Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7cc85a64-655d-46bb-ae77-9278bc57887b/62c3dbef00c16c5fd158c92fbcfff18e97530db6.roa
File:                     62c3dbef00c16c5fd158c92fbcfff18e97530db6.roa (raw, json)
Hash identifier:          ol4O0dPQmS02jTTvxqt+Nu4BRBaoO15IyXm9fFMZCq4=
Subject key identifier:   9F:13:DC:92:CC:DF:60:3D:F6:B4:7A:51:F9:DB:89:DE:CC:20:15:4A
Certificate issuer:       /CN=b35f1930ed1c716d45057c8f46fdd684adafd041
Certificate serial:       05DF
Authority key identifier: 2C:71:B1:BF:CD:51:BC:65:DF:4A:BA:5C:BB:70:5B:2A:19:38:A2:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b35f1930ed1c716d45057c8f46fdd684adafd041.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7cc85a64-655d-46bb-ae77-9278bc57887b/62c3dbef00c16c5fd158c92fbcfff18e97530db6.roa
Signing time:             Wed 20 Oct 2021 16:44:14 +0000
ROA not before:           Wed 20 Oct 2021 03:00:00 +0000
ROA not after:            Fri 20 Oct 2023 03:00:00 +0000
asID:                     263693
IP address blocks:        45.70.184.0/22 maxlen: 24
                          2803:3220::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1503 (0x5df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35f1930ed1c716d45057c8f46fdd684adafd041
        Validity
            Not Before: Oct 20 03:00:00 2021 GMT
            Not After : Oct 20 03:00:00 2023 GMT
        Subject: CN=62c3dbef00c16c5fd158c92fbcfff18e97530db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:34:7b:3e:56:ce:7e:ae:97:b9:0d:f0:fa:b0:
                    10:46:1f:b2:1c:23:91:c8:d3:82:26:7d:ef:1c:39:
                    f2:f4:bc:92:11:39:bd:6e:9f:cf:4c:d0:35:b9:8d:
                    38:49:7a:d2:f5:e9:22:3a:c1:f6:58:3e:a0:88:54:
                    a8:5b:c4:00:0b:7c:c3:88:bb:31:36:6b:a2:fc:cf:
                    f2:c9:61:bd:95:fd:b4:9d:53:4c:49:5b:11:16:37:
                    b1:49:a4:dd:c3:5c:6c:8e:3d:2c:e0:f2:de:fe:17:
                    fb:7a:70:a4:9e:3e:67:dc:7e:20:dc:e9:3f:ff:e9:
                    91:74:c0:1b:3d:9b:49:a9:17:c9:aa:e6:0d:ff:5c:
                    fc:67:fa:ca:aa:4e:48:7e:39:3e:8f:1e:18:2a:b4:
                    f4:44:7d:45:b1:8a:19:c2:49:37:73:c3:a5:b6:5d:
                    6f:47:c9:d4:7c:da:46:a1:66:d0:29:86:1b:87:44:
                    99:99:02:62:3e:38:c4:79:bd:de:ed:8c:7f:c5:e6:
                    ee:36:8b:e4:d6:5c:02:36:2c:4a:62:ee:a2:64:fc:
                    3e:27:f8:df:40:a5:8f:98:c5:f7:14:f7:72:df:2a:
                    76:b9:04:85:3a:cf:af:e5:99:d8:37:ca:87:10:7c:
                    ee:05:ff:e0:89:50:ad:c2:03:6d:0f:cb:57:50:0c:
                    a0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:13:DC:92:CC:DF:60:3D:F6:B4:7A:51:F9:DB:89:DE:CC:20:15:4A
            X509v3 Authority Key Identifier:
                keyid:2C:71:B1:BF:CD:51:BC:65:DF:4A:BA:5C:BB:70:5B:2A:19:38:A2:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b35f1930ed1c716d45057c8f46fdd684adafd041.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7cc85a64-655d-46bb-ae77-9278bc57887b/62c3dbef00c16c5fd158c92fbcfff18e97530db6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7cc85a64-655d-46bb-ae77-9278bc57887b/b35f1930ed1c716d45057c8f46fdd684adafd041.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.184.0/22
                IPv6:
                  2803:3220::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:90:57:1c:fb:88:94:1d:e9:fc:20:b5:86:24:47:db:d4:98:
         a0:cf:6e:28:d3:09:32:8d:27:72:16:af:92:80:db:28:20:0c:
         7a:86:d1:4b:80:e9:3b:f9:f0:1e:e2:40:19:3a:67:3c:eb:76:
         9a:fe:0a:0f:7e:5d:72:d3:d3:cb:b9:02:3e:7f:76:a1:20:0a:
         9d:00:cb:93:64:2b:c1:ee:8f:ba:25:9e:ac:af:f2:1f:93:52:
         69:0a:6d:57:c5:78:c8:05:d4:e2:af:21:3a:54:d2:b8:a0:71:
         84:a3:b9:65:4c:5e:8d:44:a7:62:2d:4f:ca:07:eb:f5:d0:02:
         01:22:8e:c5:d5:e7:4f:e1:31:67:c2:bf:23:78:e3:97:56:99:
         2c:bb:c9:b6:1a:cf:75:81:2e:9b:96:00:08:cb:7e:2f:20:2f:
         08:09:49:fe:58:65:8c:16:3a:58:f7:f7:d5:0f:0c:91:57:be:
         de:d4:8d:a8:7b:f3:9a:da:2b:b0:35:5a:c0:2b:21:ed:6b:dc:
         a3:e8:8a:92:ae:2e:4f:38:0f:43:91:10:d1:34:27:67:90:b4:
         b4:57:3a:66:de:f0:0e:46:ea:f1:80:fd:45:74:f8:25:76:f3:
         9e:5b:b0:c0:86:04:6e:7b:1d:72:20:bc:c3:f2:e7:77:84:20:
         6e:95:a0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----