Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44774856-6168-45c3-adb2-b12b0c0c20f2/5d933ebeadf31d79c427e9d8fb1214f5e13b10f9.roa
File:                     5d933ebeadf31d79c427e9d8fb1214f5e13b10f9.roa (raw, json)
Hash identifier:          Qz/AFJjZnbC09g9uJ6dpxU8YUrn9KzzX08072iBoiLE=
Subject key identifier:   29:14:AA:8B:90:3B:95:E2:A8:96:28:32:70:DB:88:F1:97:24:2F:9A
Certificate issuer:       /CN=5e53a4a121c18653f9cf4e1bc0246c1e1e322315
Certificate serial:       136F78
Authority key identifier: 0D:C8:42:59:2F:E7:59:DD:93:BB:9F:D8:1D:AB:D9:FE:9C:AF:DD:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e53a4a121c18653f9cf4e1bc0246c1e1e322315.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44774856-6168-45c3-adb2-b12b0c0c20f2/5d933ebeadf31d79c427e9d8fb1214f5e13b10f9.roa
Signing time:             Wed 28 Sep 2022 17:00:27 +0000
ROA not before:           Wed 28 Sep 2022 17:00:27 +0000
ROA not after:            Tue 28 Sep 2027 17:00:27 +0000
asID:                     64116
IP address blocks:        45.183.44.0/22 maxlen: 24
                          2803:cd60::/32 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1273720 (0x136f78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e53a4a121c18653f9cf4e1bc0246c1e1e322315
        Validity
            Not Before: Sep 28 17:00:27 2022 GMT
            Not After : Sep 28 17:00:27 2027 GMT
        Subject: CN=5d933ebeadf31d79c427e9d8fb1214f5e13b10f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:85:fe:e3:2e:b9:ee:21:7b:0b:38:65:8f:14:
                    81:72:13:c0:20:b5:d2:23:42:09:04:d3:ae:ca:38:
                    fa:e1:34:5d:06:8a:52:f0:42:7b:67:79:ba:2e:1f:
                    51:b4:fb:1e:85:34:17:57:ad:99:da:93:1b:00:96:
                    f8:1a:2d:3c:82:15:91:73:9a:42:a9:61:64:c7:bf:
                    6f:99:4b:de:d7:86:b0:c5:ad:9d:f9:83:d1:ad:ac:
                    b7:71:cb:27:40:a6:63:6c:e5:e9:3f:b7:e6:39:be:
                    a6:e6:8e:1f:88:b8:c9:0d:ac:2f:6e:df:73:0c:84:
                    48:10:ce:b2:33:78:7a:70:f0:68:50:8f:d3:a5:43:
                    06:12:04:d6:ba:51:a4:df:2b:ec:1a:58:3c:be:4a:
                    48:b2:70:6d:c7:25:4c:23:69:0d:04:ea:ba:55:25:
                    d4:c3:24:a5:08:74:16:d0:f9:a6:f6:0c:04:89:ae:
                    bd:ab:5f:59:9b:54:d5:35:b4:db:58:fb:f2:c2:02:
                    90:6b:6d:28:76:71:3a:bd:17:ff:4d:e7:05:72:02:
                    41:e3:0f:a2:20:5b:91:d2:75:ba:93:3c:e5:69:67:
                    d4:87:53:d1:d2:25:c5:a0:e9:f8:22:ea:33:52:b4:
                    2d:f0:1a:19:75:22:9a:ae:cb:4e:60:4a:67:6a:e0:
                    af:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:14:AA:8B:90:3B:95:E2:A8:96:28:32:70:DB:88:F1:97:24:2F:9A
            X509v3 Authority Key Identifier:
                keyid:0D:C8:42:59:2F:E7:59:DD:93:BB:9F:D8:1D:AB:D9:FE:9C:AF:DD:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e53a4a121c18653f9cf4e1bc0246c1e1e322315.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44774856-6168-45c3-adb2-b12b0c0c20f2/5d933ebeadf31d79c427e9d8fb1214f5e13b10f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44774856-6168-45c3-adb2-b12b0c0c20f2/5e53a4a121c18653f9cf4e1bc0246c1e1e322315.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.44.0/22
                IPv6:
                  2803:cd60::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:3c:e7:49:9c:4c:c4:61:1d:54:4b:3a:1e:d0:47:04:28:16:
         e0:a4:fa:c4:60:41:7a:bf:98:8a:40:89:c2:25:e1:1a:cf:8e:
         11:04:e8:56:98:7c:6e:3b:33:be:20:d2:52:11:1e:af:51:9b:
         0f:bd:31:28:1f:de:cd:69:99:71:cf:dc:2c:ba:e4:d5:d2:81:
         b8:44:fa:91:93:00:02:df:b8:2a:b1:cd:f3:2c:b7:c7:34:b9:
         20:74:aa:72:9d:a8:0d:1b:ef:cd:4e:cc:b0:a6:29:f6:17:e9:
         16:1c:05:ee:b0:d0:18:f1:6a:93:ec:81:98:03:6d:13:04:2c:
         52:ab:49:3a:60:25:0d:d9:07:67:18:89:9c:83:80:b5:17:97:
         f2:57:f7:4f:75:14:87:66:c0:ce:d9:50:ec:5f:cb:cf:ed:39:
         16:3d:33:5d:a9:c6:3a:0d:42:32:d9:28:c1:b3:46:78:a2:fc:
         fc:a1:1c:d1:2b:b9:4c:4e:4c:30:a6:c5:f6:b0:00:6e:69:7c:
         8a:85:dd:d9:25:59:7e:14:12:74:65:16:87:98:0f:03:59:46:
         22:c8:46:c2:f2:d0:9a:be:95:8a:01:2a:ef:73:39:03:60:16:
         bd:15:b4:99:a9:c7:da:65:e7:e1:c4:69:62:ae:8b:a1:bc:9b:
         3d:f2:4f:8c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDE294MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVl
NTNhNGExMjFjMTg2NTNmOWNmNGUxYmMwMjQ2YzFlMWUzMjIzMTUwHhcNMjIwOTI4
MTcwMDI3WhcNMjcwOTI4MTcwMDI3WjAzMTEwLwYDVQQDEyg1ZDkzM2ViZWFkZjMx
ZDc5YzQyN2U5ZDhmYjEyMTRmNWUxM2IxMGY5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA7IX+4y657iF7CzhljxSBchPAILXSI0IJBNOuyjj64TRdBopS
8EJ7Z3m6Lh9RtPsehTQXV62Z2pMbAJb4Gi08ghWRc5pCqWFkx79vmUve14awxa2d
+YPRray3ccsnQKZjbOXpP7fmOb6m5o4fiLjJDawvbt9zDIRIEM6yM3h6cPBoUI/T
pUMGEgTWulGk3yvsGlg8vkpIsnBtxyVMI2kNBOq6VSXUwySlCHQW0Pmm9gwEia69
q19Zm1TVNbTbWPvywgKQa20odnE6vRf/TecFcgJB4w+iIFuR0nW6kzzlaWfUh1PR
0iXFoOn4IuozUrQt8BoZdSKarstOYEpnauCv4wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFCkUqouQO5XiqJYoMnDbiPGXJC+aMB8GA1UdIwQYMBaAFA3IQlkv51ndk7uf
2B2r2f6cr92YMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWU1M2E0
YTEyMWMxODY1M2Y5Y2Y0ZTFiYzAyNDZjMWUxZTMyMjMxNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDQ3NzQ4NTYtNjE2OC00NWMzLWFkYjItYjEyYjBj
MGMyMGYyLzVkOTMzZWJlYWRmMzFkNzljNDI3ZTlkOGZiMTIxNGY1ZTEzYjEwZjku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80NDc3NDg1Ni02MTY4LTQ1YzMtYWRiMi1iMTJi
MGMwYzIwZjIvNWU1M2E0YTEyMWMxODY1M2Y5Y2Y0ZTFiYzAyNDZjMWUxZTMyMjMx
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi23LDANBAIAAjAHAwUAKAPNYDANBgkqhkiG9w0BAQsFAAOC
AQEAKzznSZxMxGEdVEs6HtBHBCgW4KT6xGBBer+YikCJwiXhGs+OEQToVph8bjsz
viDSUhEer1GbD70xKB/ezWmZcc/cLLrk1dKBuET6kZMAAt+4KrHN8yy3xzS5IHSq
cp2oDRvvzU7MsKYp9hfpFhwF7rDQGPFqk+yBmANtEwQsUqtJOmAlDdkHZxiJnIOA
tReX8lf3T3UUh2bAztlQ7F/Lz+05Fj0zXanGOg1CMtkowbNGeKL8/KEc0Su5TE5M
MKbF9rAAbml8ioXd2SVZfhQSdGUWh5gPA1lGIshGwvLQmr6VigEq73M5A2AWvRW0
manH2mXn4cRpYq6LobybPfJPjA==
-----END CERTIFICATE-----