Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/82bd0309-39fc-4bbc-b121-fff7c80d221e/a5771bdfad7271966032859eed4b73ef92d66eda.roa
File:                     a5771bdfad7271966032859eed4b73ef92d66eda.roa (raw, json)
Hash identifier:          OC8aH7t6gaK/fgVsbcNHI4ATlYfQOczHPU/Vp1r0W2U=
Subject key identifier:   12:18:02:8D:E8:12:99:75:3F:04:F2:65:AD:1C:74:DB:E8:D9:24:0F
Certificate issuer:       /CN=43b6833cf6ce9e345cb92183fae39b42838f55b4
Certificate serial:       0CC855
Authority key identifier: 55:01:F1:97:B6:F4:1E:E4:40:0B:27:53:05:F0:6B:96:57:74:FB:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43b6833cf6ce9e345cb92183fae39b42838f55b4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/82bd0309-39fc-4bbc-b121-fff7c80d221e/a5771bdfad7271966032859eed4b73ef92d66eda.roa
Signing time:             Wed 24 Mar 2021 14:40:42 +0000
ROA not before:           Wed 24 Mar 2021 14:40:40 +0000
ROA not after:            Tue 24 Mar 2026 14:40:40 +0000
asID:                     27947
IP address blocks:        45.177.124.0/22 maxlen: 24
                          2803:2a60::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 837717 (0xcc855)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43b6833cf6ce9e345cb92183fae39b42838f55b4
        Validity
            Not Before: Mar 24 14:40:40 2021 GMT
            Not After : Mar 24 14:40:40 2026 GMT
        Subject: CN=a5771bdfad7271966032859eed4b73ef92d66eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:08:45:b3:c8:3c:21:f6:b9:fe:b4:59:04:85:
                    46:36:2c:f3:d9:8f:82:ff:f4:43:a3:80:b0:3a:7a:
                    09:dd:e3:b6:36:25:75:ea:22:a5:08:4e:74:9f:08:
                    02:fd:6a:b8:8b:ad:4d:99:3e:52:ad:53:54:02:45:
                    4c:00:54:f3:fa:7a:7e:a4:b6:e2:43:cd:37:dd:8c:
                    30:6c:27:b6:85:ac:ab:9d:23:56:90:25:6f:c4:14:
                    51:cc:2e:a1:51:d6:00:af:03:0f:0b:fc:08:a9:6d:
                    f2:77:b8:09:6b:76:32:14:82:7b:03:ed:17:b3:79:
                    78:85:bf:3b:07:5e:59:2d:12:78:22:22:a7:70:d7:
                    81:aa:32:25:23:e4:3a:e2:e1:ac:b7:31:43:56:b6:
                    64:bf:ee:68:3c:60:2f:56:83:78:d7:f0:70:0d:0d:
                    ef:27:ba:54:8b:41:86:d9:45:68:d1:6a:a4:32:12:
                    52:72:e3:96:94:29:a7:33:3c:9b:84:c0:92:cd:19:
                    22:77:58:17:a6:b7:e2:96:b2:5f:4f:15:a8:cb:9d:
                    d3:36:60:bf:ce:3c:f1:30:4e:da:4c:35:a4:92:3a:
                    b7:9b:71:54:8d:a9:6b:f2:8c:c9:d5:69:9d:f6:fe:
                    39:90:da:55:e8:b3:be:4a:21:55:87:67:1c:d2:05:
                    12:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:18:02:8D:E8:12:99:75:3F:04:F2:65:AD:1C:74:DB:E8:D9:24:0F
            X509v3 Authority Key Identifier:
                keyid:55:01:F1:97:B6:F4:1E:E4:40:0B:27:53:05:F0:6B:96:57:74:FB:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43b6833cf6ce9e345cb92183fae39b42838f55b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/82bd0309-39fc-4bbc-b121-fff7c80d221e/a5771bdfad7271966032859eed4b73ef92d66eda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/82bd0309-39fc-4bbc-b121-fff7c80d221e/43b6833cf6ce9e345cb92183fae39b42838f55b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.124.0/22
                IPv6:
                  2803:2a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:d6:d7:1d:23:af:57:4b:00:7a:c0:1a:d3:2e:52:2f:43:41:
         f3:e2:86:0d:4f:11:99:5f:c5:e2:ee:80:61:26:e2:cc:ab:d7:
         96:d8:69:4b:75:51:14:79:0d:c0:58:05:54:8b:1e:03:fe:12:
         b6:01:bf:b0:fd:a4:49:75:cb:81:c1:41:24:96:fd:26:24:e1:
         17:4e:4a:9e:4b:9c:ab:ce:99:55:a6:78:3b:6c:62:c7:08:18:
         bd:b7:cf:05:e6:ca:0d:23:47:f6:53:c2:6f:55:99:d0:63:b7:
         6d:20:72:3c:0e:70:f6:cb:c4:71:b2:48:0f:21:4c:6f:29:ef:
         25:99:28:80:0d:fb:ce:ea:ae:75:af:1d:6c:96:77:7c:b4:6b:
         aa:06:b1:57:6e:59:4a:35:81:2f:79:aa:2b:60:6a:d6:d4:37:
         73:4a:eb:66:4c:1f:39:b0:76:7a:23:a4:0f:8c:cc:55:0e:c3:
         3a:bf:02:b3:34:1a:70:a4:c6:b3:0a:83:91:1d:99:98:5e:a9:
         19:27:14:9f:ad:d9:e6:b8:c8:bc:54:30:bc:ca:d1:a4:bf:1e:
         13:5f:8e:0f:8a:57:dd:d3:02:a8:fc:a2:a3:b9:11:df:ee:96:
         d2:59:d7:aa:79:57:96:97:e4:77:5e:7d:07:cb:40:92:0a:48:
         6a:b3:7f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----