Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/963924b8526ff7d30560cb0a3adba41f19c34582.roa
File:                     963924b8526ff7d30560cb0a3adba41f19c34582.roa (raw, json)
Hash identifier:          fa7rvsGVb9n8e5xKX+xwO3h8VOEn9uD9OBVUqE/emAc=
Subject key identifier:   87:E9:6B:55:C8:59:AE:95:5D:38:1E:F4:BE:A9:4C:0B:D2:B8:FA:FD
Certificate issuer:       /CN=a431b12cbb45857ee37540244e236b5fe1793e26
Certificate serial:       0CC771
Authority key identifier: 0D:1B:CC:9E:45:14:4F:45:85:FF:D6:47:C1:9D:8F:A3:E8:90:E7:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a431b12cbb45857ee37540244e236b5fe1793e26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/963924b8526ff7d30560cb0a3adba41f19c34582.roa
Signing time:             Wed 24 Mar 2021 14:41:22 +0000
ROA not before:           Wed 24 Mar 2021 14:41:22 +0000
ROA not after:            Tue 24 Mar 2026 14:41:22 +0000
asID:                     61468
IP address blocks:        45.238.216.0/22 maxlen: 24
                          2801:1c:f000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 837489 (0xcc771)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a431b12cbb45857ee37540244e236b5fe1793e26
        Validity
            Not Before: Mar 24 14:41:22 2021 GMT
            Not After : Mar 24 14:41:22 2026 GMT
        Subject: CN=963924b8526ff7d30560cb0a3adba41f19c34582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b2:c0:9b:3c:9a:8e:ca:08:b9:43:aa:0e:7b:
                    fc:66:d0:42:94:75:15:23:5d:d8:da:f9:4c:29:e5:
                    68:cb:80:ff:5f:18:c4:14:77:34:55:27:fb:c3:97:
                    a3:35:96:3a:12:f8:64:52:70:14:5b:96:17:9a:b3:
                    98:11:f3:a2:b9:8f:41:eb:ae:d6:88:b3:db:10:b4:
                    e9:ce:54:6a:93:31:eb:b0:24:8b:07:67:37:01:c6:
                    b7:f8:5a:2e:4a:8d:31:45:78:b7:cc:fc:52:cf:4e:
                    c9:26:04:8a:f0:f0:5a:19:77:5f:f7:7e:0a:dc:79:
                    04:b9:30:13:59:02:e9:7f:d5:e5:5f:08:2e:7e:0f:
                    62:10:1d:f0:0e:21:59:ab:00:78:e7:61:8b:da:af:
                    98:1c:37:2f:2a:00:ab:b0:dc:f0:a6:a8:53:95:51:
                    08:f2:a9:b3:e4:a9:41:8c:a7:94:e2:ee:5d:28:3c:
                    6a:b4:7b:ab:61:8b:74:2a:50:2f:09:d4:7a:d5:31:
                    56:c8:8d:56:d0:75:d6:33:8a:cb:db:7e:29:b4:c0:
                    50:b1:a1:07:a6:8f:b7:5c:c9:24:36:41:62:43:6b:
                    9d:af:24:b0:cb:0d:d2:8e:7a:b2:58:07:65:8e:bd:
                    d9:52:6a:e5:41:76:59:ed:6c:74:72:2a:e6:22:d9:
                    f1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E9:6B:55:C8:59:AE:95:5D:38:1E:F4:BE:A9:4C:0B:D2:B8:FA:FD
            X509v3 Authority Key Identifier:
                keyid:0D:1B:CC:9E:45:14:4F:45:85:FF:D6:47:C1:9D:8F:A3:E8:90:E7:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a431b12cbb45857ee37540244e236b5fe1793e26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/963924b8526ff7d30560cb0a3adba41f19c34582.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c5c6ac7-bfeb-48a9-ad93-86312efa1fd0/a431b12cbb45857ee37540244e236b5fe1793e26.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.216.0/22
                IPv6:
                  2801:1c:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:83:31:c7:c8:3e:b1:7a:49:d3:9a:b1:4d:07:32:af:86:b1:
         44:34:ac:0c:e5:5d:a3:a2:f4:10:d1:9e:7e:c5:77:36:85:50:
         8b:06:28:ba:74:05:5a:9c:d0:d3:a8:94:f3:34:13:7d:0b:33:
         e5:37:8a:7a:ac:e1:b4:ae:ea:da:b5:af:54:1e:5b:ad:13:d1:
         a5:d2:9f:3b:df:e2:8d:2e:16:d7:fe:39:c5:16:a6:25:78:07:
         21:f4:d4:ad:3e:98:16:2b:11:05:25:52:18:be:04:3f:68:8e:
         47:51:5b:19:16:93:f0:80:48:fd:d7:8e:53:56:fd:31:15:c4:
         a1:b4:56:71:34:13:35:b3:9f:29:73:bf:13:94:c9:5c:69:cd:
         6d:96:b2:b4:0b:5a:e6:33:ec:3e:f0:7c:96:42:98:7d:b8:b6:
         4b:3c:68:1a:5c:16:ff:2a:62:2f:91:65:09:3b:c0:88:1c:3a:
         47:1c:e2:d5:af:15:fa:02:08:7f:ae:1a:89:ea:db:42:62:42:
         bf:1f:0d:18:e7:12:af:45:62:08:c3:23:26:03:39:7a:27:f6:
         3d:85:dc:43:6b:18:b8:23:aa:d5:72:79:96:4f:01:37:35:4b:
         96:0b:db:e8:83:c7:3e:4a:28:9b:6d:bb:cc:0a:86:61:bb:70:
         9a:cf:96:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----