Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/641307acb28cb93e37f4f166a42e16f5a79ffb21.roa
File:                     641307acb28cb93e37f4f166a42e16f5a79ffb21.roa (raw, json)
Hash identifier:          wVBnBQZSq8v618MCr9AP+dCltH0MgvjaV9pcChVa6Fo=
Subject key identifier:   51:8B:E7:83:19:F1:34:0F:27:29:3C:92:8C:4C:9F:43:67:AD:2A:1F
Certificate issuer:       /CN=5be393491eb2c03f14214a706c7be3bb76a02485
Certificate serial:       14C444
Authority key identifier: 81:52:EF:3A:9B:F5:23:2B:AA:03:28:C5:89:F0:B8:04:1E:FB:36:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5be393491eb2c03f14214a706c7be3bb76a02485.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/641307acb28cb93e37f4f166a42e16f5a79ffb21.roa
Signing time:             Wed 09 Feb 2022 15:48:49 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     264668
IP address blocks:        45.236.168.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1360964 (0x14c444)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be393491eb2c03f14214a706c7be3bb76a02485
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=641307acb28cb93e37f4f166a42e16f5a79ffb21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b8:be:30:db:b3:16:61:d4:6c:61:3d:aa:b2:
                    c1:1d:e8:8c:03:83:4c:00:b7:61:d0:90:e7:e8:65:
                    7e:90:38:6c:6c:a2:41:d3:2c:e1:90:e8:db:73:c2:
                    24:a1:94:39:15:ed:36:3f:42:7a:d5:24:e2:80:93:
                    de:35:29:8d:0d:b8:f6:2c:11:bf:d2:0d:fd:88:7d:
                    02:ba:81:51:5e:db:9e:8d:19:f4:1c:51:27:c5:24:
                    eb:8c:6c:12:b8:87:65:68:1a:53:b7:3c:62:e7:25:
                    ea:3b:fc:52:c6:17:57:82:9c:83:2c:b6:2b:44:96:
                    27:ee:10:3f:a0:b5:06:90:a2:c6:5d:6a:2b:aa:8e:
                    bc:e2:f4:16:eb:c6:15:f6:27:18:b6:2d:0a:03:cc:
                    49:1d:87:5e:39:61:49:b3:d4:f8:10:67:2a:7f:fe:
                    6a:62:9e:47:b0:50:28:50:f8:14:9c:57:98:8a:7e:
                    47:ac:42:70:96:7d:b2:64:bf:02:9e:dc:b7:2c:7f:
                    8e:a5:ac:cb:2b:5a:d2:a1:b3:d7:91:ab:b6:24:51:
                    2c:41:a7:c3:6a:b3:44:34:fa:05:f4:08:a9:27:d7:
                    09:43:44:7e:0a:94:94:34:48:31:b8:f5:f9:45:fe:
                    db:72:aa:f1:d7:0e:01:84:2d:ec:a7:bd:e2:4a:86:
                    ef:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8B:E7:83:19:F1:34:0F:27:29:3C:92:8C:4C:9F:43:67:AD:2A:1F
            X509v3 Authority Key Identifier:
                keyid:81:52:EF:3A:9B:F5:23:2B:AA:03:28:C5:89:F0:B8:04:1E:FB:36:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5be393491eb2c03f14214a706c7be3bb76a02485.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/641307acb28cb93e37f4f166a42e16f5a79ffb21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/5be393491eb2c03f14214a706c7be3bb76a02485.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:9f:ad:bf:4c:64:c0:d3:28:68:cd:95:a2:ea:d7:4b:5d:ea:
         0e:e6:f8:8a:cf:ce:e0:e9:63:38:a5:5e:95:38:c9:c6:de:0f:
         91:3c:9f:28:86:3c:74:c3:b8:a6:23:f4:ef:71:fd:53:90:a9:
         a0:04:29:03:81:ec:52:b8:c7:7c:e3:87:95:15:ce:82:0b:18:
         d4:8c:a2:45:9d:35:c4:ce:77:d4:64:16:ec:12:30:e6:29:a7:
         97:79:a0:22:61:0a:ce:98:1a:ef:45:47:39:4c:b3:04:4a:be:
         3f:39:9c:3f:49:07:6c:94:af:a7:70:df:bf:20:34:79:03:00:
         a1:1d:12:b5:dd:bc:79:d8:b2:e6:f6:cf:56:0e:f5:aa:a3:fe:
         bb:13:c4:be:e0:b1:a5:e4:7f:4a:72:24:b6:af:90:b4:2d:a2:
         1c:0e:cd:de:cd:74:f8:0d:49:08:2b:c7:40:7e:31:f4:3c:f1:
         e2:d3:f6:17:f6:30:fb:cc:3c:e6:af:5d:44:1b:04:b2:20:cc:
         5a:27:36:6d:97:cf:88:30:fd:04:4f:0b:20:7b:b8:5a:c5:5c:
         78:28:60:94:0b:af:1a:92:b4:27:c6:7d:a1:2b:f6:b7:de:e0:
         1d:09:d9:e1:2e:19:f0:1c:49:0d:2e:a0:9e:33:4b:c4:ea:7b:
         f3:c5:53:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----