Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/82bd0309-39fc-4bbc-b121-fff7c80d221e/769cd2fe3cca5615bcbce0a1b208ef4c404d030d.roa
File:                     769cd2fe3cca5615bcbce0a1b208ef4c404d030d.roa (raw, json)
Hash identifier:          w3s1mv/HM8lY7a2PYHyOQdFgCTjjChtW0AdY26grVLI=
Subject key identifier:   AE:D6:7F:F1:FD:72:3C:9C:2A:18:A3:AA:7A:D3:6E:5E:9D:4F:04:E2
Certificate issuer:       /CN=43b6833cf6ce9e345cb92183fae39b42838f55b4
Certificate serial:       0CC4A3
Authority key identifier: 55:01:F1:97:B6:F4:1E:E4:40:0B:27:53:05:F0:6B:96:57:74:FB:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43b6833cf6ce9e345cb92183fae39b42838f55b4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/82bd0309-39fc-4bbc-b121-fff7c80d221e/769cd2fe3cca5615bcbce0a1b208ef4c404d030d.roa
Signing time:             Wed 24 Mar 2021 14:40:42 +0000
ROA not before:           Wed 24 Mar 2021 14:40:40 +0000
ROA not after:            Tue 24 Mar 2026 14:40:40 +0000
asID:                     19114
IP address blocks:        45.177.124.0/22 maxlen: 24
                          2803:2a60::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 836771 (0xcc4a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43b6833cf6ce9e345cb92183fae39b42838f55b4
        Validity
            Not Before: Mar 24 14:40:40 2021 GMT
            Not After : Mar 24 14:40:40 2026 GMT
        Subject: CN=769cd2fe3cca5615bcbce0a1b208ef4c404d030d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:67:10:88:d3:86:d1:fd:57:1f:a2:57:c8:fd:
                    4f:dd:65:92:3f:92:a7:fb:dc:bc:ec:2d:65:21:34:
                    b5:a9:91:2b:07:ff:9d:56:2e:0c:fb:d0:f3:a6:21:
                    4e:69:e6:e8:ef:b2:e9:08:88:f1:8d:a9:82:0a:dd:
                    76:55:61:86:52:3d:a1:a3:65:96:20:2d:f8:4f:36:
                    9b:5d:27:6c:78:f3:9f:9e:0a:31:79:8c:e2:8f:99:
                    b9:50:0d:9a:02:63:9c:0e:a7:21:44:32:dd:61:d0:
                    20:4c:d2:59:d3:7c:0d:dc:ec:9a:10:41:b0:81:03:
                    fc:30:cd:a2:3a:f2:3d:21:42:f7:3f:0b:f1:2e:a1:
                    ef:d0:68:b4:13:5b:5d:33:32:e0:52:ea:4a:9f:5b:
                    56:64:7a:f8:f4:ad:57:e0:0d:7e:5b:ba:d9:59:10:
                    c4:d3:99:94:01:c8:d7:d1:05:6d:4e:9b:c8:69:3d:
                    e5:69:ab:94:98:9d:d5:21:75:3d:b2:c6:1a:6b:86:
                    b9:71:35:ef:e0:79:98:2e:f7:75:19:4f:e0:21:71:
                    69:ce:79:f2:fb:af:83:34:59:ac:2e:96:c7:3b:62:
                    5a:d1:1c:14:f7:9e:e0:f2:04:b0:55:8b:4c:93:ba:
                    9d:7e:96:4a:3d:40:c1:a9:ad:15:98:af:3d:94:c1:
                    09:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D6:7F:F1:FD:72:3C:9C:2A:18:A3:AA:7A:D3:6E:5E:9D:4F:04:E2
            X509v3 Authority Key Identifier:
                keyid:55:01:F1:97:B6:F4:1E:E4:40:0B:27:53:05:F0:6B:96:57:74:FB:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43b6833cf6ce9e345cb92183fae39b42838f55b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/82bd0309-39fc-4bbc-b121-fff7c80d221e/769cd2fe3cca5615bcbce0a1b208ef4c404d030d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/82bd0309-39fc-4bbc-b121-fff7c80d221e/43b6833cf6ce9e345cb92183fae39b42838f55b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.124.0/22
                IPv6:
                  2803:2a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:ed:d5:ae:96:87:20:7f:e9:9b:6a:d5:13:d0:7d:f5:84:5d:
         11:1e:83:ae:e5:5d:5b:d5:1c:c0:4a:aa:42:24:44:07:54:04:
         4a:34:d9:0a:9a:ce:d1:86:f9:ba:5f:04:ee:99:c6:b6:a2:69:
         7f:21:11:d6:a3:9c:9e:3f:ea:41:f0:01:f9:c2:a2:60:f2:a0:
         16:ec:d5:9b:60:b2:b5:07:08:1f:1f:90:d7:5e:1d:88:16:8b:
         c4:ce:41:4b:18:38:36:0b:27:90:3d:7d:bb:5d:29:d3:34:1a:
         52:fa:6c:a1:fb:a9:93:32:a2:b6:28:92:f9:6f:2f:67:a2:eb:
         23:76:45:1f:51:26:7b:db:2c:db:03:c2:c9:0c:91:15:6c:4f:
         ff:5c:ac:81:68:f5:1c:6c:60:10:bd:32:b3:dc:92:2a:bb:f1:
         eb:83:2b:a6:27:96:fb:22:2c:cd:1b:45:20:27:24:60:e4:d5:
         ea:20:7f:a4:18:54:8a:fe:b3:2e:be:81:9d:24:5a:9d:cc:b0:
         d9:33:ef:35:eb:2b:d0:4d:1f:75:be:8c:52:31:38:89:87:c6:
         a3:56:51:45:89:5d:96:ea:cd:15:a9:de:8d:01:bb:e7:e4:b6:
         52:0f:51:5d:58:fc:50:39:1a:2a:17:7d:e3:5d:f7:f1:eb:fa:
         20:93:44:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----