Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/24dc46bf097bb62f6125687d6e2d2702af08a34b.roa
File:                     24dc46bf097bb62f6125687d6e2d2702af08a34b.roa (raw, json)
Hash identifier:          k/fgjT1nYQ+GCA+ZQkMGtmO3025yyHAhYU3lblIxyVY=
Subject key identifier:   F0:B5:30:37:56:08:93:77:12:15:D7:76:2D:81:AC:0F:E6:5E:2E:2C
Certificate issuer:       /CN=19bdf7eba9512ec4f3179e720563bd1d6965a593
Certificate serial:       104FB7
Authority key identifier: F4:14:BC:56:FB:CD:92:A2:6B:AF:A8:87:E2:84:91:D0:6B:AB:6D:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19bdf7eba9512ec4f3179e720563bd1d6965a593.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/24dc46bf097bb62f6125687d6e2d2702af08a34b.roa
Signing time:             Tue 20 Jul 2021 05:02:06 +0000
ROA not before:           Tue 20 Jul 2021 03:00:00 +0000
ROA not after:            Thu 20 Jul 2023 03:00:00 +0000
asID:                     271933
IP address blocks:        45.70.13.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1068983 (0x104fb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19bdf7eba9512ec4f3179e720563bd1d6965a593
        Validity
            Not Before: Jul 20 03:00:00 2021 GMT
            Not After : Jul 20 03:00:00 2023 GMT
        Subject: CN=24dc46bf097bb62f6125687d6e2d2702af08a34b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:10:2b:92:9c:78:48:8c:07:60:a7:b9:01:
                    25:7e:65:8b:cb:df:0b:14:e5:aa:66:70:1a:2e:41:
                    2c:7c:0d:6b:e7:2a:3d:8a:be:22:80:48:80:9f:e7:
                    10:b0:b5:92:0d:de:60:90:15:a4:a2:e4:36:54:a1:
                    3e:10:5b:bf:a2:ed:2e:d8:86:7a:c1:14:d1:5f:aa:
                    12:06:b8:76:4f:01:14:8f:30:38:f5:23:a7:df:0c:
                    9f:ec:e8:26:c9:c6:75:81:73:18:73:a4:f7:49:28:
                    6d:d5:50:64:c0:67:68:83:07:97:68:21:92:48:ba:
                    de:32:3a:72:ea:aa:1a:6b:76:c7:8f:0a:95:e2:9d:
                    ea:6b:18:6b:77:e8:42:f0:8f:cd:a8:90:5c:1e:8d:
                    45:5e:9a:10:3d:af:1c:e2:df:a7:d1:e9:cd:e6:bf:
                    f8:4f:d9:b5:b2:4b:c0:0d:6d:02:10:8b:ef:03:6d:
                    a0:c9:a6:08:c7:22:27:65:9e:0b:4b:84:70:9e:38:
                    8b:12:9d:19:2c:12:28:78:f9:51:a8:74:7b:eb:45:
                    86:2f:0a:e1:24:60:37:76:0a:35:29:6f:a7:46:a2:
                    f1:c6:6d:76:2d:28:79:8d:7c:20:3b:d4:1c:43:ff:
                    fe:30:7a:68:4f:5c:88:4f:c3:98:aa:b1:dc:33:ad:
                    01:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B5:30:37:56:08:93:77:12:15:D7:76:2D:81:AC:0F:E6:5E:2E:2C
            X509v3 Authority Key Identifier:
                keyid:F4:14:BC:56:FB:CD:92:A2:6B:AF:A8:87:E2:84:91:D0:6B:AB:6D:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19bdf7eba9512ec4f3179e720563bd1d6965a593.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/24dc46bf097bb62f6125687d6e2d2702af08a34b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/19bdf7eba9512ec4f3179e720563bd1d6965a593.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:af:bd:e9:2f:11:5c:8a:e4:7c:aa:35:09:be:54:63:cc:01:
         50:d9:84:9b:7b:c8:12:c9:26:b5:79:4e:57:39:98:b4:e2:94:
         d7:53:ac:ed:b1:97:c4:8e:c0:e3:20:8e:5e:b7:44:bc:01:fe:
         08:f3:4c:73:24:06:ce:fd:0b:cc:2b:e3:df:15:30:3f:54:2e:
         96:8b:06:42:52:15:f6:c4:8d:2a:9a:2a:be:01:51:fb:1c:17:
         6d:60:95:bd:af:03:0e:92:be:bb:89:ad:5a:75:e4:a2:b6:2b:
         42:5e:75:68:fa:75:f9:19:b5:5c:83:1f:da:46:c1:e9:38:d4:
         4e:3d:06:08:90:3c:55:ec:e5:03:9c:cf:9a:c4:bc:7e:a3:59:
         21:1d:25:5d:77:19:88:2a:7f:b8:26:60:53:67:da:a5:92:60:
         55:77:af:70:77:fc:b9:1e:90:ec:b7:69:24:58:e8:0f:f6:a8:
         00:1e:73:e3:62:d4:21:bb:f0:5c:64:c1:55:bf:30:f8:b8:a9:
         83:79:11:90:24:5b:df:2b:f1:e9:e2:18:d8:ee:77:c2:21:82:
         7f:c2:80:34:f8:5d:f0:33:72:73:2d:4b:41:1b:c1:3d:f4:3f:
         bf:0f:4d:1d:38:b7:06:ed:54:4b:03:d3:25:c0:17:d9:f1:81:
         af:c6:7f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----