Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bea967e9-abe1-4265-9865-bb285b70783a/068b99c13fae1ece7c3cc9ebf5545a9b6cd77099.roa
File:                     068b99c13fae1ece7c3cc9ebf5545a9b6cd77099.roa (raw, json)
Hash identifier:          EyRTBBimo6aWTOTHLwSHGVPkDyzWOXpyS9/Skg7Lss8=
Subject key identifier:   7A:7E:2E:22:27:5C:36:A2:5E:4A:B9:DA:1A:27:59:DA:0F:5E:4D:FF
Certificate issuer:       /CN=6af2767e78b04e90ea78a02d316208e719f9cac2
Certificate serial:       010E87
Authority key identifier: F3:CA:2C:75:D0:AC:7E:2C:2B:14:7A:FE:D9:1F:7A:6D:3F:3B:22:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6af2767e78b04e90ea78a02d316208e719f9cac2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bea967e9-abe1-4265-9865-bb285b70783a/068b99c13fae1ece7c3cc9ebf5545a9b6cd77099.roa
Signing time:             Tue 27 Jun 2023 18:31:27 +0000
ROA not before:           Mon 26 Jun 2023 03:00:00 +0000
ROA not after:            Fri 27 Jun 2025 03:00:00 +0000
asID:                     64150
IP address blocks:        45.68.34.0/23 maxlen: 24
                          2801:145::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69255 (0x10e87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6af2767e78b04e90ea78a02d316208e719f9cac2
        Validity
            Not Before: Jun 26 03:00:00 2023 GMT
            Not After : Jun 27 03:00:00 2025 GMT
        Subject: CN=068b99c13fae1ece7c3cc9ebf5545a9b6cd77099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:30:f5:71:23:c8:4a:bc:e6:fa:0a:44:30:e1:
                    6e:40:80:eb:f3:07:39:37:28:0b:2b:97:31:ac:ac:
                    fc:2a:d5:00:f4:cb:aa:ce:a9:c5:61:20:df:40:b6:
                    63:52:1e:f3:9a:c7:35:9e:bf:4e:99:d9:a4:b1:ce:
                    5e:2f:05:85:d8:bf:63:4c:f6:7b:82:11:56:2c:78:
                    12:38:db:8a:14:07:bd:66:7d:ad:fa:59:88:63:d3:
                    77:b7:46:ce:b2:a6:79:02:98:76:3a:43:94:3d:15:
                    da:70:22:40:49:0e:01:05:a8:2a:12:65:93:78:af:
                    08:17:8b:cc:1e:d7:10:99:76:02:70:fd:e1:0a:3c:
                    19:59:fb:cd:15:27:e9:12:67:9b:97:e8:13:88:98:
                    05:c2:92:e1:38:26:c5:3b:db:1a:68:f9:ec:b7:2b:
                    8b:34:2c:74:26:e9:bb:db:d8:36:fc:b7:3c:a8:bc:
                    ea:23:92:94:c1:21:ab:7d:eb:d3:9e:f3:9a:f0:63:
                    23:e3:4c:ea:0c:50:ca:31:6b:26:e6:ab:05:f0:c1:
                    9b:5e:11:04:1f:60:67:95:91:17:0a:2b:01:22:76:
                    02:6c:b1:50:3f:a4:b1:96:b5:88:98:56:6a:01:8f:
                    ca:fb:39:3b:bd:dc:77:98:51:94:c9:d5:c9:88:6b:
                    a4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7E:2E:22:27:5C:36:A2:5E:4A:B9:DA:1A:27:59:DA:0F:5E:4D:FF
            X509v3 Authority Key Identifier:
                keyid:F3:CA:2C:75:D0:AC:7E:2C:2B:14:7A:FE:D9:1F:7A:6D:3F:3B:22:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6af2767e78b04e90ea78a02d316208e719f9cac2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bea967e9-abe1-4265-9865-bb285b70783a/068b99c13fae1ece7c3cc9ebf5545a9b6cd77099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bea967e9-abe1-4265-9865-bb285b70783a/6af2767e78b04e90ea78a02d316208e719f9cac2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.34.0/23
                IPv6:
                  2801:145::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:1c:27:97:a4:58:86:8e:a5:00:38:2b:8b:74:eb:c3:be:0d:
         88:20:91:68:85:39:62:ac:0b:44:24:48:14:f1:ac:cf:ac:c0:
         2c:f6:72:ad:5d:8c:d2:d8:44:05:9f:2e:e8:e1:9d:19:1c:02:
         ff:10:08:08:fe:c2:b4:c1:b2:58:1a:6d:e6:a9:f6:9f:ae:38:
         1f:1b:26:12:7d:5b:1e:ef:d7:7b:36:b2:cd:c8:1f:f2:40:9e:
         1a:c1:4b:47:d5:65:47:ae:ba:37:e9:8a:82:b4:ed:e8:07:ae:
         06:0b:f0:ec:fd:77:9d:d0:4e:63:7b:13:63:0d:69:c3:4e:a5:
         ec:bb:df:2f:73:de:85:9a:16:d4:a2:4f:a5:d4:2e:35:03:9a:
         65:d6:6b:57:da:f1:89:ad:d5:df:fe:66:86:77:09:b1:04:f4:
         77:93:c9:7a:1f:d2:7d:b9:b5:a5:ca:8e:2d:aa:f0:ea:4c:ad:
         7a:99:fe:20:17:ee:a7:27:96:22:57:3e:9f:7e:0d:01:cf:cf:
         7b:28:34:0c:6d:7c:43:54:06:fa:a8:53:f5:3e:e7:54:3b:c9:
         22:30:f3:52:99:8a:19:42:d5:2a:a7:31:50:37:c5:6a:d0:3e:
         5a:9b:1a:f7:ec:49:bf:c8:c3:34:85:85:df:5d:6d:cf:de:38:
         ee:d8:fa:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----