Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/c45362eedfa01ae266c0e2356749010f6e1e7cfb.roa
File:                     c45362eedfa01ae266c0e2356749010f6e1e7cfb.roa (raw, json)
Hash identifier:          GHTCh5n5CSbZ9FC2DJm+SVTyl8r1X8fBfzhmdTwEh04=
Subject key identifier:   6F:2F:6F:4F:A9:59:BC:3B:29:A5:90:3C:CD:2E:6F:F6:31:9C:6C:10
Certificate issuer:       /CN=9335683e4b18488db2c2495f3084999892751bfe
Certificate serial:       140453
Authority key identifier: F6:70:84:93:7A:11:D9:A6:92:CE:36:2D:A7:8A:AE:3A:9A:4F:12:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9335683e4b18488db2c2495f3084999892751bfe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/c45362eedfa01ae266c0e2356749010f6e1e7cfb.roa
Signing time:             Mon 07 Mar 2022 00:01:35 +0000
ROA not before:           Thu 26 Aug 2021 03:00:00 +0000
ROA not after:            Sat 26 Aug 2023 03:00:00 +0000
asID:                     263793
IP address blocks:        167.249.53.0/24 maxlen: 24
                          2803:840::/32 maxlen: 48
                          2803:840:2300::/48 maxlen: 48
                          2803:840:2301::/48 maxlen: 48
                          2803:840:ba00::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1311827 (0x140453)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9335683e4b18488db2c2495f3084999892751bfe
        Validity
            Not Before: Aug 26 03:00:00 2021 GMT
            Not After : Aug 26 03:00:00 2023 GMT
        Subject: CN=c45362eedfa01ae266c0e2356749010f6e1e7cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:03:39:68:bf:3c:4f:99:3a:81:0d:b0:12:0c:
                    32:5b:64:02:e2:fb:3e:62:50:58:a2:c9:db:d5:a2:
                    9f:31:1e:43:f6:20:c2:02:38:25:e1:8e:27:d0:96:
                    ab:08:2f:15:21:6d:36:9b:32:f1:b8:92:14:b8:f8:
                    c1:e5:e2:ce:54:88:dd:61:9c:65:dd:56:4f:af:78:
                    bc:17:73:3d:f9:93:b0:57:0b:36:06:26:f9:a8:58:
                    ad:7c:6d:14:90:32:8b:22:47:68:68:af:31:5a:0b:
                    71:4a:e0:b1:44:91:d8:1d:fe:d2:90:12:82:2c:8d:
                    f5:8d:5e:2b:6d:f0:80:3f:55:66:87:b5:42:b9:ce:
                    b4:6c:26:2c:5d:92:17:20:1b:0d:11:3c:84:ff:00:
                    43:6a:61:f1:70:9c:6b:ef:28:ce:4f:b7:9d:1d:19:
                    a7:6a:1f:9c:0c:8a:ab:a2:1a:b3:78:a1:2e:fa:28:
                    f5:b6:df:d4:7f:45:26:ba:a7:e0:16:5d:7a:17:da:
                    86:15:ce:22:4b:a0:99:f1:1b:7a:31:2a:72:e4:cb:
                    56:3b:79:6d:d2:9a:ab:3a:49:5d:c5:d6:05:dd:68:
                    06:6d:2b:58:dc:8f:b8:d3:0d:ee:a2:f3:6a:fc:80:
                    02:46:e3:a0:19:46:d3:8b:81:77:62:53:0b:4c:cf:
                    2e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2F:6F:4F:A9:59:BC:3B:29:A5:90:3C:CD:2E:6F:F6:31:9C:6C:10
            X509v3 Authority Key Identifier:
                keyid:F6:70:84:93:7A:11:D9:A6:92:CE:36:2D:A7:8A:AE:3A:9A:4F:12:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9335683e4b18488db2c2495f3084999892751bfe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/c45362eedfa01ae266c0e2356749010f6e1e7cfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/9335683e4b18488db2c2495f3084999892751bfe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.53.0/24
                IPv6:
                  2803:840::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:84:97:a1:29:8e:5b:03:22:35:16:59:6d:3a:9f:10:5e:5e:
         da:ec:66:8b:b3:bf:03:66:cb:d3:a5:58:75:85:05:a0:7e:50:
         4f:7c:88:0e:67:f6:76:64:34:61:a3:6e:80:9b:a4:18:fe:fd:
         5e:7a:ce:7a:3c:d0:06:cc:5a:47:ff:f8:e1:14:d0:65:88:7e:
         ae:7a:04:ac:0a:1d:b3:15:20:a8:9d:7d:44:27:83:d4:56:7f:
         f6:d1:79:55:4c:8e:5a:cc:41:00:f2:e7:ed:54:5e:31:53:33:
         8c:89:b3:b2:17:83:72:cd:db:0f:cf:4b:aa:72:44:c2:bf:e8:
         6d:a0:8d:9d:82:3c:96:17:8f:05:df:65:cb:f9:82:2e:d6:02:
         58:a9:70:b8:dd:e0:ff:21:06:1d:1b:a0:77:eb:14:d8:22:d1:
         1f:ba:a9:d3:54:52:5b:9d:89:c4:44:83:79:34:64:2b:cf:ae:
         48:11:06:ef:6a:be:fe:54:88:90:0d:40:f5:e4:d3:a3:ab:18:
         4d:34:df:c6:53:84:74:81:1b:e9:dd:62:90:f4:51:e4:b7:58:
         bc:23:38:52:34:5b:27:8b:64:9b:ca:ae:d2:b4:27:81:67:89:
         4e:16:c2:e3:91:3c:ac:4d:43:08:75:85:5d:57:e6:38:f7:4b:
         b9:e0:97:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----