Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/b992fe13bc1a770ed9f8d7f97c398794edccc297.roa
File:                     b992fe13bc1a770ed9f8d7f97c398794edccc297.roa (raw, json)
Hash identifier:          yRMEgaNZHu+LGuh9LYFA8xjB/6LBKwokOcqJggrqvcs=
Subject key identifier:   73:E9:C9:C6:19:B2:2A:9B:A3:84:15:81:63:05:7D:28:20:42:93:8B
Certificate issuer:       /CN=239ac677d20da31c1af262c7528bd5cc25d5e101
Certificate serial:       0C793A
Authority key identifier: BF:E5:26:A4:0D:A6:A1:88:79:13:66:60:4F:F1:C9:54:2A:19:B0:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/239ac677d20da31c1af262c7528bd5cc25d5e101.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/b992fe13bc1a770ed9f8d7f97c398794edccc297.roa
Signing time:             Wed 24 Mar 2021 14:29:10 +0000
ROA not before:           Wed 24 Mar 2021 14:29:10 +0000
ROA not after:            Tue 24 Mar 2026 14:29:10 +0000
asID:                     265862
IP address blocks:        45.224.188.0/22 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 817466 (0xc793a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239ac677d20da31c1af262c7528bd5cc25d5e101
        Validity
            Not Before: Mar 24 14:29:10 2021 GMT
            Not After : Mar 24 14:29:10 2026 GMT
        Subject: CN=b992fe13bc1a770ed9f8d7f97c398794edccc297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a3:65:95:6d:a4:46:51:57:c9:a2:fc:5a:e9:
                    ef:b1:13:2b:be:f3:f7:07:78:84:af:78:c4:68:f5:
                    b1:10:85:ed:fc:f7:b3:0b:15:d0:6b:88:e5:ea:aa:
                    1b:c1:0f:c8:59:44:29:80:15:79:d3:f9:b6:31:3f:
                    b5:a8:7c:bf:65:56:1c:9b:2d:26:93:1d:68:57:ee:
                    48:96:97:35:00:4b:5d:b3:ea:86:9b:33:a7:47:51:
                    80:5d:14:b1:10:0d:c7:88:80:4c:18:76:32:15:92:
                    c7:67:48:10:ca:d0:d3:d9:e0:59:ba:32:b5:d2:69:
                    64:5b:7f:e4:bb:6a:8c:76:1e:3a:17:c3:20:bd:3c:
                    9b:a2:04:f1:a7:90:4c:24:a9:a2:a5:b3:a7:ee:76:
                    fb:c3:7e:ff:da:56:95:05:d3:c7:32:b2:69:ae:34:
                    9b:14:9a:a5:e9:8b:a8:3a:5f:34:33:6c:f1:f4:44:
                    a9:de:3c:c1:0a:a8:9b:d8:cf:69:73:25:0b:9e:fb:
                    f9:79:a8:78:88:cf:20:9f:69:fc:e4:cb:39:78:ba:
                    50:d0:0e:e2:47:8e:c7:82:6a:e1:7c:c7:6d:1f:7d:
                    9a:4d:62:81:80:4c:7d:f9:ed:12:35:5a:9b:dd:22:
                    9c:f6:9c:38:6e:fb:7d:51:2b:a4:dc:1b:ee:23:68:
                    7d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E9:C9:C6:19:B2:2A:9B:A3:84:15:81:63:05:7D:28:20:42:93:8B
            X509v3 Authority Key Identifier:
                keyid:BF:E5:26:A4:0D:A6:A1:88:79:13:66:60:4F:F1:C9:54:2A:19:B0:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/239ac677d20da31c1af262c7528bd5cc25d5e101.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/b992fe13bc1a770ed9f8d7f97c398794edccc297.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/466f77bb-8dbf-417c-b7ce-8ecc3457b915/239ac677d20da31c1af262c7528bd5cc25d5e101.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:c5:71:b5:2d:f0:9c:83:98:50:28:6d:08:6a:22:b2:89:a0:
         e5:64:9d:20:d9:87:22:7e:3a:39:e8:29:73:35:12:6d:ef:6f:
         bc:60:1f:54:95:25:b8:f6:28:fb:f7:54:3b:dd:db:ad:35:b8:
         52:96:b8:ab:a1:99:44:28:b7:82:e3:82:12:c0:27:45:8c:cd:
         1d:50:de:b1:a2:1b:3a:b1:3d:e2:9c:2b:dd:4d:08:58:3b:7d:
         31:77:79:b9:2d:6d:b3:e5:42:e0:61:0b:69:40:1f:c7:19:ac:
         61:c6:03:50:3e:d0:2f:86:f2:6a:42:52:80:c5:fa:21:8a:e4:
         ba:9e:64:f0:8f:1a:fc:b3:2c:b0:9a:53:97:ec:d3:12:72:09:
         90:f0:78:f3:f1:ac:23:9a:cb:1e:53:c3:5c:b0:41:1c:f4:63:
         03:44:e6:8d:43:69:90:ba:db:a1:c7:ce:0a:0f:65:a6:19:43:
         ea:b5:21:82:96:6e:89:9c:3a:e9:dc:78:42:9d:13:a6:cf:8f:
         90:e5:12:63:46:8b:a9:69:af:80:5e:7e:23:37:56:ba:c4:69:
         c1:3b:56:89:a2:f4:ef:00:ec:79:b8:1e:40:c9:45:b1:c5:71:
         b6:2e:f5:46:73:b0:bb:78:d2:60:74:b9:94:e5:0b:67:6b:1f:
         c4:67:1c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----