Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ffd335cf-6190-403c-852a-7b4a4ff1859c/dc7d8f191bb6f43c66dc810c697ba701fb0d6e2c.roa
File:                     dc7d8f191bb6f43c66dc810c697ba701fb0d6e2c.roa (raw, json)
Hash identifier:          KovR1/yF6eEjxivFiKHns86hXVl2CaWKVwwG3aOM6g4=
Subject key identifier:   E9:09:E4:DB:8B:58:95:4D:00:22:97:AD:5C:B2:78:A6:37:47:E9:FF
Certificate issuer:       /CN=a568c9247534945780b8bc16b4a7698b9de06a94
Certificate serial:       0137B9
Authority key identifier: CD:3B:4F:80:BA:32:D5:16:95:A9:1B:9C:6C:2D:F5:50:58:9E:D1:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a568c9247534945780b8bc16b4a7698b9de06a94.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ffd335cf-6190-403c-852a-7b4a4ff1859c/dc7d8f191bb6f43c66dc810c697ba701fb0d6e2c.roa
Signing time:             Wed 24 Mar 2021 14:33:05 +0000
ROA not before:           Wed 24 Mar 2021 14:33:04 +0000
ROA not after:            Tue 24 Mar 2026 14:33:04 +0000
asID:                     266762
IP address blocks:        45.234.88.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jan 2024 16:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79801 (0x137b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a568c9247534945780b8bc16b4a7698b9de06a94
        Validity
            Not Before: Mar 24 14:33:04 2021 GMT
            Not After : Mar 24 14:33:04 2026 GMT
        Subject: CN=dc7d8f191bb6f43c66dc810c697ba701fb0d6e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d4:3b:c8:e8:34:78:26:51:60:29:bb:ff:ec:
                    57:e9:db:c1:ef:f0:9a:fb:8f:4f:bb:e9:55:2a:98:
                    bd:72:10:04:d4:5c:60:7c:e5:ea:8a:bc:b8:63:c0:
                    fa:be:6d:79:a1:29:0d:4c:fa:a0:dd:f6:47:86:4c:
                    ec:bc:68:0e:f0:a5:30:12:c7:b9:10:83:6e:fa:fb:
                    bc:8a:5c:37:56:43:36:f6:8c:72:4f:5b:7d:1a:86:
                    47:86:d6:be:ce:cf:38:3c:c1:ee:35:76:45:ae:9d:
                    13:7c:a7:01:ae:6c:a8:31:65:4b:e3:81:17:94:54:
                    f0:f5:e2:00:35:3f:08:ec:23:65:f6:d1:de:76:c0:
                    3c:41:9e:de:ae:f2:8b:60:84:d0:50:1c:7d:30:50:
                    91:fa:d6:1d:87:04:28:85:3d:a2:2c:6e:25:ab:b4:
                    37:2d:88:4e:28:e4:e0:59:2d:ed:fc:1b:85:31:ce:
                    7c:1c:24:75:f3:b0:27:d5:b3:b5:64:73:46:30:ff:
                    e9:d9:81:23:be:c8:9f:59:74:09:aa:ae:f1:d4:44:
                    58:22:aa:87:f0:e6:d9:7c:61:8f:8b:81:4c:c1:55:
                    40:38:e5:80:b4:3d:72:45:b6:e7:63:f3:09:99:98:
                    3f:10:fc:93:7c:79:d8:0d:94:5e:43:bb:b2:8b:ad:
                    f0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:09:E4:DB:8B:58:95:4D:00:22:97:AD:5C:B2:78:A6:37:47:E9:FF
            X509v3 Authority Key Identifier:
                keyid:CD:3B:4F:80:BA:32:D5:16:95:A9:1B:9C:6C:2D:F5:50:58:9E:D1:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a568c9247534945780b8bc16b4a7698b9de06a94.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ffd335cf-6190-403c-852a-7b4a4ff1859c/dc7d8f191bb6f43c66dc810c697ba701fb0d6e2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ffd335cf-6190-403c-852a-7b4a4ff1859c/a568c9247534945780b8bc16b4a7698b9de06a94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:01:d5:77:f3:58:8c:ec:72:29:2c:84:36:14:3c:04:af:81:
         99:4e:ec:55:50:30:0b:0b:21:d7:c4:bb:d2:75:5f:03:a8:65:
         97:d9:2d:7f:dd:f9:2c:66:22:d4:55:9e:7b:91:52:e0:61:ef:
         74:58:63:2e:97:62:eb:bc:24:c2:40:5c:e8:0d:20:0a:fa:4f:
         02:e6:63:f9:01:c5:40:16:ce:c3:c0:10:26:99:a7:c3:9e:01:
         2e:a4:ee:3a:7d:cf:5a:a2:36:36:ea:15:c5:2b:1a:b9:b2:43:
         a7:55:df:0a:68:d3:a1:a5:66:a9:3d:1d:52:ba:2d:cc:aa:06:
         06:89:a7:b0:aa:e9:2a:22:c3:17:52:b7:59:fc:d8:de:c5:68:
         99:77:5b:27:b0:94:18:01:e7:fa:06:3c:74:1b:10:f0:db:ab:
         64:79:24:f7:cc:c7:5f:6b:7e:f3:51:5a:3b:d1:69:dc:9d:59:
         43:ae:3a:db:26:4f:21:15:b8:3c:14:bf:48:0c:b0:a7:7f:0f:
         d4:01:2b:35:45:86:f7:ee:fe:1f:de:22:3d:c7:61:5a:36:6b:
         b3:08:33:0c:10:1b:60:e7:0f:1b:4f:17:7d:65:de:da:6a:b3:
         ce:8b:f4:a6:c3:c9:13:43:1a:82:63:79:46:12:f1:86:86:a8:
         75:d3:ea:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----