Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/204133d9b0c81819496a07d7d9e606945e3deb09.roa
File:                     204133d9b0c81819496a07d7d9e606945e3deb09.roa (raw, json)
Hash identifier:          fp+KRAwXpWvTJdGLAXzb73VulxDNdVCmJSW9G7A3bJM=
Subject key identifier:   53:73:AA:2D:39:25:6A:78:39:C2:56:21:39:C2:A0:B9:3A:87:4C:70
Certificate issuer:       /CN=b5f258ef62df2b196ded7286480ca5b964511dbe
Certificate serial:       11D647
Authority key identifier: B1:7C:AD:16:94:EC:05:3C:8F:1A:C0:FE:78:30:5D:B8:A6:71:AF:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5f258ef62df2b196ded7286480ca5b964511dbe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/204133d9b0c81819496a07d7d9e606945e3deb09.roa
Signing time:             Wed 24 Nov 2021 01:42:37 +0000
ROA not before:           Fri 27 Aug 2021 03:00:00 +0000
ROA not after:            Sun 27 Aug 2023 03:00:00 +0000
asID:                     396356
IP address blocks:        45.166.109.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1168967 (0x11d647)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f258ef62df2b196ded7286480ca5b964511dbe
        Validity
            Not Before: Aug 27 03:00:00 2021 GMT
            Not After : Aug 27 03:00:00 2023 GMT
        Subject: CN=204133d9b0c81819496a07d7d9e606945e3deb09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:da:a5:7a:9e:e9:45:85:19:35:32:de:97:bb:
                    cc:3f:4f:f3:c7:44:89:de:0c:d1:1f:d6:84:09:40:
                    b5:b6:e3:2c:f2:40:a5:98:b6:fa:26:c1:86:16:04:
                    a5:e9:0e:1c:1b:c3:63:7d:c0:0d:e3:d6:2c:a1:91:
                    b4:9f:c0:88:cf:07:00:1d:05:38:d1:47:ba:3c:4e:
                    47:93:a5:41:73:95:ec:65:2d:2a:a3:5d:5b:46:5e:
                    50:35:fe:42:ae:b8:95:ac:ef:fd:ba:8a:0a:e4:91:
                    1b:2a:1b:ec:2c:16:bf:69:05:2e:3a:95:a6:0e:67:
                    11:2d:0f:67:be:28:ac:4e:44:4c:a4:b5:93:84:d5:
                    80:a6:8d:9d:72:4a:d8:99:80:c3:60:a7:3c:80:e9:
                    e0:aa:7f:4f:d9:17:69:fb:04:5f:9e:e2:29:ba:7d:
                    4e:ce:0d:21:25:f0:e2:c9:05:d3:8a:47:c6:3b:29:
                    aa:4f:e6:54:59:87:24:3c:1b:c1:a3:55:26:fb:18:
                    1d:40:68:b1:68:d4:41:a9:f9:cf:ff:a4:ae:1f:54:
                    63:eb:5b:ba:97:d6:54:6f:c5:e7:65:56:0a:52:60:
                    b0:bc:1d:91:12:7d:02:b9:18:8f:d8:3a:19:88:4a:
                    98:cf:ce:9a:25:8a:12:a0:28:2d:3b:ce:23:fd:e1:
                    46:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:73:AA:2D:39:25:6A:78:39:C2:56:21:39:C2:A0:B9:3A:87:4C:70
            X509v3 Authority Key Identifier:
                keyid:B1:7C:AD:16:94:EC:05:3C:8F:1A:C0:FE:78:30:5D:B8:A6:71:AF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5f258ef62df2b196ded7286480ca5b964511dbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/204133d9b0c81819496a07d7d9e606945e3deb09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2dc1ccd8-92b2-49ee-83f3-973d415f3b6a/b5f258ef62df2b196ded7286480ca5b964511dbe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:50:85:84:61:33:f0:71:9e:d1:ed:93:42:b0:11:c8:b0:22:
         ed:1c:23:40:2c:ca:5f:63:03:39:84:55:fe:92:00:fe:21:83:
         f5:04:72:c2:4a:57:73:aa:e8:b3:ed:45:de:06:0b:9c:6c:73:
         c3:67:d4:90:a6:57:4c:8b:f7:83:fd:3b:c2:86:b0:31:29:34:
         44:6f:25:2f:82:3d:24:51:5a:81:b2:ba:a7:e4:41:b7:f2:d3:
         70:18:7c:40:08:7a:28:40:71:5c:fb:e9:a7:00:33:50:a9:52:
         d1:24:1f:dd:fb:11:f8:8d:11:c0:30:21:86:9f:04:4e:fe:9c:
         d6:31:6b:69:eb:7b:d7:a9:2a:14:ec:95:2b:d3:75:89:5d:91:
         95:1f:d1:52:fc:88:3d:83:4a:91:d4:d7:9c:7d:b0:ce:c3:c3:
         c0:05:39:95:cb:d4:7a:0e:dc:a0:41:b6:5b:e9:84:e4:5a:e6:
         89:cb:d9:d8:36:3e:36:b1:13:28:fa:95:5c:b9:ea:fb:2a:c0:
         b1:7d:58:d2:64:4e:a4:39:3c:e4:77:3a:85:73:c3:4f:df:1a:
         18:46:a7:77:c2:f4:93:30:9c:0e:c0:a7:5a:1d:d2:3c:c0:c6:
         c3:ab:03:d4:e2:1d:38:2f:33:a0:8b:d8:9d:fe:0d:a3:fa:07:
         4a:15:29:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----