Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89ddefe1-247a-4290-98fd-d8cab981e090/663ee31a7fa533ee7f2a4fec4cc0943bfb15d4b7.roa
File:                     663ee31a7fa533ee7f2a4fec4cc0943bfb15d4b7.roa (raw, json)
Hash identifier:          7sLMiz1LE3i6r953Hy47vqkrlYlqyINAKOOp47gwl0E=
Subject key identifier:   E8:89:33:D6:64:C5:A9:CA:B5:E3:D2:09:C1:15:B3:0E:03:5D:BA:7C
Certificate issuer:       /CN=4ebda0b19a36926365ea456c1ad0f1fdf7ec2327
Certificate serial:       0B8D43
Authority key identifier: E6:BA:70:06:4E:24:60:88:72:C6:B6:1E:E5:86:51:3B:23:86:5D:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ebda0b19a36926365ea456c1ad0f1fdf7ec2327.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89ddefe1-247a-4290-98fd-d8cab981e090/663ee31a7fa533ee7f2a4fec4cc0943bfb15d4b7.roa
Signing time:             Wed 24 Mar 2021 14:40:15 +0000
ROA not before:           Wed 24 Mar 2021 14:40:14 +0000
ROA not after:            Tue 24 Mar 2026 14:40:14 +0000
asID:                     269805
IP address blocks:        45.184.224.0/22 maxlen: 24
                          2803:ab60::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 757059 (0xb8d43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ebda0b19a36926365ea456c1ad0f1fdf7ec2327
        Validity
            Not Before: Mar 24 14:40:14 2021 GMT
            Not After : Mar 24 14:40:14 2026 GMT
        Subject: CN=663ee31a7fa533ee7f2a4fec4cc0943bfb15d4b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:16:84:b5:11:00:61:8c:3c:85:12:4a:b1:cc:
                    18:25:60:dc:41:80:dc:57:16:a4:20:05:88:ab:66:
                    1b:2b:43:0d:78:af:a6:6e:6d:fb:dd:40:8e:a4:65:
                    4d:8e:ed:cd:45:60:c7:bb:35:33:65:96:ce:85:64:
                    9b:37:25:19:73:1c:45:c3:a1:e1:a9:d9:c3:37:c4:
                    1a:6b:68:ab:13:52:10:9a:00:bb:18:53:f8:6d:82:
                    8c:e5:bf:72:09:0b:06:7e:9a:08:65:d5:cf:24:f4:
                    14:73:59:b1:ee:65:0e:ef:65:e5:9e:d1:c3:e8:1f:
                    13:3b:d8:08:f3:f5:72:71:ad:ea:6b:02:73:07:33:
                    32:7e:4f:3d:e8:b8:13:64:30:d3:ee:02:ba:95:8b:
                    07:e8:a5:e7:ec:ba:0e:b0:22:b4:2c:ff:a3:92:ca:
                    de:35:6f:22:71:f0:b2:04:b3:c7:a3:14:4d:a5:db:
                    89:26:e5:e8:b5:6a:18:3c:11:ff:73:a0:37:ab:91:
                    6f:26:eb:71:73:e3:b2:ac:0b:14:27:22:ce:9c:72:
                    ac:67:f9:42:08:02:95:f6:13:63:57:b4:25:33:05:
                    16:c8:dd:8a:17:6e:61:b6:92:5b:d2:b5:13:87:7b:
                    e2:f5:08:6f:6f:ec:fd:17:da:94:b1:24:f2:a2:69:
                    99:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:89:33:D6:64:C5:A9:CA:B5:E3:D2:09:C1:15:B3:0E:03:5D:BA:7C
            X509v3 Authority Key Identifier:
                keyid:E6:BA:70:06:4E:24:60:88:72:C6:B6:1E:E5:86:51:3B:23:86:5D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ebda0b19a36926365ea456c1ad0f1fdf7ec2327.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89ddefe1-247a-4290-98fd-d8cab981e090/663ee31a7fa533ee7f2a4fec4cc0943bfb15d4b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89ddefe1-247a-4290-98fd-d8cab981e090/4ebda0b19a36926365ea456c1ad0f1fdf7ec2327.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.224.0/22
                IPv6:
                  2803:ab60::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:37:55:72:46:bc:21:ca:87:ce:2a:18:8f:ce:fc:55:f5:46:
         03:98:58:80:ce:72:d0:69:19:32:ad:69:48:b0:13:e1:74:37:
         f4:06:c6:6c:d1:b5:3e:06:e7:4a:3c:76:21:00:5b:5a:56:dc:
         b2:71:28:29:04:96:ac:b0:e4:68:93:d2:7c:73:5c:13:e3:4c:
         22:60:a6:e5:2e:4d:2e:f3:7f:db:3c:b5:8d:39:7b:df:51:a4:
         7e:a6:a5:9d:99:c3:92:55:08:1b:df:43:8c:90:7e:ed:ef:30:
         ed:88:0d:45:d9:00:35:81:52:f5:9c:cb:9c:71:29:7a:cf:7d:
         90:03:a9:18:94:27:4e:c2:d5:79:b4:43:55:4e:20:87:eb:f5:
         3f:e1:d9:5f:9b:8d:2f:7c:ca:75:1f:28:ee:45:a6:9c:5c:a7:
         92:b1:f1:42:9f:79:e4:54:b0:36:fe:c1:5c:ce:2b:3d:45:4f:
         99:db:29:d5:3b:26:35:8a:31:9c:04:d9:e7:dd:00:6d:0d:95:
         bd:9e:7b:0e:7f:88:fa:f8:ab:8a:1a:a6:c3:58:ef:a9:ba:f4:
         2b:5f:2b:c6:89:e5:44:bd:30:1f:16:dc:e4:ad:fd:1e:0d:65:
         3e:86:5a:31:bf:d7:37:71:63:eb:ec:80:fb:54:69:96:c1:f2:
         1b:f2:78:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----