Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b30b215-7d6c-4355-8a53-09622f39b472/d0e05cbb56d28c512aea8fc3cd34804cff832b3d.roa
File:                     d0e05cbb56d28c512aea8fc3cd34804cff832b3d.roa (raw, json)
Hash identifier:          RvMFJIRqtBrrnKZxrdrrNRi3pqVQnPMKLxBnKFWAKP0=
Subject key identifier:   E0:EC:34:3F:85:83:A0:A4:32:BE:0D:81:68:95:05:F7:D7:8A:8A:11
Certificate issuer:       /CN=f2c214e34c81f5f77776ec2c92db8816f895affb
Certificate serial:       AB
Authority key identifier: DC:16:13:8A:12:C4:F9:C5:9A:46:CE:B7:6A:83:91:CE:DA:AC:54:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2c214e34c81f5f77776ec2c92db8816f895affb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b30b215-7d6c-4355-8a53-09622f39b472/d0e05cbb56d28c512aea8fc3cd34804cff832b3d.roa
Signing time:             Tue 02 Nov 2021 15:38:46 +0000
ROA not before:           Tue 02 Nov 2021 03:00:00 +0000
ROA not after:            Thu 02 Nov 2023 03:00:00 +0000
asID:                     267727
IP address blocks:        45.162.87.0/24 maxlen: 24
                          2803:25a0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2c214e34c81f5f77776ec2c92db8816f895affb
        Validity
            Not Before: Nov  2 03:00:00 2021 GMT
            Not After : Nov  2 03:00:00 2023 GMT
        Subject: CN=d0e05cbb56d28c512aea8fc3cd34804cff832b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a8:54:0d:4a:87:89:41:81:96:50:2e:07:39:
                    83:d9:e5:14:d6:43:96:ae:b0:04:cc:c7:62:4d:34:
                    c7:df:fe:f9:19:f5:41:33:b9:ef:d4:fe:77:e7:f8:
                    c4:dd:78:12:f5:d3:a9:b2:60:07:e0:9c:62:dd:5a:
                    06:49:e1:a4:28:39:19:fb:d3:f0:9c:2a:24:6f:1e:
                    24:d5:d8:23:c4:e8:5f:12:8c:47:5e:aa:72:2c:6e:
                    d9:04:b4:6d:2d:f1:7c:5b:d3:08:70:ac:52:0b:2e:
                    5e:d3:0a:7c:02:b0:69:22:97:9c:dd:c5:a0:06:ad:
                    7b:84:d1:ce:fe:06:4f:5d:19:20:f3:73:17:e9:e2:
                    7d:37:91:73:3f:df:ee:7c:4e:62:96:cc:74:6f:e4:
                    05:04:7d:73:92:ea:5c:64:5c:0a:16:32:c5:e9:17:
                    35:70:49:6b:a4:d2:97:5e:78:d0:3d:8e:cf:a1:a1:
                    26:57:64:c8:dc:bf:59:8c:35:72:50:02:02:00:52:
                    b7:2f:9f:0e:dd:b9:13:13:d3:bd:b4:41:78:d5:92:
                    cb:e4:4b:4a:ff:82:4a:40:61:2e:5f:70:1d:78:6e:
                    2b:d2:03:5c:68:48:53:20:47:02:32:ed:c8:af:84:
                    e1:28:53:60:fd:0c:ed:40:93:b9:d9:a8:8c:a4:3a:
                    8f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:EC:34:3F:85:83:A0:A4:32:BE:0D:81:68:95:05:F7:D7:8A:8A:11
            X509v3 Authority Key Identifier:
                keyid:DC:16:13:8A:12:C4:F9:C5:9A:46:CE:B7:6A:83:91:CE:DA:AC:54:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2c214e34c81f5f77776ec2c92db8816f895affb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b30b215-7d6c-4355-8a53-09622f39b472/d0e05cbb56d28c512aea8fc3cd34804cff832b3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b30b215-7d6c-4355-8a53-09622f39b472/f2c214e34c81f5f77776ec2c92db8816f895affb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.87.0/24
                IPv6:
                  2803:25a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:8c:14:cc:be:15:56:d2:80:a5:64:4a:4a:fa:6c:46:18:b5:
         4a:24:9b:48:9e:21:d9:cb:4d:bc:d5:36:30:01:58:cb:16:a8:
         01:38:83:7e:b2:c6:19:44:28:da:3f:1a:65:dc:5a:6a:1f:a1:
         37:0e:df:34:49:8c:58:d7:d2:11:1f:70:29:40:8f:3c:cd:91:
         19:72:22:6a:ce:9a:d7:5e:eb:22:97:d8:ec:c4:ab:8b:a6:53:
         06:11:84:9f:4a:a9:d3:fd:ff:93:8c:ef:b4:08:79:7d:58:96:
         8d:5e:0e:ba:3d:80:fd:45:a9:b5:71:e5:3a:d2:85:4f:a3:d8:
         12:e7:a1:95:36:7a:be:ff:42:a0:ba:b4:3d:19:f1:a4:a1:65:
         1c:a7:25:a8:26:d7:a2:fc:f2:25:e2:ea:3a:b9:31:14:ab:41:
         74:a0:f2:33:f7:6d:5e:1c:4b:7b:b8:e7:ac:4b:b9:8b:13:86:
         bd:79:02:c7:cd:d0:74:d8:24:6e:f8:25:f9:b1:04:b2:9e:30:
         e4:00:2a:9d:7e:bb:6b:39:70:d3:a1:53:5d:2c:d0:09:b3:58:
         09:d1:11:af:b9:1c:14:41:0a:b2:0a:77:a3:83:d8:45:90:34:
         0f:d8:57:16:06:e5:d2:58:37:30:ad:7c:3f:ca:ed:7b:2a:c1:
         1e:5f:35:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----