Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/52a0db70d1b36dfa66831550020dc227706529b9.roa
File:                     52a0db70d1b36dfa66831550020dc227706529b9.roa (raw, json)
Hash identifier:          ekp/5t07PAeO1U8JgKxjfUMuH7lG/GKxTQnSkTCV6WA=
Subject key identifier:   87:F1:41:7E:54:8D:4C:47:18:0E:E4:0E:B5:96:E0:88:59:CF:C5:ED
Certificate issuer:       /CN=d87cacea641658717abecb35689ebe8932f40ead
Certificate serial:       01F10D
Authority key identifier: 50:1B:9A:0E:A8:35:4F:1C:D8:B5:3D:36:E7:DC:B0:0F:B4:F4:6D:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d87cacea641658717abecb35689ebe8932f40ead.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/52a0db70d1b36dfa66831550020dc227706529b9.roa
Signing time:             Wed 06 Jul 2022 19:46:48 +0000
ROA not before:           Thu 21 Apr 2022 03:00:00 +0000
ROA not after:            Sun 21 Apr 2024 03:00:00 +0000
asID:                     267796
IP address blocks:        45.172.184.0/22 maxlen: 24
                          2803:5fa0::/32 maxlen: 34

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127245 (0x1f10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d87cacea641658717abecb35689ebe8932f40ead
        Validity
            Not Before: Apr 21 03:00:00 2022 GMT
            Not After : Apr 21 03:00:00 2024 GMT
        Subject: CN=52a0db70d1b36dfa66831550020dc227706529b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:32:b3:cf:10:1f:b2:39:1e:f6:33:b4:33:4f:
                    d4:a6:2c:83:8e:4f:86:04:fe:0d:30:05:6a:f5:11:
                    5f:bf:86:84:2e:86:22:92:c8:7a:7a:53:b7:ad:e1:
                    f7:a3:5c:06:03:4b:4d:7f:b8:52:2d:1b:a7:a6:ad:
                    58:f4:73:a1:4a:4c:e6:c5:f5:33:f5:08:52:4a:2b:
                    f4:61:7e:01:45:7f:5d:16:84:c4:8b:5c:64:68:dd:
                    6c:b3:ba:88:09:ad:91:68:b2:bc:46:e8:46:b5:fa:
                    9a:48:01:53:a3:e6:ad:10:bd:47:d9:db:ac:31:4b:
                    92:0e:a9:24:df:7e:49:9a:26:7a:a8:a3:d2:ca:5a:
                    ff:93:d0:d9:fd:81:51:bc:60:ca:ca:5b:08:ff:82:
                    ec:f8:f5:66:5a:22:88:51:80:00:29:2a:20:31:92:
                    aa:19:5e:0e:90:10:58:26:b5:53:85:72:14:09:0e:
                    fe:2b:fa:af:84:1c:67:26:3a:53:9a:16:5e:16:b6:
                    0e:87:90:2c:5d:ed:00:6d:3d:a3:e6:67:18:d8:1c:
                    92:b3:9b:a8:db:77:d2:78:36:dd:5f:b8:e2:35:6f:
                    b9:8c:1c:88:71:f1:4d:bf:eb:16:14:d9:cf:25:1b:
                    e7:e4:4e:ff:56:a8:46:79:28:62:23:42:85:24:76:
                    9e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F1:41:7E:54:8D:4C:47:18:0E:E4:0E:B5:96:E0:88:59:CF:C5:ED
            X509v3 Authority Key Identifier:
                keyid:50:1B:9A:0E:A8:35:4F:1C:D8:B5:3D:36:E7:DC:B0:0F:B4:F4:6D:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d87cacea641658717abecb35689ebe8932f40ead.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/52a0db70d1b36dfa66831550020dc227706529b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/d87cacea641658717abecb35689ebe8932f40ead.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.184.0/22
                IPv6:
                  2803:5fa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:6c:4d:39:80:35:16:7a:d4:83:ce:bc:85:08:f4:a8:62:f8:
         7a:63:27:1c:70:1f:c0:1e:f1:c4:a5:ed:13:67:95:6a:b0:67:
         85:dd:36:e4:2a:10:39:28:9d:2e:82:1c:74:f3:a6:9e:8e:f9:
         ad:86:ad:a6:a0:69:c7:b6:fc:cb:73:1b:e4:54:d3:2a:7b:8b:
         72:0e:75:ac:b9:7b:48:03:2f:97:64:7e:2c:bd:0e:d5:1e:3b:
         ac:8c:53:b9:5b:18:31:15:3c:67:2c:fe:65:1d:7a:30:a5:ad:
         f6:f3:93:48:e5:15:5d:41:20:e7:02:ec:5b:16:71:16:df:ce:
         e4:0f:4d:9e:ac:70:88:d8:e1:ed:39:b2:f4:33:ef:c8:59:d1:
         30:8a:42:70:f4:49:25:0b:ae:c4:c7:3a:cd:d9:ec:bb:f2:96:
         3f:d9:06:29:ee:dc:02:55:85:1f:f2:83:ac:af:ca:a9:0e:3c:
         44:10:1a:f2:be:35:f9:4f:5d:f4:29:f0:3b:5b:34:6a:95:86:
         bf:5c:63:a2:c2:f9:b1:eb:8c:ff:bb:a5:1c:4e:51:df:41:c5:
         81:66:f6:b3:56:a5:61:b9:79:f0:1c:f3:db:b8:65:90:8a:f2:
         3c:9f:ae:c8:b5:b3:a4:1a:df:2c:4d:aa:d9:0f:01:aa:51:8f:
         ac:14:23:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----