Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/eb42813cc779c82c4c65f667b740086dafb4cacd.roa
File:                     eb42813cc779c82c4c65f667b740086dafb4cacd.roa (raw, json)
Hash identifier:          qMcUsrYHP8XEee1eSWDZUMnhVsMdeLjSYlLXulL5TQg=
Subject key identifier:   10:56:2A:8E:43:D7:CD:DC:B2:94:48:35:D2:8C:FE:95:F6:17:EB:D2
Certificate issuer:       /CN=d47f00a274e03808fa0dec44674469fe93bc88ba
Certificate serial:       102618
Authority key identifier: 47:94:24:3D:15:EE:FD:D9:0D:CC:35:66:1F:C3:72:3C:74:CC:70:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d47f00a274e03808fa0dec44674469fe93bc88ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/eb42813cc779c82c4c65f667b740086dafb4cacd.roa
Signing time:             Mon 30 Aug 2021 13:15:23 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     54540
IP address blocks:        45.225.75.0/24 maxlen: 24
                          45.225.75.241/32 maxlen: 32
                          2803:1920::/32 maxlen: 32
                          2803:1920::b4b2:5f61:d37f:0/112 maxlen: 112

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1058328 (0x102618)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d47f00a274e03808fa0dec44674469fe93bc88ba
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=eb42813cc779c82c4c65f667b740086dafb4cacd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:19:af:64:03:88:55:4e:c1:9f:d2:12:43:26:
                    96:67:0e:ad:1c:cb:a3:c6:d9:4d:fc:88:12:71:df:
                    76:ae:9e:f1:be:7f:45:d8:7b:c2:6b:37:68:47:bc:
                    df:ae:e1:c2:dc:0d:50:94:cb:8b:f0:e8:2b:7b:b9:
                    bc:ef:d5:2b:1b:ac:59:6f:96:12:e7:02:76:f0:68:
                    af:b9:57:4b:8e:bc:df:cc:91:5b:c8:cc:a0:6e:50:
                    52:df:55:a4:9a:09:6c:f6:a7:31:4d:3e:ed:00:b6:
                    74:00:66:c4:0c:26:bd:41:e8:3b:1c:25:17:74:35:
                    d2:39:79:65:f6:0f:e2:aa:b0:8f:80:8e:43:ff:83:
                    be:39:c8:62:74:7a:94:4e:4e:09:3e:c0:95:05:8d:
                    6f:c1:6d:ee:0b:a6:4d:10:c1:c0:d0:7d:a2:6c:c4:
                    6f:65:64:7f:0c:62:44:24:2a:77:ad:19:1f:da:d9:
                    80:8b:3f:e0:d1:03:97:d0:80:6f:65:84:68:64:44:
                    5f:f2:a3:8f:a7:c4:22:a6:2a:ff:e2:b4:73:37:b0:
                    69:af:d9:2d:21:24:c7:14:c0:00:94:8e:83:e7:48:
                    42:3c:04:41:5f:b5:87:ec:ca:c2:2e:03:52:e6:99:
                    50:3b:88:f4:bb:a6:9d:8b:47:db:e6:98:5b:b3:6f:
                    58:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:56:2A:8E:43:D7:CD:DC:B2:94:48:35:D2:8C:FE:95:F6:17:EB:D2
            X509v3 Authority Key Identifier:
                keyid:47:94:24:3D:15:EE:FD:D9:0D:CC:35:66:1F:C3:72:3C:74:CC:70:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d47f00a274e03808fa0dec44674469fe93bc88ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/eb42813cc779c82c4c65f667b740086dafb4cacd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/d47f00a274e03808fa0dec44674469fe93bc88ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.75.0/24
                IPv6:
                  2803:1920::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:f7:57:15:f2:62:86:70:f6:3d:a6:82:f0:18:3f:f6:34:6a:
         7e:ba:65:1f:03:de:2b:94:a9:6d:ef:24:9e:e7:70:02:1a:85:
         d2:de:bc:06:c8:4b:9c:ad:b7:64:20:36:46:65:66:33:4f:ce:
         1c:e4:69:90:f2:8b:e1:65:68:31:5c:09:c3:3f:50:4e:90:45:
         81:11:fd:6d:b5:a2:8d:ff:64:53:2d:ea:ea:b0:8c:bf:33:6d:
         ce:5a:0a:14:ef:89:a8:a7:0d:c2:d7:f7:8e:f5:3e:20:52:24:
         af:4f:13:e9:a1:ff:ba:c5:41:84:5d:34:e7:92:61:ae:b6:33:
         6d:37:72:b2:0b:71:67:b5:a0:29:fa:ee:3f:ad:c5:aa:92:d8:
         1b:80:26:05:14:14:2f:61:7e:8f:a4:02:1a:8c:03:c0:0b:14:
         4e:f6:cc:8a:52:3d:fa:15:04:9e:65:84:52:c4:7c:5e:de:e7:
         77:07:23:a5:eb:aa:4d:89:90:ef:48:c1:2f:e0:6b:96:2e:c0:
         2e:7e:99:37:97:91:89:7e:1b:f7:20:1b:57:c0:e5:f6:4a:4e:
         10:94:b9:0b:34:69:f0:26:93:fa:3f:9b:91:da:e9:d0:70:1e:
         8a:1c:e4:31:47:6f:c9:c4:1d:aa:71:f1:d4:a3:01:68:ef:fe:
         c1:0b:a8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----