Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/477b1170348f300e4ab9cb7c411ff4b6fc3cf5f8.roa
File:                     477b1170348f300e4ab9cb7c411ff4b6fc3cf5f8.roa (raw, json)
Hash identifier:          BkIBQw489mT9F7w7E23fLj9s3ybA3caCBbnxPAw4Mm0=
Subject key identifier:   E1:71:D3:6C:3F:35:30:8F:AD:80:C1:5A:49:CE:82:34:9A:30:CB:E0
Certificate issuer:       /CN=1dfddfe2f66b991bd6c0a52036c8bafed2f1f289
Certificate serial:       0BFCD0
Authority key identifier: 2F:F0:EB:90:52:72:03:93:9D:EB:1E:9A:33:44:7B:44:E1:57:DD:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/477b1170348f300e4ab9cb7c411ff4b6fc3cf5f8.roa
Signing time:             Wed 24 Mar 2021 14:35:19 +0000
ROA not before:           Wed 24 Mar 2021 14:35:19 +0000
ROA not after:            Tue 24 Mar 2026 14:35:19 +0000
asID:                     265554
IP address blocks:        45.170.134.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785616 (0xbfcd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dfddfe2f66b991bd6c0a52036c8bafed2f1f289
        Validity
            Not Before: Mar 24 14:35:19 2021 GMT
            Not After : Mar 24 14:35:19 2026 GMT
        Subject: CN=477b1170348f300e4ab9cb7c411ff4b6fc3cf5f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d5:86:67:f7:01:d7:a7:5c:6e:ac:5b:4b:a4:
                    36:c6:73:19:c2:ad:2c:d6:4d:e7:75:37:05:22:94:
                    06:81:9a:5c:35:8b:55:b4:60:5c:9f:94:85:96:8b:
                    9c:9f:15:0b:f4:d2:28:79:b3:73:a3:ad:3a:99:89:
                    31:1f:46:60:b5:28:05:ea:5c:35:c0:2a:3f:85:a9:
                    64:26:18:0b:b6:e7:ac:1c:4d:4d:ba:af:24:1f:ab:
                    1d:ac:ff:78:70:59:22:1c:0e:0e:bb:c8:ab:97:30:
                    bb:88:c1:f6:f9:c1:05:aa:2a:62:2b:2f:97:ce:8f:
                    e1:a5:87:47:43:8d:04:af:29:69:59:c2:b6:69:5c:
                    4b:6f:49:04:71:ef:c1:97:36:67:17:cd:69:6f:ae:
                    93:ab:29:76:23:bb:f7:2b:80:34:e3:26:d3:15:83:
                    d3:ed:40:e6:76:87:02:07:e7:a9:02:d2:91:f6:ff:
                    00:26:eb:77:ce:95:e5:5b:ee:79:12:eb:a9:2d:45:
                    13:e2:92:de:ae:d6:19:e4:04:75:1a:22:44:f9:91:
                    89:19:f8:df:bd:7a:97:2e:4a:5c:9a:16:82:a2:07:
                    87:61:7b:c4:15:f4:f9:45:96:84:74:58:58:f5:93:
                    8d:b7:9e:87:ad:84:10:21:39:3b:53:f3:89:83:a4:
                    ab:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:71:D3:6C:3F:35:30:8F:AD:80:C1:5A:49:CE:82:34:9A:30:CB:E0
            X509v3 Authority Key Identifier:
                keyid:2F:F0:EB:90:52:72:03:93:9D:EB:1E:9A:33:44:7B:44:E1:57:DD:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/477b1170348f300e4ab9cb7c411ff4b6fc3cf5f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:83:a9:b8:13:15:35:c9:fd:36:5e:cf:53:9e:da:53:a0:6d:
         ea:7b:b8:c1:c8:cd:e8:80:2c:bf:4a:ab:8d:2c:34:c0:15:ef:
         fb:00:be:23:82:11:19:5e:fe:95:4d:e4:b3:46:88:a9:aa:37:
         05:18:82:bc:94:67:1b:42:3b:ba:20:9a:b2:b6:bf:da:61:b5:
         7e:0e:86:82:65:4f:1b:78:33:9b:19:39:10:63:14:e6:b9:a3:
         79:88:63:b9:2b:52:7c:26:de:60:32:53:82:bc:17:a3:74:09:
         fa:ef:e4:e6:98:83:63:d4:7e:3e:46:76:fa:0e:39:9f:da:0e:
         ce:ea:2c:ec:38:18:73:9d:58:bf:53:8d:3a:68:98:13:43:7c:
         ab:d1:ac:47:23:e3:fe:2f:bc:93:ff:21:27:90:10:da:4b:70:
         24:1d:6e:4d:2e:ef:5b:0e:99:35:a1:86:f5:2a:39:ed:b9:04:
         30:78:ea:27:8c:90:41:f8:9d:4a:6b:7b:43:fc:df:96:4b:bd:
         11:af:5f:71:6a:57:28:2a:bb:49:5a:a1:f2:a7:5e:60:75:88:
         32:eb:67:ba:ae:d8:07:21:e8:74:ed:2e:cb:23:9d:9f:07:29:
         f8:6e:3e:13:f7:85:f0:b6:49:17:3b:64:d4:49:ab:82:b5:d5:
         07:85:b8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----