Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36b592cd-e40c-4859-934d-207e2ea4b7fb/667791272dcf0c16fea20f687fe5a4700025e30a.roa
File:                     667791272dcf0c16fea20f687fe5a4700025e30a.roa (raw, json)
Hash identifier:          VZqNoB9JOgoelFHjqGEl/JWrc1m/VOyLTsgQYVDDjUg=
Subject key identifier:   2D:7A:59:0A:64:93:03:C0:9D:9C:07:E5:78:35:3A:D3:B5:26:20:ED
Certificate issuer:       /CN=e3a7d22f4285fa905cc90c503d35d7b1ec5ac592
Certificate serial:       03FBA5
Authority key identifier: 19:A8:D3:B0:6A:1D:F5:24:72:8B:C0:A5:97:D1:D3:25:14:8B:93:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e3a7d22f4285fa905cc90c503d35d7b1ec5ac592.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36b592cd-e40c-4859-934d-207e2ea4b7fb/667791272dcf0c16fea20f687fe5a4700025e30a.roa
Signing time:             Wed 22 Sep 2021 04:56:18 +0000
ROA not before:           Tue 29 Jun 2021 03:00:00 +0000
ROA not after:            Thu 29 Jun 2023 03:00:00 +0000
asID:                     271869
IP address blocks:        45.230.38.0/23 maxlen: 32
                          2803:4c10::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261029 (0x3fba5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3a7d22f4285fa905cc90c503d35d7b1ec5ac592
        Validity
            Not Before: Jun 29 03:00:00 2021 GMT
            Not After : Jun 29 03:00:00 2023 GMT
        Subject: CN=667791272dcf0c16fea20f687fe5a4700025e30a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:19:62:77:de:3f:27:94:35:9f:11:41:22:61:
                    b2:6a:2f:3e:63:1b:8f:6f:24:43:01:94:50:93:0e:
                    d5:8c:07:a9:6e:37:72:be:b4:d4:ee:b1:54:b6:ad:
                    76:60:8e:70:2b:74:ed:33:7e:00:fa:cb:29:da:9d:
                    21:8e:2b:c8:70:3f:ac:be:45:f8:f9:8d:67:fa:7b:
                    40:12:b0:ce:9e:5e:eb:b4:ce:73:f9:d2:de:b1:82:
                    e7:af:83:9a:ee:1a:f9:31:d7:24:1b:65:74:67:c2:
                    4f:05:04:84:2f:de:42:5f:c6:88:02:50:25:e2:1c:
                    18:e2:ea:a1:28:bb:ee:74:93:df:5c:0c:34:37:0b:
                    14:72:a6:eb:09:bf:fe:8c:ff:6f:f5:76:c4:a1:5f:
                    25:22:b9:9b:2d:77:a9:e5:bb:70:9b:8a:3e:57:10:
                    90:39:ef:d7:e3:a6:0f:7c:2f:4f:b1:eb:ad:88:3f:
                    7c:c3:75:b9:9b:28:8f:4b:35:2e:79:42:42:d7:b0:
                    57:f0:e7:75:2b:97:7f:a4:2c:bc:11:b0:11:00:e6:
                    4d:dc:13:19:97:01:22:49:f3:e4:c0:c3:27:a4:11:
                    7c:e6:d9:2e:bd:8a:39:19:5a:12:08:d0:61:3b:3d:
                    15:a7:26:30:c1:44:10:c1:4f:7b:66:3f:a8:2b:17:
                    70:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7A:59:0A:64:93:03:C0:9D:9C:07:E5:78:35:3A:D3:B5:26:20:ED
            X509v3 Authority Key Identifier:
                keyid:19:A8:D3:B0:6A:1D:F5:24:72:8B:C0:A5:97:D1:D3:25:14:8B:93:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e3a7d22f4285fa905cc90c503d35d7b1ec5ac592.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36b592cd-e40c-4859-934d-207e2ea4b7fb/667791272dcf0c16fea20f687fe5a4700025e30a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36b592cd-e40c-4859-934d-207e2ea4b7fb/e3a7d22f4285fa905cc90c503d35d7b1ec5ac592.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.38.0/23
                IPv6:
                  2803:4c10::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:a8:2b:92:85:61:a7:82:af:4f:01:d8:51:7c:e1:3a:cf:80:
         8e:17:16:54:b7:5c:b6:62:bc:b6:e7:6a:0e:b9:6d:30:0e:19:
         ad:40:1f:ce:55:99:10:80:93:bf:13:51:f1:91:4b:13:46:ea:
         32:c9:e4:3e:8a:32:bd:8d:f5:5a:7e:6a:83:1a:68:37:ee:1f:
         a5:8b:7e:1b:9f:1c:2a:6f:73:de:18:be:48:40:f6:13:b8:9e:
         bd:43:ed:62:5c:11:6a:4c:af:36:5a:41:32:c6:e0:77:02:63:
         36:4f:a2:ea:c7:99:02:37:fd:f8:de:85:29:33:2c:98:5f:37:
         5a:04:19:c6:6f:44:43:86:d1:8e:0c:78:c4:7c:48:52:26:da:
         11:58:43:45:48:e7:1c:90:7b:64:39:d0:15:fe:78:72:05:a4:
         d7:8a:e9:ac:f6:c3:69:66:0b:4e:70:47:3f:f8:39:8f:fd:de:
         77:0d:26:65:81:92:d8:2d:f0:33:4c:2b:a0:db:6e:d7:e6:b3:
         28:e9:8c:22:7f:4c:7f:3c:a3:98:4e:97:e5:c2:1f:35:14:87:
         94:39:62:72:73:28:36:80:3c:d1:c0:5b:e5:a3:ef:78:cd:0e:
         f9:97:14:ea:db:55:ea:b5:c5:73:64:cf:89:87:3c:9d:b8:80:
         f2:34:42:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----