Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/c24024bb61071fdd8cee1e3cde8478999dac790f.roa
File:                     c24024bb61071fdd8cee1e3cde8478999dac790f.roa (raw, json)
Hash identifier:          JoCYg87WfoY+XsQw8rE/SvYM6hbxCAbKwW31SeCtjYA=
Subject key identifier:   83:2D:7F:1E:40:E6:39:02:AA:B8:92:F2:78:99:38:38:7A:8A:45:7D
Certificate issuer:       /CN=05820a897e090cc17411129464e856f3f8c8966d
Certificate serial:       8034
Authority key identifier: 57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/c24024bb61071fdd8cee1e3cde8478999dac790f.roa
Signing time:             Tue 12 Apr 2022 16:56:25 +0000
ROA not before:           Thu 31 Mar 2022 03:00:00 +0000
ROA not after:            Sun 31 Mar 2024 03:00:00 +0000
asID:                     265559
IP address blocks:        45.174.57.0/24 maxlen: 30

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32820 (0x8034)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05820a897e090cc17411129464e856f3f8c8966d
        Validity
            Not Before: Mar 31 03:00:00 2022 GMT
            Not After : Mar 31 03:00:00 2024 GMT
        Subject: CN=c24024bb61071fdd8cee1e3cde8478999dac790f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:37:c8:82:13:0e:28:51:41:6f:bc:aa:83:94:
                    eb:68:50:79:73:11:d3:bf:3c:ef:b6:9e:6a:a4:8d:
                    76:52:5c:bd:88:bd:b1:51:94:d6:d0:25:63:b3:20:
                    00:55:4a:31:f6:31:3d:23:95:72:b8:8c:83:fb:b3:
                    1b:07:7b:78:78:39:2a:85:97:8c:ef:00:c8:81:e6:
                    b3:ca:54:05:99:f7:39:eb:08:ea:96:d2:2d:a0:89:
                    7e:d9:2a:1f:31:b6:77:5b:c0:0f:c8:02:c0:fb:46:
                    ae:27:3f:42:60:a4:75:00:f9:19:1c:11:f4:75:4e:
                    09:ce:b6:bf:34:39:6e:a9:5b:99:45:8f:b0:02:b9:
                    a5:dc:db:78:cd:2b:34:3f:1a:1b:36:ed:93:07:4a:
                    68:ee:07:a1:38:0b:82:6b:cb:05:54:78:b0:9b:0e:
                    60:0e:06:19:05:e1:fe:4a:de:a4:e0:6f:99:c7:f8:
                    0c:63:cd:76:06:f9:30:c0:90:d6:62:f1:8a:53:e8:
                    3a:48:5d:3c:d5:74:32:12:3f:85:a6:a1:b9:a4:a9:
                    06:35:8b:47:46:cb:0e:3f:90:30:3f:17:02:18:04:
                    dc:09:c6:de:54:1b:7d:87:d8:b6:67:5a:62:6e:16:
                    14:dc:c0:52:75:cc:bf:3b:18:0b:78:00:33:f6:03:
                    cd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2D:7F:1E:40:E6:39:02:AA:B8:92:F2:78:99:38:38:7A:8A:45:7D
            X509v3 Authority Key Identifier:
                keyid:57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/c24024bb61071fdd8cee1e3cde8478999dac790f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/05820a897e090cc17411129464e856f3f8c8966d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:5c:19:cd:ad:57:d8:b9:6f:7d:5f:d0:6a:37:1e:44:4a:33:
         cf:09:f8:9d:dc:18:f4:54:ef:d6:9d:d3:3b:f6:35:e4:28:35:
         9d:63:a4:a8:bc:06:c1:ec:77:01:c1:e0:c3:21:c1:fa:b1:31:
         10:32:04:50:a2:8a:79:92:ae:d7:34:93:ba:c2:df:cb:82:49:
         cc:5c:3d:8c:17:9d:96:aa:1d:9c:52:73:8c:c5:69:08:9c:09:
         4b:fa:fc:6c:9c:a8:54:ca:cc:73:85:ad:63:53:e5:aa:1b:cc:
         44:33:5c:9f:8a:62:ca:71:e0:af:22:0e:89:44:af:4a:b3:0c:
         cc:91:20:b4:6f:e7:26:f9:05:3d:48:24:ac:07:0f:b8:70:d4:
         e0:cb:7e:fe:fc:7a:20:c7:69:cb:53:04:98:b7:5a:a4:8c:4a:
         60:27:8d:6c:15:ac:0d:3d:7e:a4:c9:a8:0a:60:e8:db:62:4e:
         47:94:a8:9d:bc:e9:89:bf:03:1d:0a:a2:80:25:99:32:74:d7:
         fb:27:00:e6:c6:d3:51:82:15:17:8d:8a:42:6c:78:fe:64:17:
         6d:c7:cf:af:b9:bd:6c:8b:88:6b:0d:18:2b:40:40:29:2f:be:
         2d:5e:86:aa:e1:e1:82:45:aa:e8:bd:14:72:01:54:50:0c:33:
         8c:e1:6f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----