Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4f9bbe9a-953c-4bec-8350-670602eb2e2f/ca98dbd1ac5c19864febc81da14d2669ddcc5807.roa
File:                     ca98dbd1ac5c19864febc81da14d2669ddcc5807.roa (raw, json)
Hash identifier:          /HI6/NI/cP5NTrdP2HLOHSa7p45Wcjp0BQXOM4RFVgk=
Subject key identifier:   CA:EB:51:FA:71:D9:A2:EC:C4:1F:98:E5:E5:84:2D:A1:ED:98:6D:16
Certificate issuer:       /CN=47a49fbd64a926132f043b187466f97225883214
Certificate serial:       0ADC50
Authority key identifier: 57:75:F5:2C:60:16:7C:48:58:8B:A2:4E:A7:B8:A1:E9:E6:AB:ED:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47a49fbd64a926132f043b187466f97225883214.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4f9bbe9a-953c-4bec-8350-670602eb2e2f/ca98dbd1ac5c19864febc81da14d2669ddcc5807.roa
Signing time:             Thu 10 Nov 2022 03:50:34 +0000
ROA not before:           Wed 09 Nov 2022 03:49:10 +0000
ROA not after:            Sun 10 Nov 2024 03:49:10 +0000
asID:                     266885
IP address blocks:        45.161.116.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 711760 (0xadc50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47a49fbd64a926132f043b187466f97225883214
        Validity
            Not Before: Nov  9 03:49:10 2022 GMT
            Not After : Nov 10 03:49:10 2024 GMT
        Subject: CN=ca98dbd1ac5c19864febc81da14d2669ddcc5807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:20:b5:e4:92:1c:6e:46:4b:e3:af:27:6a:1a:
                    3c:de:4b:5e:20:ca:b9:8b:1c:ba:d0:79:b1:10:fc:
                    9e:b5:e5:70:48:81:c1:a2:45:20:39:d7:2f:da:07:
                    4f:2c:73:e5:e3:88:45:40:e0:62:f8:ea:b7:fe:4e:
                    b0:10:20:a2:9a:b1:52:63:35:1b:77:55:51:ea:db:
                    ff:1e:eb:e9:3d:a2:17:66:23:19:b7:3a:e5:47:64:
                    1d:af:55:89:27:46:4e:8a:5f:4d:cf:49:26:0b:89:
                    57:98:61:fb:a6:2c:d9:3c:c6:95:5e:64:92:49:56:
                    fd:6f:36:01:95:93:d8:ea:74:8e:c7:96:33:40:26:
                    71:3e:bf:1d:6c:eb:cd:b6:81:3e:96:93:6b:9d:87:
                    f4:07:b9:91:0e:6d:44:8e:ac:07:a9:c5:8b:02:1c:
                    74:f2:4d:00:44:f1:b5:52:56:6f:43:28:91:f4:ef:
                    d9:54:93:98:13:35:7b:e6:e3:31:55:a5:71:6f:f1:
                    cc:57:01:26:53:06:2a:71:d7:d0:fa:53:86:d8:03:
                    8b:b2:98:e7:7b:06:21:ed:0f:3b:53:13:6a:27:a2:
                    06:e0:cf:3a:99:82:56:7c:62:8f:5d:41:91:f2:d5:
                    eb:41:32:15:e0:26:3d:f3:03:35:7f:29:e1:ef:93:
                    b0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EB:51:FA:71:D9:A2:EC:C4:1F:98:E5:E5:84:2D:A1:ED:98:6D:16
            X509v3 Authority Key Identifier:
                keyid:57:75:F5:2C:60:16:7C:48:58:8B:A2:4E:A7:B8:A1:E9:E6:AB:ED:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47a49fbd64a926132f043b187466f97225883214.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4f9bbe9a-953c-4bec-8350-670602eb2e2f/ca98dbd1ac5c19864febc81da14d2669ddcc5807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4f9bbe9a-953c-4bec-8350-670602eb2e2f/47a49fbd64a926132f043b187466f97225883214.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:1f:10:f1:04:7a:73:57:45:d1:b4:7f:fb:ae:9b:fc:1b:64:
         95:6c:e9:44:f0:20:ba:0e:3f:97:cf:ea:de:5f:42:7a:e2:20:
         ed:fb:63:d0:79:9f:d4:b0:a4:0f:85:e4:d2:88:0d:77:dd:ca:
         fa:1f:ad:b3:55:0e:3f:61:61:b9:65:34:05:63:8c:cd:db:e4:
         48:38:f6:b6:1e:02:60:ec:84:cc:62:0f:94:16:60:91:87:d0:
         c4:1f:57:9f:42:8f:d9:4d:59:e9:a4:07:e0:88:1b:4c:4c:9f:
         30:8f:67:a0:12:4e:70:b4:00:3e:5c:72:40:c3:3f:1b:de:25:
         b0:f0:16:be:41:cc:f3:33:63:fc:54:03:30:03:bb:0c:63:1f:
         dc:fa:90:64:ad:36:7e:98:c5:97:5c:e7:93:91:3e:d7:51:7d:
         42:99:84:8a:d3:e6:5d:71:a0:ef:eb:8e:71:aa:4f:5d:8f:32:
         a4:82:25:30:b0:c9:1a:58:b1:bd:e4:b5:4c:31:6c:86:3d:46:
         30:c9:df:70:55:5b:fa:53:9d:ae:f5:4d:c8:21:6f:ac:6b:49:
         37:6b:ab:d0:63:b6:9a:2e:0c:e9:bb:21:1b:40:90:3d:a2:e1:
         78:25:9a:e8:56:83:6f:13:c6:83:81:1f:7c:4a:0b:9d:da:59:
         28:17:57:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----