Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2dd9cd66-f5ae-4d7f-a4b6-68cfa9111840/81018881a4fb1b571a88153ace9940017a7e0ed0.roa
File:                     81018881a4fb1b571a88153ace9940017a7e0ed0.roa (raw, json)
Hash identifier:          PPlWZk/2ntwKQx03uceY7UcQvs9IugMjG/ybR6603UQ=
Subject key identifier:   D4:00:97:33:4D:2D:2D:78:E4:A2:8A:1C:0C:26:9C:BC:1B:8F:EF:C0
Certificate issuer:       /CN=b4e2545f234d59b5f6dd2e834c9c9e52ce704173
Certificate serial:       05AFC7
Authority key identifier: E5:80:3B:4F:AF:A4:29:01:B5:A7:26:E0:51:CA:65:6C:D6:7F:FD:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e2545f234d59b5f6dd2e834c9c9e52ce704173.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2dd9cd66-f5ae-4d7f-a4b6-68cfa9111840/81018881a4fb1b571a88153ace9940017a7e0ed0.roa
Signing time:             Fri 31 Dec 2021 14:56:33 +0000
ROA not before:           Fri 31 Dec 2021 03:00:00 +0000
ROA not after:            Sun 31 Dec 2023 03:00:00 +0000
asID:                     271907
IP address blocks:        181.233.88.0/22 maxlen: 22
                          2803:e210::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372679 (0x5afc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e2545f234d59b5f6dd2e834c9c9e52ce704173
        Validity
            Not Before: Dec 31 03:00:00 2021 GMT
            Not After : Dec 31 03:00:00 2023 GMT
        Subject: CN=81018881a4fb1b571a88153ace9940017a7e0ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:59:2b:89:6c:13:71:0e:3a:fd:7e:7f:e4:2d:
                    32:4a:2e:c8:70:6c:1e:1e:a2:73:7a:67:0f:42:21:
                    96:70:62:12:f9:e1:b6:c6:75:b7:2e:9e:44:42:ea:
                    85:3d:94:dd:d0:2e:52:6b:24:f7:c8:90:94:73:eb:
                    10:60:7b:e6:06:2b:4f:20:13:82:a2:c5:87:10:3c:
                    91:a9:42:91:d2:8c:96:bf:2c:3e:a5:35:84:bb:f8:
                    f1:94:10:d8:c4:4c:ce:1f:6c:d0:44:f4:90:dd:2a:
                    ea:b3:97:a8:96:75:cb:d3:13:15:6e:6c:26:74:5c:
                    18:57:c6:8d:93:93:67:61:3f:d7:26:25:13:31:60:
                    23:8a:3e:f8:d6:94:9a:c2:e6:48:c2:42:e3:0c:19:
                    55:7c:c7:94:26:fa:ad:89:10:48:cf:00:7e:48:5e:
                    a8:d3:a0:6b:df:86:84:8f:3d:7a:e3:61:8a:e1:ca:
                    bc:6c:ea:4f:4f:1c:5c:51:79:86:05:cb:1b:80:16:
                    c1:13:88:1c:7e:31:65:0e:ed:e0:f4:98:6d:da:7f:
                    da:14:e9:82:60:c3:87:55:8f:dc:6c:d2:02:b4:e3:
                    5c:f7:6c:9a:68:c9:cf:6e:1e:4e:d3:fa:fa:51:34:
                    03:7e:eb:56:83:c9:a4:f8:c0:a8:0c:59:20:8f:53:
                    89:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:00:97:33:4D:2D:2D:78:E4:A2:8A:1C:0C:26:9C:BC:1B:8F:EF:C0
            X509v3 Authority Key Identifier:
                keyid:E5:80:3B:4F:AF:A4:29:01:B5:A7:26:E0:51:CA:65:6C:D6:7F:FD:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e2545f234d59b5f6dd2e834c9c9e52ce704173.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2dd9cd66-f5ae-4d7f-a4b6-68cfa9111840/81018881a4fb1b571a88153ace9940017a7e0ed0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2dd9cd66-f5ae-4d7f-a4b6-68cfa9111840/b4e2545f234d59b5f6dd2e834c9c9e52ce704173.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.88.0/22
                IPv6:
                  2803:e210::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:c2:6b:0f:e2:b1:08:08:d4:37:9c:b8:09:f2:62:47:94:73:
         7c:fe:62:e8:53:5f:50:3f:ce:04:90:be:5f:97:a4:91:28:96:
         8b:a9:d1:25:a5:9d:57:e8:6e:fa:f6:79:08:e1:36:94:75:05:
         d6:09:2f:38:09:13:93:b2:53:54:16:cc:96:3f:d6:48:36:d8:
         70:20:5b:e4:b4:ee:d6:3a:0d:3c:3f:a7:fe:9b:dd:20:3e:f2:
         c3:ee:12:44:86:05:e4:db:c5:2d:19:f4:2c:8e:16:3c:81:6d:
         42:7b:6e:56:a4:22:f2:d1:8e:1c:f6:e8:07:b1:75:25:ee:26:
         68:8a:54:34:ba:0a:6a:83:10:3b:79:69:15:5b:4a:cd:79:d4:
         31:64:09:f2:d5:54:90:b8:0c:5a:de:28:0d:10:b6:3a:06:41:
         1f:a2:b1:ac:0c:ec:c1:86:d5:8f:15:44:fc:d2:51:f5:15:a9:
         b8:59:a3:cf:17:f4:8f:23:80:b8:3f:e3:1b:be:a7:92:6f:2e:
         63:23:46:97:ac:fc:71:6c:4c:99:44:e5:71:74:64:09:b3:a2:
         7c:47:9a:00:30:8b:db:a7:49:19:2b:6d:c7:8c:b8:de:96:fd:
         87:73:5d:de:76:4c:c5:a7:b8:ef:6d:8d:bb:75:66:46:8b:0e:
         7d:9f:31:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----