Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/256a499f-5a3c-4446-bc48-f8f27d86c736/9d8173705221ca62012b768444fd6210b7b59509.roa
File:                     9d8173705221ca62012b768444fd6210b7b59509.roa (raw, json)
Hash identifier:          NSb3G3I2wZ5aVsGmkkGKfLXLV7Y2lUQzQBEN01/YwYQ=
Subject key identifier:   4B:42:F9:23:FC:6A:38:B5:73:82:67:06:5D:2D:35:86:92:5A:8E:65
Certificate issuer:       /CN=e84a8a2c72a83a6a007b4119c4bead05ab70e47c
Certificate serial:       0473
Authority key identifier: CF:62:D5:B0:5F:8D:02:DA:E2:04:5F:9B:0B:DF:83:DB:92:1C:3E:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e84a8a2c72a83a6a007b4119c4bead05ab70e47c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/256a499f-5a3c-4446-bc48-f8f27d86c736/9d8173705221ca62012b768444fd6210b7b59509.roa
Signing time:             Wed 22 Sep 2021 22:50:55 +0000
ROA not before:           Wed 22 Sep 2021 03:00:00 +0000
ROA not after:            Fri 22 Sep 2023 03:00:00 +0000
asID:                     265868
IP address blocks:        45.226.28.0/22 maxlen: 25

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1139 (0x473)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84a8a2c72a83a6a007b4119c4bead05ab70e47c
        Validity
            Not Before: Sep 22 03:00:00 2021 GMT
            Not After : Sep 22 03:00:00 2023 GMT
        Subject: CN=9d8173705221ca62012b768444fd6210b7b59509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ab:dc:93:68:72:80:cd:3c:3a:86:22:6d:51:
                    d7:07:45:61:42:d2:ba:77:13:55:7a:5d:8d:e0:7e:
                    b2:0f:8e:26:8a:1b:89:45:22:88:cd:58:5b:72:07:
                    cf:94:20:94:08:f6:b2:6d:56:2f:7b:73:93:df:35:
                    2f:be:5c:8d:79:d4:19:95:ed:01:8d:aa:27:93:fc:
                    1a:88:dc:02:43:ef:6f:26:e8:5a:3b:19:5b:f7:f0:
                    d9:5f:b6:af:48:d9:21:8c:91:88:46:c2:f8:fe:7a:
                    bb:d9:89:ba:cc:1c:78:b0:51:93:fb:0e:f9:36:6a:
                    f9:9b:da:1f:d7:aa:a2:6c:95:3e:6f:94:b7:5b:8b:
                    4f:83:3a:cf:ea:5d:53:ae:89:ea:b3:76:a9:36:66:
                    18:ab:0e:87:b8:e7:ac:a2:5a:b4:9f:30:2d:69:cc:
                    36:b7:87:71:2f:5f:55:36:c3:60:e7:7f:95:21:9f:
                    9a:f4:98:e1:50:65:74:1d:82:eb:c3:ac:a7:0e:97:
                    f1:95:e3:1b:3b:2d:26:4c:70:c2:3b:cf:06:4e:6c:
                    d2:26:63:f2:8f:d4:d5:8c:12:b6:8e:32:09:c8:a3:
                    22:ba:9d:0d:ff:df:9d:b1:26:a0:59:d8:b6:1c:43:
                    01:5b:a3:8b:04:a0:1e:18:86:5e:87:6c:af:99:17:
                    13:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:42:F9:23:FC:6A:38:B5:73:82:67:06:5D:2D:35:86:92:5A:8E:65
            X509v3 Authority Key Identifier:
                keyid:CF:62:D5:B0:5F:8D:02:DA:E2:04:5F:9B:0B:DF:83:DB:92:1C:3E:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e84a8a2c72a83a6a007b4119c4bead05ab70e47c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/256a499f-5a3c-4446-bc48-f8f27d86c736/9d8173705221ca62012b768444fd6210b7b59509.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/256a499f-5a3c-4446-bc48-f8f27d86c736/e84a8a2c72a83a6a007b4119c4bead05ab70e47c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:73:6d:fe:d7:8a:8b:cd:9d:e9:a0:3f:f5:02:c8:5f:a4:06:
         a4:86:29:ef:b4:ad:31:a4:fe:ad:fd:6c:ba:12:dc:0c:26:19:
         a1:ec:c4:20:e8:02:ae:b5:b6:0c:d3:43:7c:d6:61:31:d7:58:
         34:01:af:8a:b0:61:bd:22:91:84:a6:d8:ea:24:d9:4c:db:0e:
         d4:83:f5:21:82:fb:ea:14:81:a7:7c:cd:ea:46:94:ae:2f:00:
         f3:8d:5a:2d:1e:d8:e0:e8:78:53:b3:d1:74:c5:be:f6:66:56:
         3c:30:4c:9e:2b:fe:b9:92:90:49:11:f9:67:31:79:94:9b:e6:
         07:22:5c:b6:5d:2a:ab:f2:8b:82:03:ca:90:18:68:e9:71:4e:
         ef:c5:3f:07:29:64:f8:74:74:e8:1a:b5:bd:0c:8a:44:ef:59:
         62:28:50:e2:4e:b1:c7:df:de:33:1f:b7:a0:7c:7c:80:e5:be:
         77:ee:ee:e7:df:d5:c7:f6:30:24:89:dc:8b:61:53:db:23:d5:
         b7:84:21:d3:e3:ee:d4:e9:44:4d:da:96:b0:29:94:41:a9:89:
         8a:ca:c2:ec:0d:21:8e:aa:4e:74:7e:44:09:a8:1c:07:e9:0f:
         23:73:aa:7f:87:a1:e3:0a:00:e2:d3:2f:fa:ca:3d:f8:b7:78:
         cf:bf:a0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----