Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/5a4a1f8b360ec81d55a8debfcefdc815ff9a9536.roa
File:                     5a4a1f8b360ec81d55a8debfcefdc815ff9a9536.roa (raw, json)
Hash identifier:          mNP1qiMwqLkcPONTsDYIC0KMUgSPR60ZxKb2qLOBD0E=
Subject key identifier:   79:C2:09:E3:5A:88:2F:E6:35:10:58:B4:78:9F:59:5B:26:5C:54:0F
Certificate issuer:       /CN=877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b
Certificate serial:       0D8100
Authority key identifier: 44:33:AF:4C:AC:32:C0:87:C7:18:0E:6D:CE:36:41:99:FB:41:31:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/5a4a1f8b360ec81d55a8debfcefdc815ff9a9536.roa
Signing time:             Wed 24 Mar 2021 14:40:45 +0000
ROA not before:           Wed 24 Mar 2021 14:40:44 +0000
ROA not after:            Tue 24 Mar 2026 14:40:44 +0000
asID:                     265657
IP address blocks:        170.246.84.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 11 Jan 2024 23:16:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 884992 (0xd8100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b
        Validity
            Not Before: Mar 24 14:40:44 2021 GMT
            Not After : Mar 24 14:40:44 2026 GMT
        Subject: CN=5a4a1f8b360ec81d55a8debfcefdc815ff9a9536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:74:e6:6a:ab:53:06:e0:7b:25:a5:79:e8:a6:
                    00:a1:96:61:4b:dd:4a:19:b4:a2:90:23:a2:51:c9:
                    d9:ae:45:f7:12:79:82:70:c1:bd:27:ae:b8:7d:6d:
                    3f:3a:b2:a1:61:be:4e:61:b5:31:6e:e1:3c:8c:71:
                    39:26:02:9e:96:04:92:a2:41:18:2e:3f:91:af:7b:
                    e5:d2:88:e5:79:33:24:c3:de:aa:53:8f:8b:7d:f4:
                    88:93:de:61:b4:6e:d8:70:8a:71:3b:c6:38:7e:c5:
                    b2:0d:8f:2e:8e:01:36:63:d4:d1:0c:b0:d8:1b:6b:
                    0f:d1:4c:80:d4:36:7f:ab:22:55:21:34:f3:73:6e:
                    f8:98:43:c8:71:6b:2f:d1:a1:26:29:bb:a4:92:1d:
                    e3:85:d7:53:bc:30:57:b3:73:c4:fe:02:42:3c:d0:
                    f6:f2:65:b6:08:58:c7:a1:b2:e3:79:c8:bb:f6:d3:
                    7b:2a:3b:cb:79:29:87:21:a6:93:cb:2c:e8:93:83:
                    aa:b3:5e:f9:6e:69:22:d0:ac:7b:3c:c0:49:d5:0a:
                    7a:9b:4d:50:df:15:09:cd:09:31:4a:d7:c3:55:ca:
                    46:ce:9d:7b:25:11:f8:d6:2b:2d:05:28:8a:7d:a4:
                    dc:bb:d3:ce:d9:71:17:fb:79:39:9d:f5:fc:11:60:
                    1b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C2:09:E3:5A:88:2F:E6:35:10:58:B4:78:9F:59:5B:26:5C:54:0F
            X509v3 Authority Key Identifier:
                keyid:44:33:AF:4C:AC:32:C0:87:C7:18:0E:6D:CE:36:41:99:FB:41:31:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/5a4a1f8b360ec81d55a8debfcefdc815ff9a9536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:6f:92:81:72:2e:cf:b6:f3:58:c7:6e:b9:e1:ec:9c:77:ed:
         b0:b4:06:ce:08:a6:c3:f8:83:9d:af:0c:82:ab:7c:d3:52:1e:
         e6:f3:c0:4f:ce:f4:ed:cd:b2:da:f2:e6:6f:59:34:9e:1c:23:
         39:98:0b:24:bb:d9:32:3c:a3:3c:ce:e4:60:fd:11:78:9b:82:
         cc:66:86:5c:f2:e6:aa:89:ae:5a:97:a3:f2:6d:27:6d:1f:de:
         0c:02:e3:97:5f:96:8d:ae:d9:cf:a2:40:d9:f6:ba:12:68:7a:
         53:9f:d6:6c:a0:3f:83:fc:1e:7e:e5:f0:d3:cd:2a:12:5a:71:
         cc:40:f9:eb:05:3b:bc:ad:bd:c1:86:69:7c:ca:f3:49:8b:75:
         91:ad:cd:65:4a:01:40:31:4d:52:6b:ed:cb:17:27:e8:82:43:
         df:9c:4b:f9:fa:67:9f:26:87:b7:df:91:cd:f6:8f:66:e7:57:
         ba:81:c3:55:db:47:67:94:3d:aa:3e:0c:12:f0:6e:fe:72:cd:
         56:ba:12:58:1c:3d:d8:95:3f:4a:f9:72:a3:31:45:63:e2:15:
         ea:09:62:0f:e7:90:91:79:5f:05:94:23:e2:e2:b9:da:73:03:
         6f:27:5b:55:79:41:2f:53:38:79:0b:17:0c:93:a1:9d:d4:02:
         b4:73:43:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----