Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/ce370cafe8a3e817b63224e2e60861afb199ab2f.roa
File:                     ce370cafe8a3e817b63224e2e60861afb199ab2f.roa (raw, json)
Hash identifier:          zfJk9ZPZax+jW9tJwq95s4r6jqVSp17IIW+oEvpFX4A=
Subject key identifier:   9B:CD:6F:84:03:90:9D:EB:F1:BC:C3:37:A9:73:44:38:34:F6:C3:73
Certificate issuer:       /CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
Certificate serial:       1704E2
Authority key identifier: 54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/ce370cafe8a3e817b63224e2e60861afb199ab2f.roa
Signing time:             Wed 29 Mar 2023 11:24:01 +0000
ROA not before:           Tue 23 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     267919
IP address blocks:        45.179.202.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1508578 (0x1704e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
        Validity
            Not Before: Mar 23 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=ce370cafe8a3e817b63224e2e60861afb199ab2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:67:4a:63:8c:61:39:71:dd:f3:2d:f9:df:9b:
                    f2:6c:30:84:b7:79:98:44:32:7d:f4:6e:8e:b0:f1:
                    97:fe:e7:85:ef:d6:d3:cf:19:f2:f2:b0:f2:9d:0a:
                    34:c1:4a:4b:74:59:7b:2c:8b:06:7a:02:74:61:58:
                    67:10:6e:98:a2:eb:6a:d2:35:f8:07:5a:cc:47:bf:
                    fd:13:11:c6:80:cc:bb:43:47:8e:e0:d4:a6:91:a5:
                    da:35:74:97:a1:94:7c:3b:a0:f4:ba:e4:f9:35:16:
                    f2:d3:2a:9c:37:5f:c2:af:28:a4:87:73:e1:d6:cb:
                    24:c6:c9:f3:76:30:81:c3:e4:a7:1e:7c:f0:ca:4a:
                    f0:3b:3a:41:bf:8f:37:15:db:b8:a6:99:83:d5:b7:
                    b1:48:4a:0b:74:f4:a8:7d:c0:68:db:24:61:17:bf:
                    89:88:ff:f5:51:00:fe:5b:b8:1a:81:05:3b:1a:2b:
                    f5:4b:a8:1e:93:e7:b1:06:b9:2d:2e:74:e7:d5:43:
                    66:46:68:92:00:cd:bf:d2:49:8e:21:0c:e0:a2:76:
                    57:f8:29:df:65:c6:b7:fe:c0:42:44:a6:a3:c1:52:
                    7b:3a:73:22:00:4b:f0:fc:86:d6:39:1d:09:da:d4:
                    5a:8e:eb:b8:4f:54:c9:c3:db:b7:4a:f4:a1:6e:d2:
                    2d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CD:6F:84:03:90:9D:EB:F1:BC:C3:37:A9:73:44:38:34:F6:C3:73
            X509v3 Authority Key Identifier:
                keyid:54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/ce370cafe8a3e817b63224e2e60861afb199ab2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/27a5488123c2689d948f7eb4b73b6005b88be1ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:0e:f8:37:60:48:7b:0a:f6:5b:f6:4e:85:aa:5d:f1:0b:60:
         d9:22:bf:33:1e:7c:01:27:10:8e:98:22:ab:8f:57:ef:ff:84:
         d7:4d:9f:9f:2a:08:f7:11:b6:0b:f0:b7:0c:9d:78:1a:42:ef:
         95:54:46:12:07:9e:52:a0:fd:da:ce:34:dd:fa:1b:2b:cf:6f:
         c1:b3:36:9b:04:90:11:f2:b2:d5:b3:97:15:98:1e:78:9d:3b:
         23:6b:24:63:02:7b:b8:42:20:cd:03:0a:15:44:f9:70:93:41:
         5f:cc:fd:ff:93:c5:45:9e:c9:a7:6f:2a:8d:ec:41:52:ff:98:
         f7:d7:e5:d1:69:25:54:87:c8:cf:92:04:e1:dc:11:7f:55:b4:
         ba:73:3f:5f:d8:86:67:69:54:34:9f:fe:02:6c:94:c9:fb:f2:
         e0:6c:a9:c9:d7:e0:7c:16:e0:c5:8c:8e:1b:3d:2c:9d:b0:63:
         8c:5f:57:13:5a:76:f9:9b:7c:bd:49:97:b8:3f:f3:78:db:77:
         ad:ce:41:96:2a:fe:25:fb:93:85:ae:67:c8:c0:dc:2b:f9:dc:
         01:09:62:2d:d4:a3:27:49:50:24:c0:48:8f:24:73:ed:e5:ec:
         43:07:f7:bf:be:09:69:8a:39:bf:c5:6c:a0:cd:20:8d:98:84:
         28:15:60:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----