Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/aa3768b2a5f16422b2a1b12bf2e42aeb816c663d.roa
File:                     aa3768b2a5f16422b2a1b12bf2e42aeb816c663d.roa (raw, json)
Hash identifier:          Xw0LkG2OTvT0cejEamFphJEjykJvFTPM0luUcztYJdE=
Subject key identifier:   81:43:4F:18:8E:CE:BB:06:BF:48:74:45:EE:7B:3A:8A:23:2D:A1:B0
Certificate issuer:       /CN=53eb04993eae451128bf77fb62927c254beec65e
Certificate serial:       ECD5
Authority key identifier: E3:40:1A:4D:A4:55:FA:5E:47:1B:D2:AE:AD:78:2B:88:87:63:F4:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53eb04993eae451128bf77fb62927c254beec65e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/aa3768b2a5f16422b2a1b12bf2e42aeb816c663d.roa
Signing time:             Wed 24 Nov 2021 19:44:43 +0000
ROA not before:           Tue 16 Nov 2021 03:00:00 +0000
ROA not after:            Thu 16 Nov 2023 03:00:00 +0000
asID:                     27884
IP address blocks:        45.226.59.0/24 maxlen: 24
                          2803:910::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60629 (0xecd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53eb04993eae451128bf77fb62927c254beec65e
        Validity
            Not Before: Nov 16 03:00:00 2021 GMT
            Not After : Nov 16 03:00:00 2023 GMT
        Subject: CN=aa3768b2a5f16422b2a1b12bf2e42aeb816c663d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:87:c0:a4:32:eb:cc:b6:cf:f5:9c:e7:04:
                    6f:bc:f8:9f:a1:e2:1b:0b:00:90:41:05:2c:ce:32:
                    a7:bb:2f:cd:36:ab:e8:c8:18:86:1c:c8:7e:67:c7:
                    c0:41:69:67:c0:25:13:34:68:e9:60:0c:10:76:15:
                    88:22:34:d0:c3:dd:4f:a5:fe:b6:4a:e2:fd:08:c1:
                    9b:a1:13:da:54:b2:43:f3:dc:d4:10:83:59:c2:74:
                    4a:59:da:f3:25:59:5d:fa:a4:6a:cb:f1:d0:9c:04:
                    f2:2d:4c:73:23:b1:9c:37:b4:2c:bd:dc:16:40:06:
                    9e:af:c6:61:fa:3e:c2:90:a8:08:77:79:57:e4:6d:
                    eb:cf:fe:03:1b:f9:cd:57:70:af:ac:a8:f7:12:65:
                    fe:32:9a:56:34:23:aa:5a:d3:6f:a2:9f:c7:cc:56:
                    96:df:17:1d:58:6b:7f:29:15:1f:c8:9c:dc:0d:e7:
                    49:bc:27:b9:10:ab:a5:8a:35:03:87:b7:a0:36:04:
                    dc:5d:9e:cc:77:7f:b0:d4:df:15:f8:33:88:70:c7:
                    88:47:65:59:50:8e:e7:22:6c:96:af:42:42:d8:e3:
                    88:15:87:a4:4a:b1:f1:89:1d:4a:b4:88:54:e9:eb:
                    51:f5:e7:9a:0a:f0:dd:65:56:83:96:dc:89:4a:61:
                    4e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:43:4F:18:8E:CE:BB:06:BF:48:74:45:EE:7B:3A:8A:23:2D:A1:B0
            X509v3 Authority Key Identifier:
                keyid:E3:40:1A:4D:A4:55:FA:5E:47:1B:D2:AE:AD:78:2B:88:87:63:F4:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53eb04993eae451128bf77fb62927c254beec65e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/aa3768b2a5f16422b2a1b12bf2e42aeb816c663d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/53eb04993eae451128bf77fb62927c254beec65e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.59.0/24
                IPv6:
                  2803:910::/32

    Signature Algorithm: sha256WithRSAEncryption
         e0:f5:d9:fc:2b:1d:35:13:97:71:b4:37:06:01:d2:c8:f5:8e:
         82:0b:32:d2:12:34:c2:f3:fa:d9:70:14:cf:9d:1e:34:da:97:
         92:15:09:79:56:3e:e0:e8:68:d0:d2:74:3a:af:b8:68:64:41:
         b9:a8:20:48:13:d1:a2:5a:d9:56:d9:55:3c:55:6d:60:77:13:
         d0:fa:01:55:de:39:e7:f4:61:45:67:92:b2:72:c7:68:46:8c:
         60:68:15:af:0b:3e:cf:34:5c:5d:6a:f9:22:bf:c6:90:62:bb:
         a9:0b:9b:d8:58:3c:af:f7:4a:1e:6c:78:3d:ce:ef:c3:36:7b:
         ac:6d:02:78:da:f1:89:7c:77:12:c7:69:70:e5:18:59:57:f5:
         27:4b:3b:10:6d:75:f5:59:26:d7:6e:39:9e:20:bc:4e:36:03:
         f3:8c:ef:56:1b:6c:c9:ad:31:b0:06:d2:dd:44:8a:af:42:c1:
         6d:be:19:15:1c:0a:af:79:48:25:33:b7:5c:6d:cb:5b:d9:ca:
         f5:b3:58:1a:7d:f2:37:77:5c:ba:cc:b6:be:67:ef:8a:38:dc:
         df:87:59:4a:c3:20:73:8c:71:a8:48:99:fa:b4:20:8e:27:ce:
         07:27:19:b5:99:50:8b:52:c0:61:e9:28:5b:7b:ce:1a:79:9a:
         f8:c4:4a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----