Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/831e49fe418c43b06f8d8fccea1758d7478c89bc.roa
File:                     831e49fe418c43b06f8d8fccea1758d7478c89bc.roa (raw, json)
Hash identifier:          XE9heiczan9dLTXub3BwO29OIUHM6MrZQqAljwx2/qQ=
Subject key identifier:   5E:8C:7F:B8:4E:54:FD:BF:8F:33:9C:23:F1:D5:1D:1E:1B:37:AD:FE
Certificate issuer:       /CN=bd9e7183ffaa02803fe68e22a1e77851adb2eb28
Certificate serial:       0D4892
Authority key identifier: EA:6A:E3:33:73:C2:63:42:3A:F7:72:55:2C:65:79:D6:C9:B2:02:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/831e49fe418c43b06f8d8fccea1758d7478c89bc.roa
Signing time:             Wed 24 Mar 2021 14:46:14 +0000
ROA not before:           Wed 24 Mar 2021 14:46:13 +0000
ROA not after:            Tue 24 Mar 2026 14:46:13 +0000
asID:                     266784
IP address blocks:        45.235.120.0/22 maxlen: 22
                          2803:a0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870546 (0xd4892)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd9e7183ffaa02803fe68e22a1e77851adb2eb28
        Validity
            Not Before: Mar 24 14:46:13 2021 GMT
            Not After : Mar 24 14:46:13 2026 GMT
        Subject: CN=831e49fe418c43b06f8d8fccea1758d7478c89bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:14:7c:c5:68:70:6d:a1:87:05:6f:a5:a6:08:
                    8e:1a:29:1f:a8:b7:24:c2:12:4d:21:6e:7d:a4:49:
                    a4:62:14:8a:22:f5:31:9f:d5:a1:c6:54:bc:c7:24:
                    4f:41:9b:a4:10:ac:9d:70:ae:4c:10:f0:82:c5:61:
                    e2:93:cb:2f:b9:49:fa:75:bc:bf:d5:e2:f5:34:6b:
                    d5:4d:68:59:9a:25:1c:ae:42:d6:69:40:f3:d5:e9:
                    84:2b:f4:3c:73:94:07:3a:24:d1:9c:4d:d2:c9:83:
                    9c:8d:67:f3:e8:f2:01:0c:5f:56:fa:54:e6:1b:2e:
                    f4:b7:a6:5f:b6:d3:1b:19:e7:92:35:8e:9d:8a:85:
                    88:76:f7:6d:69:38:39:1f:1a:25:3f:a0:f9:b8:07:
                    d2:6a:b5:00:ad:d4:1c:7a:fc:54:e1:3e:bf:ca:99:
                    de:7e:a0:66:14:5c:35:35:95:ad:7b:7b:5c:59:06:
                    0c:b4:00:a2:5e:55:88:b8:ec:ee:d4:d9:4d:cd:0f:
                    45:f0:a7:79:fd:cc:1b:65:48:a0:33:aa:b0:01:54:
                    af:10:0d:15:bb:fc:16:ba:bf:f4:1b:b8:02:a7:31:
                    bb:92:1e:58:e3:48:b4:b3:61:5e:66:b7:06:aa:cd:
                    82:47:91:d2:00:fb:54:46:d6:7e:02:63:ab:a3:51:
                    62:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8C:7F:B8:4E:54:FD:BF:8F:33:9C:23:F1:D5:1D:1E:1B:37:AD:FE
            X509v3 Authority Key Identifier:
                keyid:EA:6A:E3:33:73:C2:63:42:3A:F7:72:55:2C:65:79:D6:C9:B2:02:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/831e49fe418c43b06f8d8fccea1758d7478c89bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.120.0/22
                IPv6:
                  2803:a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:51:71:aa:7c:fa:cc:b8:fd:ee:47:28:9b:57:15:7e:99:42:
         93:40:50:09:58:7f:fb:5e:39:34:b6:43:8f:59:eb:bf:59:39:
         53:87:76:12:a8:f5:53:86:e8:e8:21:d2:ea:6a:ef:72:40:e0:
         9f:e8:2d:52:86:2a:cb:7e:ec:47:ce:b9:dc:e3:c3:11:57:db:
         c5:88:13:7d:a6:af:62:c8:84:22:35:79:b1:53:a6:02:40:ab:
         e2:e3:70:bf:c0:b9:f6:33:fb:71:c6:e6:32:5e:b4:8b:06:6e:
         3b:74:fa:ee:f8:e2:fd:3c:8c:e1:2b:00:65:f8:75:db:65:d6:
         00:f5:5c:5a:32:c4:e4:41:23:af:d3:05:e8:9e:2d:d2:13:2e:
         51:1e:f7:e3:5e:b3:d6:ff:ff:50:56:38:94:b4:f8:53:b5:d9:
         61:46:05:02:b1:33:c4:70:a2:25:39:3a:b6:b6:5d:f7:95:2b:
         af:23:ad:e9:a5:fc:b9:37:05:c2:40:f7:21:bf:e9:96:56:9d:
         f4:77:ac:3e:9b:d8:4c:d4:89:e3:0a:49:ae:ad:8f:57:a8:dd:
         1a:7e:1c:be:b3:f0:af:d1:cb:b1:3d:26:a4:bd:8a:79:bd:2f:
         f5:e8:00:44:ad:42:15:6f:b1:ca:b7:a4:c9:e7:45:71:f6:f7:
         0f:44:f1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----