Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/032b3d91-2d0a-474f-8ac7-eabce7511811/b429d871d8ab3de2a2f843a544ee184302756ec0.roa
File:                     b429d871d8ab3de2a2f843a544ee184302756ec0.roa (raw, json)
Hash identifier:          6eCDzLAPPJCZubdem/43WWlKRYc9bDlG9ZRVWbE5mzw=
Subject key identifier:   0E:9F:89:42:35:0E:43:DE:A8:BA:CC:4E:B3:62:87:20:44:02:E2:C9
Certificate issuer:       /CN=110912d812a3612d5635fe6be68c37d72afb24e2
Certificate serial:       19A2F6
Authority key identifier: 8C:F3:4C:B8:EE:8E:AF:7E:15:A8:52:DC:E3:41:01:EC:7F:FC:04:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/110912d812a3612d5635fe6be68c37d72afb24e2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/032b3d91-2d0a-474f-8ac7-eabce7511811/b429d871d8ab3de2a2f843a544ee184302756ec0.roa
Signing time:             Thu 16 Mar 2023 00:04:59 +0000
ROA not before:           Thu 15 Jul 2021 03:00:00 +0000
ROA not after:            Sun 16 Jul 2023 03:00:00 +0000
asID:                     264619
IP address blocks:        45.172.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1680118 (0x19a2f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110912d812a3612d5635fe6be68c37d72afb24e2
        Validity
            Not Before: Jul 15 03:00:00 2021 GMT
            Not After : Jul 16 03:00:00 2023 GMT
        Subject: CN=b429d871d8ab3de2a2f843a544ee184302756ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:90:e1:b7:e4:e8:46:40:40:da:b6:0b:6d:d8:
                    fa:c5:9b:fe:d3:52:fb:9a:23:27:5a:bc:38:a7:51:
                    4c:23:7e:53:ab:bc:a4:5d:6b:09:13:40:f1:af:18:
                    f8:52:bc:cc:93:37:31:b0:be:13:48:83:4a:75:42:
                    96:4b:50:d3:3b:4b:de:62:70:12:06:6f:dc:af:4f:
                    c1:39:99:18:98:15:f2:1e:8b:87:a3:b0:49:c3:d3:
                    11:b6:b5:11:ca:1a:2c:5d:4a:e6:75:ed:e1:14:60:
                    c4:7d:8c:d4:e2:77:22:d1:c5:5e:fa:f0:eb:30:26:
                    94:55:a3:d4:97:23:49:e6:7e:c7:88:3d:5e:e7:d7:
                    05:9b:67:c6:6a:29:d6:6a:2d:c3:d7:9a:81:6a:a7:
                    dc:83:7c:8c:28:50:f7:f6:62:29:b0:7e:16:36:53:
                    e6:68:50:2d:c9:fb:be:05:cd:16:89:c3:5f:a1:2b:
                    5d:ef:e0:6a:f8:1a:78:d2:d3:e4:61:70:e7:19:66:
                    45:5f:74:8c:36:93:f9:49:31:34:73:10:9a:a5:9b:
                    24:a4:d5:fc:9e:a4:da:52:04:97:40:e8:cb:1c:be:
                    a9:79:34:a5:70:95:ba:97:76:01:c0:c0:88:47:69:
                    b7:b6:52:d3:1d:e0:b8:47:4c:04:6e:e4:60:77:47:
                    8c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9F:89:42:35:0E:43:DE:A8:BA:CC:4E:B3:62:87:20:44:02:E2:C9
            X509v3 Authority Key Identifier:
                keyid:8C:F3:4C:B8:EE:8E:AF:7E:15:A8:52:DC:E3:41:01:EC:7F:FC:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/110912d812a3612d5635fe6be68c37d72afb24e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/032b3d91-2d0a-474f-8ac7-eabce7511811/b429d871d8ab3de2a2f843a544ee184302756ec0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/032b3d91-2d0a-474f-8ac7-eabce7511811/110912d812a3612d5635fe6be68c37d72afb24e2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:fa:1f:5f:70:5d:48:6c:1f:31:b5:b3:d8:34:0f:f6:38:e0:
         fb:67:74:0d:52:f9:67:3b:90:54:e3:d5:94:d8:4c:4b:35:6e:
         ee:25:b9:be:9a:43:ff:be:65:c7:3d:55:a2:bd:8d:9a:2a:5e:
         8f:ba:3d:b3:48:5f:e6:97:16:5a:9b:c5:85:f5:bd:f9:fc:fe:
         7e:bb:c2:94:ef:32:4e:15:15:b1:f7:5a:7b:e8:e1:37:3c:d1:
         79:e2:05:f7:8e:cf:12:cd:8d:e0:c9:c4:10:25:26:56:3f:ca:
         d4:a3:bb:5d:5b:f3:59:c3:e0:e8:7d:de:33:bc:16:06:f6:93:
         e0:f0:48:08:92:03:87:08:7d:e2:c7:3f:e7:c3:1a:bf:9d:d2:
         59:44:f8:4b:e7:91:76:ae:b6:25:1f:18:b2:c9:45:71:75:ee:
         f4:7d:a1:d1:d8:46:4c:5c:fa:4f:ac:75:58:84:10:bf:72:cb:
         54:f7:51:2a:cb:8e:3b:d2:33:10:72:dd:d7:fa:87:59:24:d3:
         ce:f1:21:4e:21:1c:2c:93:a7:ea:cc:fc:3b:82:6d:6b:12:89:
         a5:53:98:b9:49:21:45:16:4f:f9:1d:28:d2:33:bd:0b:45:10:
         cb:58:f5:b4:1b:2f:17:98:98:3d:ba:b3:b9:3e:f5:63:8e:d0:
         4c:3d:43:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----