Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/bd4eb87cd3cc4609f633e692554e39e43bb872cb.roa
File:                     bd4eb87cd3cc4609f633e692554e39e43bb872cb.roa (raw, json)
Hash identifier:          Z1l2nv9dKw9zZpBVbSIhrX1HWjZ35dJDmtLCbefpZks=
Subject key identifier:   60:07:01:1D:BD:CE:30:44:75:73:61:B9:33:01:D9:44:53:71:BA:6B
Certificate issuer:       /CN=84a7a446b5912a684e23e2c1eb2619b25184f613
Certificate serial:       0D92F8
Authority key identifier: 93:7B:94:1B:07:C4:AE:1B:05:18:7B:9E:8B:AD:BC:61:A6:F4:4C:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/84a7a446b5912a684e23e2c1eb2619b25184f613.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/bd4eb87cd3cc4609f633e692554e39e43bb872cb.roa
Signing time:             Wed 24 Mar 2021 22:50:47 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     265775
IP address blocks:        45.231.148.0/24 maxlen: 24
                          45.231.149.0/24 maxlen: 24
                          45.231.150.0/24 maxlen: 24
                          45.231.151.0/24 maxlen: 24
                          2803:cb20:1::/48 maxlen: 48
                          2803:cb20::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889592 (0xd92f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84a7a446b5912a684e23e2c1eb2619b25184f613
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=bd4eb87cd3cc4609f633e692554e39e43bb872cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dc:9b:04:92:39:e1:55:8b:f8:bb:ed:b1:cd:
                    e3:24:c3:ae:42:fd:26:77:cf:04:01:67:44:07:fc:
                    5e:5b:e0:41:8b:cd:66:dc:68:79:74:bc:25:3d:05:
                    66:83:1c:d1:bc:16:70:71:47:21:a4:0d:e6:d1:dc:
                    ce:81:9c:46:9a:d8:b7:96:62:01:c3:e7:4c:6f:25:
                    88:b8:ec:e6:3b:92:42:75:c5:9f:b6:e8:8a:53:4a:
                    d9:37:b4:72:00:77:89:9d:36:9b:56:80:70:b3:d6:
                    f5:04:c9:86:ad:b2:dc:30:b4:c0:0c:51:1c:3f:5a:
                    ad:01:be:d1:c6:0d:55:37:11:6f:4c:51:e8:c1:a5:
                    4a:b8:44:9c:ae:b1:e7:3c:c2:2b:4c:e4:03:41:ce:
                    61:88:10:c9:e5:8a:58:e0:fc:f4:11:27:c9:47:6d:
                    06:fe:98:ce:07:1e:4e:73:02:68:14:d0:9d:ae:58:
                    df:04:3d:d9:0c:36:11:c1:b4:05:00:4c:24:6b:9f:
                    c4:47:ee:f6:bb:4c:82:c3:2d:c3:14:17:3a:7e:43:
                    54:4a:de:5e:20:96:c4:eb:dd:ff:e7:53:f4:d6:cf:
                    6b:95:a1:67:1a:af:ea:8c:71:6d:0b:52:2c:83:41:
                    01:bf:9d:80:17:21:ba:f9:8b:b2:32:ca:64:75:dc:
                    b1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:07:01:1D:BD:CE:30:44:75:73:61:B9:33:01:D9:44:53:71:BA:6B
            X509v3 Authority Key Identifier:
                keyid:93:7B:94:1B:07:C4:AE:1B:05:18:7B:9E:8B:AD:BC:61:A6:F4:4C:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/84a7a446b5912a684e23e2c1eb2619b25184f613.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/bd4eb87cd3cc4609f633e692554e39e43bb872cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/84a7a446b5912a684e23e2c1eb2619b25184f613.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.148.0/22
                IPv6:
                  2803:cb20::/47

    Signature Algorithm: sha256WithRSAEncryption
         97:ce:b3:79:19:c3:c1:80:ba:fe:79:b9:09:b4:92:1e:d2:4b:
         1e:a3:48:aa:d6:91:ae:99:30:08:61:e9:db:b3:b7:61:6a:46:
         44:3f:9c:9f:2d:79:8e:cf:0d:a5:5c:26:67:01:4d:cc:56:c4:
         01:5e:a6:98:9e:db:b4:3a:fd:bf:c4:3e:1a:30:13:48:10:a0:
         4d:b9:10:d0:0a:85:bb:8f:ab:a0:37:a7:80:ed:f6:d3:34:e1:
         b9:e1:92:7b:73:93:72:5b:14:58:62:11:09:b6:0a:c6:af:5d:
         20:25:6f:74:3f:28:4f:be:f9:ed:70:02:db:6b:bb:e8:b8:74:
         6d:4b:61:f1:83:42:1f:47:c5:7a:42:26:02:1a:3c:4e:f4:28:
         6f:c2:e0:a8:a7:03:27:a8:d9:3b:51:c8:20:58:90:8f:73:0a:
         e3:e2:27:4b:28:e0:0d:7f:30:e2:59:c5:a1:0e:e6:29:07:41:
         82:75:fb:6a:55:35:58:54:31:e3:df:d5:96:88:95:a4:bf:47:
         c7:7b:a0:26:ad:d4:9a:58:49:fe:5a:35:ce:1e:9b:a0:26:9e:
         5b:c3:7c:2c:29:12:c5:b5:1c:69:25:bb:0f:2d:a8:5b:d0:7b:
         94:14:ca:56:60:04:9c:4c:a1:63:fb:0f:b0:59:25:36:6a:05:
         3f:e4:a8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----