Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0aab23bd-f189-4692-9f49-cb5ce34346df/99ce8c843edb556c90b3c34c7241759479c299a6.roa
File:                     99ce8c843edb556c90b3c34c7241759479c299a6.roa (raw, json)
Hash identifier:          QdXQFPhTtlk4zZF3psIHQuhzxMZvL4iLIRFW+QfG1l0=
Subject key identifier:   25:DC:6C:7F:CA:36:95:37:CE:0A:E6:79:F2:58:3D:43:BC:8D:DF:03
Certificate issuer:       /CN=9f80f54526bd059d5b93379c083f1134c117b046
Certificate serial:       050D0B
Authority key identifier: CC:FB:08:0A:BE:F4:CF:C4:89:9E:2E:4E:64:FD:16:A8:A0:62:EE:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f80f54526bd059d5b93379c083f1134c117b046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0aab23bd-f189-4692-9f49-cb5ce34346df/99ce8c843edb556c90b3c34c7241759479c299a6.roa
Signing time:             Tue 03 May 2022 17:14:35 +0000
ROA not before:           Mon 04 Oct 2021 03:00:00 +0000
ROA not after:            Wed 04 Oct 2023 03:00:00 +0000
asID:                     266820
IP address blocks:        45.237.84.0/22 maxlen: 22
                          2803:84a0::/36 maxlen: 36
                          2803:84a0:5000::/36 maxlen: 36
                          2803:84a0:c000::/36 maxlen: 36
                          2803:84a0:f000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331019 (0x50d0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f80f54526bd059d5b93379c083f1134c117b046
        Validity
            Not Before: Oct  4 03:00:00 2021 GMT
            Not After : Oct  4 03:00:00 2023 GMT
        Subject: CN=99ce8c843edb556c90b3c34c7241759479c299a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:85:88:ae:03:1e:6a:64:7d:ce:62:a5:4b:22:
                    d5:9e:f7:44:4d:bc:c2:cc:2d:8f:e6:0e:c2:0a:13:
                    bd:01:1d:be:e8:76:0f:83:39:15:05:6b:60:d1:c1:
                    8b:6c:72:46:7b:99:35:05:4e:73:b3:1b:1c:3d:20:
                    22:03:b8:9b:5c:af:bd:db:9e:82:eb:f7:42:c6:fa:
                    ce:c6:4a:30:b0:68:47:df:26:9a:58:bc:f1:d7:f8:
                    80:f4:2e:a0:73:0c:bd:37:74:d7:b9:d2:39:71:31:
                    98:21:7f:96:46:fe:3e:d5:0a:4f:83:d8:ae:77:c8:
                    22:47:56:1f:d9:b0:f9:91:02:3f:4b:a7:60:08:14:
                    20:6f:6f:73:71:ff:ec:2d:6a:f0:14:3c:e9:18:38:
                    43:5e:83:78:87:2a:bf:76:a2:ee:02:8d:e7:e1:ee:
                    6e:37:6d:fb:c2:2d:4e:d2:c6:79:a0:f8:90:8e:34:
                    a2:3e:5e:3e:41:2c:c8:1e:24:85:fa:10:a5:62:7d:
                    7c:d5:45:4a:cb:73:71:2f:5a:06:5d:2f:65:7a:67:
                    68:5d:d7:98:8a:b9:db:33:af:45:d6:59:26:14:72:
                    1a:e4:d2:70:24:39:50:42:6c:5d:f6:84:88:13:21:
                    42:8a:4a:da:48:c3:fa:0d:e2:90:37:37:32:c8:4f:
                    75:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DC:6C:7F:CA:36:95:37:CE:0A:E6:79:F2:58:3D:43:BC:8D:DF:03
            X509v3 Authority Key Identifier:
                keyid:CC:FB:08:0A:BE:F4:CF:C4:89:9E:2E:4E:64:FD:16:A8:A0:62:EE:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f80f54526bd059d5b93379c083f1134c117b046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0aab23bd-f189-4692-9f49-cb5ce34346df/99ce8c843edb556c90b3c34c7241759479c299a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0aab23bd-f189-4692-9f49-cb5ce34346df/9f80f54526bd059d5b93379c083f1134c117b046.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.84.0/22
                IPv6:
                  2803:84a0::/36
                  2803:84a0:5000::/36
                  2803:84a0:c000::/36
                  2803:84a0:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         00:2f:a2:6a:de:a7:f4:08:0b:9e:0d:ac:6a:00:6a:ad:b2:ac:
         da:4b:87:dc:d2:d8:5e:21:3b:2d:c0:bf:d6:63:78:b6:48:03:
         7e:11:78:95:52:71:06:eb:cd:30:6c:de:98:66:87:57:74:42:
         6f:56:69:a0:53:93:b4:dd:80:e6:19:3d:29:34:35:c6:ac:cc:
         2e:b2:44:1d:42:2a:01:f5:33:93:21:ff:1d:3c:ef:c6:7f:21:
         ed:af:96:e6:3d:eb:0d:e3:ba:1e:f6:40:39:e9:24:0a:a2:60:
         93:ea:f5:12:b2:8f:6b:2c:8f:2d:dd:94:7d:5e:13:55:52:74:
         4b:c3:41:81:63:62:dc:56:a4:65:21:00:97:a8:54:eb:41:9a:
         dc:8e:f9:7d:2c:66:9e:21:70:f1:3c:57:0a:80:f1:6a:4d:fb:
         57:ae:d6:81:33:33:ff:29:24:1f:bb:a6:3d:d8:d5:2b:c3:db:
         59:fa:0a:b1:b8:20:ff:52:0f:0a:82:b2:db:88:43:33:1e:2e:
         52:ac:c6:fe:0e:82:e3:76:e1:6d:2e:77:eb:41:3d:aa:d2:5d:
         b5:89:88:75:db:16:0a:cb:7f:bb:7b:9b:fb:87:ba:12:a2:e5:
         85:eb:6c:c8:17:f2:f3:85:ad:08:cb:91:b9:77:a2:e0:df:f7:
         02:21:47:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----