Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/11716218f420bd48b359abe567de5a2331905b10.roa
File:                     11716218f420bd48b359abe567de5a2331905b10.roa (raw, json)
Hash identifier:          9VU6uFP75xsV/CXlbqhkxgYdDPIQ+6TZnzkPNT/D3vY=
Subject key identifier:   3C:A0:F4:55:39:A6:0C:70:3B:FF:4F:2F:5E:9B:6D:AD:82:CA:B8:36
Certificate issuer:       /CN=05820a897e090cc17411129464e856f3f8c8966d
Certificate serial:       78C8
Authority key identifier: 57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/11716218f420bd48b359abe567de5a2331905b10.roa
Signing time:             Tue 12 Apr 2022 16:54:05 +0000
ROA not before:           Tue 12 Apr 2022 03:00:00 +0000
ROA not after:            Fri 12 Apr 2024 03:00:00 +0000
asID:                     265572
IP address blocks:        45.174.58.0/24 maxlen: 30

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30920 (0x78c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05820a897e090cc17411129464e856f3f8c8966d
        Validity
            Not Before: Apr 12 03:00:00 2022 GMT
            Not After : Apr 12 03:00:00 2024 GMT
        Subject: CN=11716218f420bd48b359abe567de5a2331905b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:75:ec:64:ee:a2:bd:a4:47:56:9c:a8:7d:87:
                    f7:9a:c5:87:e9:a0:40:c0:88:de:fb:1e:b5:4c:98:
                    50:67:02:20:30:9b:1d:ff:ef:14:d1:1e:e7:6b:8d:
                    01:a0:79:a7:de:61:26:fa:91:89:1a:e7:15:78:38:
                    44:7d:18:e3:e2:9e:cd:cf:35:83:e7:58:ad:c2:fe:
                    70:49:55:a3:2d:35:cf:05:f0:6a:b3:95:03:12:4f:
                    b2:5e:69:8f:cf:1b:6f:67:05:e4:67:3b:2f:57:94:
                    08:b6:9f:19:c4:b4:d7:42:bc:8c:59:19:f5:a4:e9:
                    be:cb:d8:e7:d4:42:cd:e2:7e:89:00:63:5b:45:be:
                    26:72:3e:de:35:93:8f:51:2b:95:12:de:a9:37:a9:
                    c4:5c:9c:46:c3:4f:a1:7e:04:68:66:0d:34:b1:48:
                    27:ce:5c:d9:f7:61:7e:bd:28:ec:03:f2:9d:0a:ce:
                    7d:1f:23:95:b3:70:6c:3b:3d:7c:b5:63:72:ec:47:
                    10:38:c8:a2:25:22:d1:bc:67:90:51:fa:b2:f4:de:
                    ff:c6:ac:de:2a:8a:5f:d1:dc:3e:6e:01:3f:72:c9:
                    6a:60:90:1f:4c:83:cd:54:17:a2:df:93:3a:9b:00:
                    8d:b7:58:2e:10:05:fb:f5:8d:e5:2a:59:72:16:9e:
                    8a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A0:F4:55:39:A6:0C:70:3B:FF:4F:2F:5E:9B:6D:AD:82:CA:B8:36
            X509v3 Authority Key Identifier:
                keyid:57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/11716218f420bd48b359abe567de5a2331905b10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/05820a897e090cc17411129464e856f3f8c8966d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:8a:d2:14:03:9b:17:1e:16:73:91:8b:07:f1:9d:bb:fd:89:
         01:94:2e:85:4c:a2:66:59:3e:82:b6:fe:13:76:40:a9:f7:4f:
         a9:a0:f3:b6:4a:f6:78:48:7b:83:0f:30:25:c5:08:0e:1e:3d:
         e3:2a:44:df:61:77:c0:89:b5:9b:97:f9:20:bb:e1:a0:87:f0:
         5a:54:4a:fe:c8:db:7f:bd:37:b4:50:e0:c1:da:45:55:47:50:
         54:6a:f5:ce:d6:89:8c:20:cc:b8:13:81:2a:3c:9d:fc:76:93:
         4b:54:4e:87:44:1f:f6:86:6f:17:90:f1:9d:1c:e1:36:f6:3f:
         f8:08:1e:43:4b:7f:24:c2:81:af:4c:20:65:ea:59:88:bf:6d:
         60:49:96:91:82:37:b6:56:74:f9:64:11:84:c0:b0:c2:b5:aa:
         1c:51:c7:03:f0:a7:9b:3b:24:62:2b:65:64:64:17:d4:a0:de:
         95:d7:ef:40:f2:e2:46:16:d0:ab:a5:af:59:9e:60:2a:ff:39:
         fa:bf:05:75:46:0b:ef:c4:3a:39:8e:a4:44:97:36:ab:9b:ec:
         06:e0:2a:41:7f:f4:0a:7e:3b:64:7f:42:48:78:95:f8:ec:9d:
         53:29:9c:31:d1:2c:15:fb:08:4d:49:b2:f2:e9:b1:f9:e1:ad:
         e7:00:77:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----