Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39584230-c7c0-4c21-8d3a-aa85f95027fa/dc574cdd7aa70648609fa7915845896ee751e497.roa
File:                     dc574cdd7aa70648609fa7915845896ee751e497.roa (raw, json)
Hash identifier:          /UBV7MgP1qVlGK+MdSWWHPtmdjlqYD2xxqVi/SaBy/4=
Subject key identifier:   7A:A0:D2:B2:E0:90:C1:0E:FF:41:87:B5:B3:85:C7:B4:AE:12:83:54
Certificate issuer:       /CN=6414ea9bc4d9056b40ed2fb4c762184bca3b8608
Certificate serial:       04414D
Authority key identifier: 31:EB:7F:D1:83:FB:EA:8C:6E:86:03:18:5A:82:F1:2A:22:91:65:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6414ea9bc4d9056b40ed2fb4c762184bca3b8608.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39584230-c7c0-4c21-8d3a-aa85f95027fa/dc574cdd7aa70648609fa7915845896ee751e497.roa
Signing time:             Wed 24 Mar 2021 14:32:40 +0000
ROA not before:           Wed 24 Mar 2021 14:32:40 +0000
ROA not after:            Tue 24 Mar 2026 14:32:40 +0000
asID:                     265865
IP address blocks:        45.226.58.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278861 (0x4414d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6414ea9bc4d9056b40ed2fb4c762184bca3b8608
        Validity
            Not Before: Mar 24 14:32:40 2021 GMT
            Not After : Mar 24 14:32:40 2026 GMT
        Subject: CN=dc574cdd7aa70648609fa7915845896ee751e497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dd:7b:c2:e5:2a:f9:e0:1c:a2:98:57:a4:65:
                    7d:d6:0a:8a:a8:43:75:1d:5c:3b:bd:77:d5:6d:07:
                    03:a2:8f:58:55:bb:91:6d:15:3f:b6:37:56:f3:ff:
                    38:e5:dc:c9:29:90:39:40:52:92:5d:67:8a:0f:67:
                    22:99:af:d5:2e:fb:a6:84:15:8c:89:d6:1e:3f:a4:
                    b7:24:2b:85:5d:cc:0d:be:40:32:bf:ef:b1:f6:fb:
                    6f:92:cd:95:80:87:20:23:bf:f3:b6:34:9e:01:2b:
                    d9:40:61:10:7e:d3:6f:3c:eb:b3:eb:70:27:24:46:
                    9d:6a:c0:b8:c4:73:c0:01:7a:2d:e6:1a:17:b0:32:
                    37:67:b0:f5:d9:48:70:12:3f:d8:d2:f5:91:1b:d3:
                    dd:71:fb:d9:e4:9c:2d:e1:a8:89:ea:f8:c2:de:2e:
                    59:e5:3f:d8:3b:65:fc:33:2e:41:69:6e:81:5a:b5:
                    4c:ab:a4:69:7b:68:2c:ad:7a:cd:84:e4:b5:e1:4e:
                    47:dd:41:ef:35:54:e2:b3:ed:81:0c:8f:05:be:3e:
                    34:35:14:4e:c1:b7:ba:26:38:86:39:ce:f6:2f:0c:
                    44:94:7a:8f:9a:0d:62:0a:ff:53:f1:8d:59:d2:eb:
                    1e:ca:eb:09:5b:f8:b2:18:2d:62:86:be:d0:bf:fa:
                    9e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A0:D2:B2:E0:90:C1:0E:FF:41:87:B5:B3:85:C7:B4:AE:12:83:54
            X509v3 Authority Key Identifier:
                keyid:31:EB:7F:D1:83:FB:EA:8C:6E:86:03:18:5A:82:F1:2A:22:91:65:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6414ea9bc4d9056b40ed2fb4c762184bca3b8608.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39584230-c7c0-4c21-8d3a-aa85f95027fa/dc574cdd7aa70648609fa7915845896ee751e497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39584230-c7c0-4c21-8d3a-aa85f95027fa/6414ea9bc4d9056b40ed2fb4c762184bca3b8608.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:ef:07:7b:3f:d1:c3:96:11:e3:f5:60:99:b3:3e:37:dd:9a:
         57:b6:bf:c7:ef:6d:85:c6:dd:27:f0:fc:dd:0a:54:ec:94:27:
         c7:5b:de:3f:5d:2b:48:82:af:6a:5d:dd:95:e6:70:c4:3b:a1:
         3e:bd:0e:2e:a8:52:17:c8:1e:e2:cb:ba:6f:12:0a:bf:e1:5e:
         42:8e:84:44:6e:5e:2d:b4:86:7a:68:25:e5:ad:f8:81:8e:2a:
         3e:36:69:97:87:f7:48:7d:9a:e4:d6:59:b6:ae:41:0b:b7:d4:
         8f:6f:8e:ab:b8:63:93:4c:b6:9c:a6:91:02:7b:c8:82:a2:83:
         d1:bb:71:50:c1:1b:44:84:88:09:b0:2d:85:de:f5:ca:e0:42:
         a4:5f:fd:23:23:05:0c:9f:48:e7:b1:8d:97:79:6c:9b:a8:3a:
         78:89:57:ad:00:b1:d3:85:a6:4c:01:3e:e1:10:a9:3e:88:f9:
         41:98:a1:ff:51:ed:9a:e2:02:db:fa:5f:ca:7b:a7:c0:d6:5a:
         89:7d:b6:58:ee:a1:eb:c6:c3:fd:36:9a:c6:ec:6e:0c:75:1d:
         b5:8c:d5:3e:d2:cd:18:98:6a:39:67:f0:04:d2:c1:63:0b:d2:
         41:80:36:9b:69:28:9e:28:fe:f3:54:f2:81:bb:26:d4:f1:f2:
         f2:a8:cb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----