a0ae1dd515276674be363c5b41948831f12cb5e0.roa (raw, json)
Hash identifier:          +k6v+O4aSwjUDdyFpc/94A8S7M9tnb5m8boE2ZVvhho=
Subject key identifier:   6A:0B:ED:FB:F0:D5:12:85:F2:7B:21:2F:8E:6F:6F:CE:98:32:A8:A5
Certificate issuer:       /CN=b0e08d14f156cb7201cd8c295802f6bef1fddd63
Certificate serial:       1152EE
Authority key identifier: E8:07:7F:DE:3B:0E:F4:94:96:7B:77:8C:52:48:F0:31:63:44:DD:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e08d14f156cb7201cd8c295802f6bef1fddd63.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e88e5cb6-d396-4124-944b-b4bd37ac5ead/a0ae1dd515276674be363c5b41948831f12cb5e0.roa
Signing time:             Tue 30 Nov 2021 02:20:54 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     269828
IP address blocks:        45.186.148.0/22 maxlen: 24
                          2803:3760::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1135342 (0x1152ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0e08d14f156cb7201cd8c295802f6bef1fddd63
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=a0ae1dd515276674be363c5b41948831f12cb5e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d8:07:56:8b:ec:59:cb:f9:bb:50:62:fd:27:
                    7c:e5:18:e2:0a:06:f5:fa:f7:08:6a:89:14:c2:e4:
                    3c:48:cd:50:de:71:ce:6e:ad:3a:9a:f1:ea:ce:01:
                    b9:ea:43:d3:4e:31:ba:6d:8c:bc:b4:1d:88:16:da:
                    65:7d:b1:1c:39:94:3b:89:84:d1:e8:73:75:ea:fc:
                    4a:8d:b1:f6:72:e1:d7:0e:ef:2d:c0:51:80:3d:62:
                    1b:a0:9a:16:41:87:60:08:3a:6c:9c:54:49:7e:72:
                    2d:4e:aa:fd:93:bc:e6:0b:c2:af:7b:47:24:f0:06:
                    a7:2d:28:35:90:fd:fe:dc:ab:0e:b1:b5:fc:06:51:
                    6a:b8:27:88:0c:08:50:99:1f:bc:fc:a9:f2:99:47:
                    94:08:e6:cf:20:43:d7:09:b1:7f:13:07:10:bf:f6:
                    a3:1b:4e:0f:00:0b:95:03:6f:7d:97:1f:2a:b0:c2:
                    d0:64:55:04:c9:05:6f:99:28:6f:f1:95:52:16:fe:
                    b9:db:0a:03:c4:d6:3a:4e:1c:60:58:a0:fa:43:91:
                    eb:e9:e8:9b:0f:2b:46:7b:ea:df:2b:35:8c:b2:a0:
                    6b:80:a6:31:50:38:30:d2:db:94:bb:78:79:8b:61:
                    90:d8:54:c8:cb:43:df:a3:0f:12:e5:eb:54:2c:c6:
                    98:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0B:ED:FB:F0:D5:12:85:F2:7B:21:2F:8E:6F:6F:CE:98:32:A8:A5
            X509v3 Authority Key Identifier:
                keyid:E8:07:7F:DE:3B:0E:F4:94:96:7B:77:8C:52:48:F0:31:63:44:DD:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e08d14f156cb7201cd8c295802f6bef1fddd63.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e88e5cb6-d396-4124-944b-b4bd37ac5ead/a0ae1dd515276674be363c5b41948831f12cb5e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e88e5cb6-d396-4124-944b-b4bd37ac5ead/b0e08d14f156cb7201cd8c295802f6bef1fddd63.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.148.0/22
                IPv6:
                  2803:3760::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:9f:6d:cc:f3:08:3b:5c:b8:de:63:cb:a8:5f:9a:2b:ad:ad:
         27:ce:6a:5e:7b:3b:b0:6d:f9:e4:81:2e:9d:79:64:2c:4e:84:
         88:5f:52:d2:08:7c:85:82:f6:81:d4:24:f2:27:a5:2e:dd:65:
         c1:82:7c:0e:17:8f:a0:8a:8a:b9:24:fa:8e:51:54:fa:43:bb:
         24:16:a8:8e:2d:4b:e1:88:f8:00:71:d9:7e:63:c7:35:a5:a5:
         5b:59:a2:0c:13:f9:6c:4f:63:96:06:a5:8a:4a:25:26:7f:c3:
         08:e3:94:74:e4:c5:c2:0d:ed:26:2a:58:77:ff:af:66:71:dc:
         a6:f3:c0:ad:af:41:87:7c:10:51:1a:c0:56:a6:3e:66:32:d6:
         34:ac:15:b5:b2:99:15:a5:55:44:98:3f:33:ab:1d:5a:f3:e6:
         22:44:68:bc:64:7c:72:d6:15:65:cd:d5:8a:29:ec:39:87:39:
         68:71:34:fc:42:70:69:5e:f7:c0:09:11:7f:0a:1a:d7:56:a4:
         7d:ba:ea:58:d8:98:eb:16:b4:de:0b:fc:54:2e:03:55:51:e4:
         cd:c2:34:7a:a0:c5:19:16:72:58:0f:f9:fa:74:1b:59:1a:b6:
         db:40:80:82:13:c4:e2:39:a4:29:bc:60:8f:c1:8d:5b:2f:f3:
         c7:66:db:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----