Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83a8c258-3fde-441c-b96f-c4d2216dfb6c/88b5f1d06a50fb622b6cb4d97c6dedb7986bc4e2.roa
File:                     88b5f1d06a50fb622b6cb4d97c6dedb7986bc4e2.roa (raw, json)
Hash identifier:          n9G/uu5zAbioL6fR+OisZcx9HlrgnhGu0ZWZdGLducg=
Subject key identifier:   58:A1:97:84:D4:03:D4:61:B3:2F:29:46:23:C8:9F:80:D4:C7:54:EF
Certificate issuer:       /CN=b19124162f94c9ddb57b34689d280b0c29d2be54
Certificate serial:       0DA7B8
Authority key identifier: DD:3A:05:F0:F8:5F:7E:F3:70:84:D3:69:4F:0F:90:88:42:05:8A:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b19124162f94c9ddb57b34689d280b0c29d2be54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83a8c258-3fde-441c-b96f-c4d2216dfb6c/88b5f1d06a50fb622b6cb4d97c6dedb7986bc4e2.roa
Signing time:             Wed 24 Mar 2021 14:30:41 +0000
ROA not before:           Wed 24 Mar 2021 14:30:41 +0000
ROA not after:            Tue 24 Mar 2026 14:30:41 +0000
asID:                     264848
IP address blocks:        45.235.88.0/22 maxlen: 24
                          2801:11:7000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 894904 (0xda7b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b19124162f94c9ddb57b34689d280b0c29d2be54
        Validity
            Not Before: Mar 24 14:30:41 2021 GMT
            Not After : Mar 24 14:30:41 2026 GMT
        Subject: CN=88b5f1d06a50fb622b6cb4d97c6dedb7986bc4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2b:49:d0:b7:e3:ce:e0:cd:23:c1:c0:31:57:
                    98:d8:83:32:fc:3e:a9:83:ad:88:b7:d1:47:77:dc:
                    55:65:3f:03:71:a9:80:2c:37:40:2e:fa:7d:62:48:
                    f6:b5:f0:a9:a2:b6:a2:7a:40:c8:f7:9e:8a:cf:9d:
                    e8:e3:a9:44:32:1e:35:66:57:5a:46:76:ec:5a:1b:
                    fe:4e:d8:9c:5e:41:d0:c9:dd:58:84:b7:71:fd:d4:
                    d5:95:8c:82:4f:f8:8e:a9:25:65:a8:d4:28:79:a9:
                    ba:4d:71:b1:f5:a4:a5:22:ce:f6:84:67:d1:83:7e:
                    1d:82:76:6d:0c:a0:1c:96:12:77:a0:e5:ba:01:d8:
                    f2:46:bf:95:73:1a:e8:5c:66:dd:d1:29:66:29:51:
                    8f:e7:93:94:80:5c:b2:dd:92:16:58:5b:06:f3:a2:
                    bc:2d:b5:ba:36:5a:56:60:46:93:97:07:e4:ac:a4:
                    d1:71:1a:09:52:f6:8f:b9:e9:88:8a:21:34:0c:89:
                    5c:b5:22:7f:fa:8f:bd:31:4a:d5:b3:31:ce:9d:35:
                    48:0f:9f:55:3f:ba:0f:79:29:29:12:08:c6:7f:59:
                    28:af:50:6a:95:61:68:17:9e:33:6e:7f:37:f2:f0:
                    da:6d:b6:bc:1d:33:5e:eb:b4:51:4a:08:a6:b0:ce:
                    1c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A1:97:84:D4:03:D4:61:B3:2F:29:46:23:C8:9F:80:D4:C7:54:EF
            X509v3 Authority Key Identifier:
                keyid:DD:3A:05:F0:F8:5F:7E:F3:70:84:D3:69:4F:0F:90:88:42:05:8A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b19124162f94c9ddb57b34689d280b0c29d2be54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83a8c258-3fde-441c-b96f-c4d2216dfb6c/88b5f1d06a50fb622b6cb4d97c6dedb7986bc4e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83a8c258-3fde-441c-b96f-c4d2216dfb6c/b19124162f94c9ddb57b34689d280b0c29d2be54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.88.0/22
                IPv6:
                  2801:11:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:ba:cd:03:2d:bf:bd:b3:34:96:f0:13:e7:20:d4:ca:16:4e:
         17:72:11:a5:7a:fa:4f:67:dd:7b:29:0d:01:08:20:d8:a9:27:
         34:bf:b6:9c:6e:1d:9f:bd:da:27:92:6d:0e:43:2a:45:47:fe:
         49:5c:3c:bc:ab:da:bf:a0:1e:dd:71:1f:e1:14:fb:31:fa:12:
         8a:7f:43:da:44:72:91:ac:f7:29:7f:89:c1:68:b5:c9:3b:b8:
         88:60:54:3a:0a:9c:25:2a:f0:cd:5c:52:51:37:be:2e:20:13:
         0b:16:e1:33:9b:ca:93:04:35:be:c1:f0:c0:da:35:38:6e:0d:
         c7:bc:19:00:30:52:b1:fc:e8:d4:be:6d:b9:df:bc:bf:27:b7:
         6f:ee:df:9e:ea:c9:d2:b1:3d:0c:1c:41:af:c3:53:0b:0c:02:
         4f:97:7a:51:be:fb:b5:9e:1d:c7:c2:70:b1:bc:08:07:d6:b2:
         c2:78:48:78:67:8f:5f:53:3c:7d:f5:5e:f9:14:cb:5e:bb:35:
         26:b2:16:fe:bc:25:73:6e:0e:d4:86:26:bc:f6:00:00:04:3d:
         29:cf:ae:fe:1e:b6:7a:49:99:ca:2f:2c:9b:7c:da:80:f7:87:
         fd:d6:ea:70:18:bf:69:e2:a6:86:3b:74:8e:4c:80:ec:5b:40:
         84:48:11:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----