Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/dde3d06a58c2b08257fa335639894dfa1737af6f.roa
File:                     dde3d06a58c2b08257fa335639894dfa1737af6f.roa (raw, json)
Hash identifier:          htP4y1sV1lD4MCP3/VhsIILrWX2+HRllvSKdKrCbA2c=
Subject key identifier:   98:87:0D:82:E6:BF:3C:30:68:C0:80:E0:E8:58:6D:A2:B2:94:48:85
Certificate issuer:       /CN=4da24f95f9e14009eadf64141dc9a803fece4656
Certificate serial:       119C8E
Authority key identifier: 03:1E:4E:7D:08:6D:12:2E:55:02:C5:99:53:92:85:D1:D1:14:CC:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4da24f95f9e14009eadf64141dc9a803fece4656.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/dde3d06a58c2b08257fa335639894dfa1737af6f.roa
Signing time:             Sat 20 May 2023 08:30:03 +0000
ROA not before:           Fri 19 May 2023 08:30:03 +0000
ROA not after:            Sun 18 May 2025 08:30:03 +0000
asID:                     264758
IP address blocks:        45.173.212.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1154190 (0x119c8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4da24f95f9e14009eadf64141dc9a803fece4656
        Validity
            Not Before: May 19 08:30:03 2023 GMT
            Not After : May 18 08:30:03 2025 GMT
        Subject: CN=dde3d06a58c2b08257fa335639894dfa1737af6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:84:43:d5:2e:1f:98:78:ae:c0:cd:34:6f:3b:
                    1b:b9:6a:27:90:a9:46:fc:ba:d3:1a:2b:cb:36:99:
                    ef:64:b0:81:3d:d8:72:00:45:da:f5:0f:2f:2b:85:
                    58:cc:6b:ef:44:86:01:e7:d3:20:d6:f5:00:20:bd:
                    fd:75:6a:09:b0:ef:82:17:a9:c0:9d:e5:48:2d:a1:
                    52:56:33:6b:6c:23:e8:2a:26:cb:b8:fa:0d:12:cd:
                    9a:f4:11:10:0c:b7:be:cc:b7:8e:52:da:da:6d:a1:
                    64:b2:f9:35:4d:88:df:1e:c0:fa:31:bf:e0:7d:d7:
                    ca:fe:79:91:d1:f4:09:6a:d0:03:c4:69:bf:21:26:
                    04:ae:84:5d:b9:43:97:0b:f5:a8:a0:23:74:71:af:
                    96:9c:f9:1f:84:e2:3e:59:1a:3a:cb:af:20:44:e1:
                    e8:9f:89:80:bf:f4:31:88:d2:f1:cf:57:9a:6c:95:
                    3f:19:3c:97:5e:78:c3:94:70:ed:cd:a8:57:b9:73:
                    a7:85:af:d8:ac:ba:6c:0c:69:53:09:88:3f:f7:ad:
                    e3:b9:80:8e:9d:7a:fe:ac:aa:58:cc:3e:73:c0:c9:
                    43:47:73:a5:e5:da:12:8d:b3:fc:41:46:e8:e1:b0:
                    3e:bb:09:ee:65:7b:a9:c8:5e:74:95:75:7c:b6:97:
                    5f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:87:0D:82:E6:BF:3C:30:68:C0:80:E0:E8:58:6D:A2:B2:94:48:85
            X509v3 Authority Key Identifier:
                keyid:03:1E:4E:7D:08:6D:12:2E:55:02:C5:99:53:92:85:D1:D1:14:CC:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4da24f95f9e14009eadf64141dc9a803fece4656.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/dde3d06a58c2b08257fa335639894dfa1737af6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/4da24f95f9e14009eadf64141dc9a803fece4656.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:8e:4f:74:21:e3:ef:16:2e:02:87:4e:6d:32:7f:a7:19:24:
         cd:fb:cb:9d:4a:c4:be:2e:99:ed:c3:49:bc:66:e3:45:e5:e6:
         c8:89:d7:05:1b:c1:8a:79:9c:36:b5:cd:62:c2:e2:76:a1:89:
         f6:42:68:19:56:db:88:f6:3e:d6:03:9e:17:be:94:51:4b:37:
         18:77:1c:2f:2c:35:da:30:df:86:2a:e4:6e:f5:97:f5:51:24:
         54:8e:3c:6c:39:e8:96:59:bd:51:1c:d9:6e:d2:4a:2a:be:38:
         d1:57:f5:f9:3f:71:df:c2:b4:b9:35:77:c5:c7:72:65:d4:a7:
         37:da:b0:64:e2:52:9c:4c:16:70:2d:53:04:d9:e8:b9:69:b9:
         cb:f4:0b:f4:c7:d8:15:96:c0:1a:66:00:54:8c:5b:a9:36:b3:
         e3:71:95:b1:d5:fa:f7:0c:77:73:d8:81:cc:9d:4f:cf:cc:29:
         99:c5:a1:f2:8a:96:3e:70:36:71:8b:ce:e9:2f:8c:35:30:38:
         0e:23:f4:09:14:3e:7b:28:9c:85:7b:b3:16:4d:ad:31:9b:2d:
         f7:24:cf:27:14:ac:89:a0:eb:3b:30:a7:79:e6:07:0f:4e:8e:
         42:b9:b3:82:04:27:60:f3:24:f7:0b:d1:f8:d2:9b:b1:29:f4:
         98:c5:12:23
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEZyOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRk
YTI0Zjk1ZjllMTQwMDllYWRmNjQxNDFkYzlhODAzZmVjZTQ2NTYwHhcNMjMwNTE5
MDgzMDAzWhcNMjUwNTE4MDgzMDAzWjAzMTEwLwYDVQQDEyhkZGUzZDA2YTU4YzJi
MDgyNTdmYTMzNTYzOTg5NGRmYTE3MzdhZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnoRD1S4fmHiuwM00bzsbuWonkKlG/LrTGivLNpnvZLCBPdhy
AEXa9Q8vK4VYzGvvRIYB59Mg1vUAIL39dWoJsO+CF6nAneVILaFSVjNrbCPoKibL
uPoNEs2a9BEQDLe+zLeOUtrabaFksvk1TYjfHsD6Mb/gfdfK/nmR0fQJatADxGm/
ISYEroRduUOXC/WooCN0ca+WnPkfhOI+WRo6y68gROHon4mAv/QxiNLxz1eabJU/
GTyXXnjDlHDtzahXuXOnha/YrLpsDGlTCYg/963juYCOnXr+rKpYzD5zwMlDR3Ol
5doSjbP8QUbo4bA+uwnuZXupyF50lXV8tpdfZwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJiHDYLmvzwwaMCA4OhYbaKylEiFMB8GA1UdIwQYMBaAFAMeTn0IbRIuVQLF
mVOShdHRFMxgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGRhMjRm
OTVmOWUxNDAwOWVhZGY2NDE0MWRjOWE4MDNmZWNlNDY1Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWQzMjM5YTMtYzZhMS00ZGZiLWJkM2EtY2MyZjVi
NjM3YmNjL2RkZTNkMDZhNThjMmIwODI1N2ZhMzM1NjM5ODk0ZGZhMTczN2FmNmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZDMyMzlhMy1jNmExLTRkZmItYmQzYS1jYzJm
NWI2MzdiY2MvNGRhMjRmOTVmOWUxNDAwOWVhZGY2NDE0MWRjOWE4MDNmZWNlNDY1
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2t1DANBgkqhkiG9w0BAQsFAAOCAQEAZo5PdCHj7xYuAodO
bTJ/pxkkzfvLnUrEvi6Z7cNJvGbjReXmyInXBRvBinmcNrXNYsLidqGJ9kJoGVbb
iPY+1gOeF76UUUs3GHccLyw12jDfhirkbvWX9VEkVI48bDnollm9URzZbtJKKr44
0Vf1+T9x38K0uTV3xcdyZdSnN9qwZOJSnEwWcC1TBNnouWm5y/QL9MfYFZbAGmYA
VIxbqTaz43GVsdX69wx3c9iBzJ1Pz8wpmcWh8oqWPnA2cYvO6S+MNTA4DiP0CRQ+
eyichXuzFk2tMZst9yTPJxSsiaDrOzCneeYHD06OQrmzggQnYPMk9wvR+NKbsSn0
mMUSIw==
-----END CERTIFICATE-----