Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/7115943e3d141ef5045f511d7348160c087aa6a7.roa
File:                     7115943e3d141ef5045f511d7348160c087aa6a7.roa (raw, json)
Hash identifier:          eRQh+9mwJ6DqjHISeDZ9NFihfcw1DB4A9goAiq7MN9E=
Subject key identifier:   C4:53:49:4D:9D:E9:F3:90:2B:54:83:80:06:DF:3A:EF:79:4D:64:6E
Certificate issuer:       /CN=10df01a7088a05c2d966d7d70d4dae7bfd4c04c6
Certificate serial:       0C5AC4
Authority key identifier: B3:B7:C4:56:9B:D1:AD:45:68:49:EA:D5:43:86:8F:32:BB:A5:5B:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10df01a7088a05c2d966d7d70d4dae7bfd4c04c6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/7115943e3d141ef5045f511d7348160c087aa6a7.roa
Signing time:             Wed 24 Mar 2021 14:41:21 +0000
ROA not before:           Wed 24 Mar 2021 14:41:21 +0000
ROA not after:            Tue 24 Mar 2026 14:41:21 +0000
asID:                     27947
IP address blocks:        45.235.140.0/22 maxlen: 22
                          2801:13:7000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 809668 (0xc5ac4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10df01a7088a05c2d966d7d70d4dae7bfd4c04c6
        Validity
            Not Before: Mar 24 14:41:21 2021 GMT
            Not After : Mar 24 14:41:21 2026 GMT
        Subject: CN=7115943e3d141ef5045f511d7348160c087aa6a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:85:d2:a6:63:c2:f1:b8:00:40:2c:39:47:6a:
                    3e:13:46:b9:a6:27:d6:99:c1:b6:98:d0:7a:aa:b2:
                    07:90:3b:ee:2c:32:44:78:3b:cc:90:bb:18:5a:f6:
                    2f:50:ec:c1:eb:46:4f:1a:28:f8:84:dc:5e:85:34:
                    4b:65:9a:40:d2:39:00:5e:22:33:6b:42:8f:83:f5:
                    b1:94:50:1b:6c:ec:62:ac:7e:30:1c:a2:4f:02:5b:
                    d2:1b:76:cc:3e:6a:8f:86:44:04:76:df:2b:b9:a1:
                    0a:37:ba:25:69:26:21:95:05:ae:25:a8:e8:a0:db:
                    97:07:39:88:c6:21:6b:b7:ef:e4:5f:44:41:e7:b1:
                    13:45:b0:21:f7:59:7d:77:06:6b:50:ba:fb:6c:46:
                    4b:3e:e9:d8:f0:85:3c:85:47:18:31:64:17:7f:bd:
                    fd:b4:07:d4:fd:da:bc:61:85:05:4d:b8:29:45:0b:
                    bb:88:e8:e7:85:4b:b2:5d:f4:cc:d7:7d:1b:bb:6a:
                    36:6c:57:ed:59:c8:fe:1b:54:b9:e3:a1:e2:5c:98:
                    c6:33:ce:ce:35:90:a2:fb:18:0a:6c:c2:a9:2a:47:
                    25:7e:0c:08:2f:90:b1:91:13:2c:c6:44:9f:9a:f0:
                    ec:49:2c:9a:2c:51:35:5a:2d:9e:67:09:82:52:68:
                    60:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:53:49:4D:9D:E9:F3:90:2B:54:83:80:06:DF:3A:EF:79:4D:64:6E
            X509v3 Authority Key Identifier:
                keyid:B3:B7:C4:56:9B:D1:AD:45:68:49:EA:D5:43:86:8F:32:BB:A5:5B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10df01a7088a05c2d966d7d70d4dae7bfd4c04c6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/7115943e3d141ef5045f511d7348160c087aa6a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4af76e52-40cc-45c7-9d46-81f35778de07/10df01a7088a05c2d966d7d70d4dae7bfd4c04c6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.140.0/22
                IPv6:
                  2801:13:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:61:05:e9:e5:7b:8f:7a:2c:8a:1e:0e:ff:26:cc:5a:cc:1a:
         c6:c7:6d:91:a7:8c:48:4c:88:a9:a3:62:4f:ff:1c:71:d3:e4:
         69:48:2d:25:95:af:cd:ce:f3:ad:e8:b7:99:b2:e6:7f:c1:e0:
         aa:4b:57:1e:e6:4f:dc:e8:09:4d:fd:49:d8:c7:06:c3:af:2f:
         98:30:48:9a:fa:51:3a:8f:6e:ca:5a:6f:c6:ee:ae:b5:3e:71:
         07:98:b0:17:ad:8f:ca:b9:cc:ae:db:bf:79:c8:c6:74:5c:d3:
         fa:34:a6:cc:3c:95:ac:d0:fc:c4:fe:39:7f:c9:82:13:15:d6:
         be:20:e3:17:36:8b:1c:77:f8:ea:9b:a7:db:1a:47:2e:cc:27:
         ba:3a:af:29:bd:65:13:66:0b:45:d4:50:1e:99:00:81:ff:2b:
         bc:99:33:f4:d4:2f:48:b5:e0:81:2c:a8:e2:e8:90:10:99:b9:
         be:18:92:16:cb:42:2a:73:ea:b6:a5:6f:bb:c0:23:33:82:9b:
         0d:ba:bc:58:f1:63:19:3e:1d:dd:79:f6:3b:51:3a:0d:61:1a:
         f1:18:08:77:06:94:39:eb:3a:9a:7f:fe:fa:e1:9a:30:99:4c:
         fa:74:4c:55:4d:7c:cf:ec:f8:88:cc:ee:3d:0f:bb:84:32:ac:
         1d:91:44:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----