Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/02e922558a0a707449bd92d89ebf115beeeef6e0.roa
File:                     02e922558a0a707449bd92d89ebf115beeeef6e0.roa (raw, json)
Hash identifier:          JjUgn49xUP68WtMeWM3rwC2Z5bcdn+yFnoNWdG3rPas=
Subject key identifier:   D1:01:5C:27:E7:E1:29:F4:9C:47:DE:EE:58:67:2A:52:88:D5:30:49
Certificate issuer:       /CN=a2f5abf58c957a2bfcf51b30227c2c814dce93e0
Certificate serial:       0CD4CB
Authority key identifier: B5:30:E3:C7:88:9B:B3:9E:2E:C3:55:6C:A0:36:10:01:7A:E3:A5:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/02e922558a0a707449bd92d89ebf115beeeef6e0.roa
Signing time:             Wed 24 Mar 2021 14:42:27 +0000
ROA not before:           Wed 24 Mar 2021 14:42:27 +0000
ROA not after:            Tue 24 Mar 2026 14:42:27 +0000
asID:                     263725
IP address blocks:        45.166.94.0/24 maxlen: 24
                          45.166.95.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 840907 (0xcd4cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2f5abf58c957a2bfcf51b30227c2c814dce93e0
        Validity
            Not Before: Mar 24 14:42:27 2021 GMT
            Not After : Mar 24 14:42:27 2026 GMT
        Subject: CN=02e922558a0a707449bd92d89ebf115beeeef6e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:70:d2:28:1d:09:0b:3c:bb:2c:22:25:05:c3:
                    d6:74:e3:ea:a3:a9:cf:9b:fc:fa:ed:52:a2:a6:9f:
                    45:64:92:26:a1:e9:0b:09:5a:cc:ad:9d:56:6e:cf:
                    40:ac:44:f9:13:31:2e:91:fc:2b:50:9b:79:db:26:
                    de:29:cc:35:13:1c:f4:68:82:e4:b8:f2:e0:4a:d0:
                    82:75:5e:18:dc:d1:56:ae:b0:1c:a0:78:f7:31:e8:
                    7c:45:3b:ed:09:e2:44:a7:0c:79:a4:39:28:fa:cf:
                    17:a4:7d:83:25:80:dc:26:2e:30:c4:ec:73:eb:e2:
                    99:fd:54:41:34:8a:d9:c4:b9:66:9a:86:97:ad:cd:
                    ee:d5:c3:35:be:cb:80:3d:b2:44:ec:bb:f1:48:d4:
                    79:3e:d8:2b:c1:b9:c0:f9:03:9e:0b:99:94:60:ae:
                    ce:74:f4:7b:05:04:84:96:d2:3c:c9:01:ef:e6:fd:
                    4b:88:12:30:63:e8:e5:2c:f7:95:b5:75:4a:f8:06:
                    08:69:0a:90:64:2f:ad:fb:fb:1d:14:22:c6:9b:a7:
                    50:23:42:d9:d7:e0:d0:a4:2c:70:ae:7a:2e:e2:3c:
                    98:dd:4f:cd:68:04:3b:99:b9:d0:04:ea:7f:2a:1d:
                    3b:4e:51:30:2f:f4:99:22:b0:00:85:3c:3b:1c:31:
                    db:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:01:5C:27:E7:E1:29:F4:9C:47:DE:EE:58:67:2A:52:88:D5:30:49
            X509v3 Authority Key Identifier:
                keyid:B5:30:E3:C7:88:9B:B3:9E:2E:C3:55:6C:A0:36:10:01:7A:E3:A5:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/02e922558a0a707449bd92d89ebf115beeeef6e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:7d:c4:bb:41:a3:6d:32:52:07:37:39:9d:bc:44:c6:19:e2:
         42:72:d8:da:32:5f:5a:cd:ee:1c:85:f8:15:ac:45:9c:7f:b0:
         fb:d4:2c:19:6d:0c:e5:d0:d9:b0:2a:72:e9:9f:76:63:0e:24:
         fb:fa:b4:81:c9:4c:45:72:cf:c5:6e:31:11:53:8b:10:c9:18:
         64:a4:4a:a4:81:d3:40:4e:ac:ed:54:88:6d:d6:9c:71:2a:ed:
         82:df:2d:91:8d:19:7c:4e:6e:a1:79:a4:e4:7f:00:99:64:11:
         f6:ea:f0:bd:73:c7:d1:81:61:35:46:db:ee:d2:39:e4:c8:e7:
         0e:8e:39:3c:98:88:9c:48:39:c3:1a:4d:12:16:8f:1a:24:13:
         98:a3:bd:7b:53:4e:6f:86:d8:81:68:2d:9b:cc:1e:8e:aa:e0:
         e3:4e:50:2b:84:82:bc:f7:67:55:6b:6d:8b:f4:3e:c6:7e:a0:
         42:13:f4:db:77:bf:0b:b3:1a:31:f1:61:0d:f9:0b:8d:62:b6:
         57:04:cf:34:01:9e:36:ea:93:7d:11:ae:a7:e5:2c:ee:45:77:
         98:3e:c1:f3:f2:11:6f:37:c2:5b:6a:f7:cb:11:62:be:48:d6:
         08:6f:f3:05:05:0e:e6:38:d7:1b:55:ef:34:b9:3a:f3:b3:9e:
         76:8d:4b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----