Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/7d205f7e18731f608c2e093b6c594334ecec3599.roa
File:                     7d205f7e18731f608c2e093b6c594334ecec3599.roa (raw, json)
Hash identifier:          U3UQg+JOziIldxEI+PoyQMWJJQd/6rlc+2kFgzzzZMY=
Subject key identifier:   7A:3E:35:83:DB:55:65:AB:5B:B4:FE:5F:B6:F8:36:FB:9F:ED:D1:CC
Certificate issuer:       /CN=05820a897e090cc17411129464e856f3f8c8966d
Certificate serial:       6B85
Authority key identifier: 57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/7d205f7e18731f608c2e093b6c594334ecec3599.roa
Signing time:             Tue 12 Apr 2022 16:52:52 +0000
ROA not before:           Tue 12 Apr 2022 03:00:00 +0000
ROA not after:            Fri 12 Apr 2024 03:00:00 +0000
asID:                     265572
IP address blocks:        45.174.58.0/24 maxlen: 30

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27525 (0x6b85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05820a897e090cc17411129464e856f3f8c8966d
        Validity
            Not Before: Apr 12 03:00:00 2022 GMT
            Not After : Apr 12 03:00:00 2024 GMT
        Subject: CN=7d205f7e18731f608c2e093b6c594334ecec3599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f1:c4:60:ed:58:a6:5d:b2:13:2a:2c:d5:c0:
                    1f:10:a3:ec:65:5b:c0:a7:83:5c:02:b3:d3:bf:81:
                    41:f6:f7:2b:3c:4d:3c:c9:90:42:4c:f2:6f:4d:84:
                    08:eb:77:a0:17:a5:3b:6f:a2:de:76:b6:2c:26:d0:
                    d6:58:e8:44:22:00:01:68:dd:74:ba:87:ac:89:e8:
                    4c:ed:92:61:1b:e3:1a:13:2c:18:01:c6:6a:11:28:
                    57:e0:67:bc:67:63:83:99:ae:c4:46:fb:c7:b3:12:
                    ff:f8:1f:91:50:7d:15:38:62:5a:c0:fc:2d:51:92:
                    6d:12:97:eb:81:f4:0a:9b:6a:c5:a3:05:44:59:c5:
                    93:f9:5a:9b:a2:ea:eb:1e:5d:4b:3f:a2:51:28:cf:
                    2b:74:9c:f6:b0:02:32:5d:50:4f:63:de:9d:4c:47:
                    3d:2e:f8:a6:43:04:24:02:d1:93:e3:34:69:ee:67:
                    02:60:45:a8:03:2d:a3:48:8b:7e:90:2f:0a:1c:ff:
                    53:f4:62:d2:f5:06:cb:6c:2c:16:1d:01:0c:b5:db:
                    4f:71:4f:27:dd:3a:38:c4:6c:e5:4f:2c:29:02:99:
                    45:09:71:cb:0f:eb:34:7c:52:df:36:64:f1:20:6a:
                    90:a3:b9:76:1b:e6:24:99:53:5a:5a:a8:b5:f9:8a:
                    eb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3E:35:83:DB:55:65:AB:5B:B4:FE:5F:B6:F8:36:FB:9F:ED:D1:CC
            X509v3 Authority Key Identifier:
                keyid:57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/7d205f7e18731f608c2e093b6c594334ecec3599.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/05820a897e090cc17411129464e856f3f8c8966d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:57:dd:a8:34:aa:e9:31:82:16:4e:6c:e9:8a:38:b4:0c:81:
         11:34:1c:ae:bb:01:bf:3a:7f:5f:2e:67:75:f8:7b:60:1a:1e:
         f5:3c:b8:7d:38:49:1c:27:3d:76:1d:69:76:39:c4:c9:df:8c:
         ec:c6:5e:bd:cc:ec:a5:df:df:4b:e3:55:79:ec:e9:2f:13:df:
         1e:9f:3c:9f:1f:d2:9e:c3:08:d6:57:61:89:82:82:1c:37:72:
         a3:22:56:18:d4:f5:50:11:6d:87:28:57:63:32:7a:94:83:93:
         ed:85:ed:51:c3:b3:f3:e0:de:75:4c:25:cb:3f:3e:cc:43:e3:
         34:2d:f5:b6:c6:5f:02:fc:a8:44:b8:89:44:2e:e2:71:e0:a5:
         50:57:5c:49:55:1d:72:e7:d8:2d:ea:15:57:e5:52:54:9d:c5:
         eb:74:1f:fc:28:d9:b0:47:98:af:be:00:62:a9:f8:d8:62:2a:
         ab:f8:ff:af:44:6b:2e:ed:b2:11:3d:30:93:23:a5:c5:ab:db:
         63:d7:41:5a:57:a9:02:34:90:01:89:e6:bd:30:ce:f3:ab:c4:
         fa:6d:94:7c:4c:14:5f:5e:23:0d:6f:99:c4:78:ad:8d:f6:e9:
         16:98:ef:9c:2f:1a:98:c5:50:37:2b:31:49:1d:73:ed:92:a6:
         86:b8:bb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----