Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d29ed82-d3e0-4bba-9c6f-839f81b2a766/7a62cb0ec732c6c62156e462eb6b9495321b4d75.roa
File:                     7a62cb0ec732c6c62156e462eb6b9495321b4d75.roa (raw, json)
Hash identifier:          01cnxXn47dDewYGt5D6jLibx4iE1OGPD9ATtUzOOYEQ=
Subject key identifier:   5B:21:0D:D0:02:FF:CA:D8:5B:54:E5:A1:AC:B0:22:93:8D:4D:DB:D0
Certificate issuer:       /CN=18578d1d6434fa77964783314509fc7818281b0a
Certificate serial:       0CF1C5
Authority key identifier: 97:61:AD:77:6B:C5:B1:65:2C:6E:5C:B6:F9:66:64:40:23:C3:4E:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/18578d1d6434fa77964783314509fc7818281b0a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5d29ed82-d3e0-4bba-9c6f-839f81b2a766/7a62cb0ec732c6c62156e462eb6b9495321b4d75.roa
Signing time:             Thu 19 Aug 2021 01:07:55 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Tue 18 Aug 2026 03:00:00 +0000
asID:                     265613
IP address blocks:        45.189.252.0/22 maxlen: 24
                          2806:36a::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 848325 (0xcf1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18578d1d6434fa77964783314509fc7818281b0a
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2026 GMT
        Subject: CN=7a62cb0ec732c6c62156e462eb6b9495321b4d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:83:81:38:f5:2e:62:e7:e8:8d:aa:f8:45:aa:
                    e3:40:75:63:73:57:4a:f0:9c:78:70:93:e6:bd:82:
                    4c:2d:c5:0c:6f:37:f1:f7:75:96:b0:b6:09:fd:6c:
                    24:7f:b5:9b:57:a8:29:25:ee:fe:f8:dc:f9:a8:eb:
                    83:59:82:95:e0:ec:94:25:ba:b3:b5:8b:68:2a:ae:
                    8d:9e:c5:6a:b0:ce:27:90:53:5e:76:d3:85:90:ee:
                    d0:63:ed:eb:aa:85:da:77:65:5c:f1:54:6a:39:70:
                    fd:7e:d4:04:98:83:90:d5:14:6b:fc:45:f0:18:94:
                    a1:bc:40:54:fe:59:d1:77:eb:ee:71:a8:22:84:98:
                    c4:96:29:21:90:5c:a3:bd:ab:c5:3a:66:98:eb:97:
                    4e:f1:91:24:e7:ac:9c:63:d2:4a:d0:db:1c:68:db:
                    2b:17:2e:22:b0:f4:a4:9b:43:09:b6:c5:bb:ac:33:
                    e7:d9:62:39:02:86:a2:45:63:6a:bb:0e:d3:36:9a:
                    8d:87:97:b1:f4:36:db:9c:46:38:bf:37:05:83:3b:
                    35:e6:5f:34:1e:8a:b3:8a:64:c6:41:8f:a1:a9:e8:
                    12:ca:e8:df:07:c9:f0:9e:2c:29:47:4d:d5:b3:5c:
                    47:69:1a:98:81:4e:a9:b2:d9:70:48:46:9a:bc:7c:
                    bb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:21:0D:D0:02:FF:CA:D8:5B:54:E5:A1:AC:B0:22:93:8D:4D:DB:D0
            X509v3 Authority Key Identifier:
                keyid:97:61:AD:77:6B:C5:B1:65:2C:6E:5C:B6:F9:66:64:40:23:C3:4E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/18578d1d6434fa77964783314509fc7818281b0a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d29ed82-d3e0-4bba-9c6f-839f81b2a766/7a62cb0ec732c6c62156e462eb6b9495321b4d75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5d29ed82-d3e0-4bba-9c6f-839f81b2a766/18578d1d6434fa77964783314509fc7818281b0a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.252.0/22
                IPv6:
                  2806:36a::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:88:a5:5e:b7:af:37:56:bb:62:22:1e:59:a3:9b:87:4d:ca:
         9a:61:ee:3f:8b:a6:bd:e2:13:18:a0:84:88:7f:e9:31:a5:bd:
         76:60:71:86:59:dd:6f:45:40:90:69:18:c0:d3:c4:a2:4f:43:
         5d:56:6f:e5:8f:bd:3a:14:4d:ab:84:3d:4a:43:8d:0e:fc:97:
         5d:6a:d0:27:62:c0:82:9f:fc:43:91:0f:fd:99:15:12:18:05:
         fe:e4:81:3c:84:f1:b7:a8:f7:28:0a:69:3f:cf:53:af:f6:48:
         8b:bf:f9:87:05:6c:ec:52:4c:07:61:4e:6e:0e:e1:92:16:e8:
         81:53:d2:11:a6:a3:b8:7c:c8:e6:fb:96:86:d4:39:e4:93:8b:
         90:95:21:e1:64:2e:de:c8:b9:df:ec:b1:81:1d:7f:df:4a:fc:
         f5:e1:5b:93:ae:8c:14:8a:af:d1:98:00:39:83:8a:f8:70:6f:
         34:93:06:3a:8e:a9:cc:28:09:35:3b:cc:8f:64:9b:55:44:90:
         57:85:87:f6:d5:70:92:a5:92:68:8d:c6:1d:72:2c:4e:4c:39:
         7b:e0:fc:70:01:43:6d:25:d9:b3:80:b6:3c:80:c7:b5:14:34:
         a8:c4:c9:c3:47:47:f9:9d:15:22:ef:38:74:85:02:1d:e9:03:
         ff:11:15:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----