Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/4b9537f68a91e9cb1225fbe70253b6272065a7ad.roa
File:                     4b9537f68a91e9cb1225fbe70253b6272065a7ad.roa (raw, json)
Hash identifier:          XevY8MQ9kBHvvtGmsd358dbA/JG5vA8QK2Y6IlhRnvM=
Subject key identifier:   CB:71:12:90:66:D9:10:AC:C5:56:88:AA:AE:98:DC:88:08:BC:8D:E4
Certificate issuer:       /CN=4af662c498c0cbd2bb68b3ef74b602a2d494d901
Certificate serial:       0F2C4C
Authority key identifier: BB:D1:20:25:B0:48:F6:B5:AE:15:FC:50:B1:54:60:6F:52:7C:AA:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4af662c498c0cbd2bb68b3ef74b602a2d494d901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/4b9537f68a91e9cb1225fbe70253b6272065a7ad.roa
Signing time:             Fri 27 Aug 2021 12:53:21 +0000
ROA not before:           Fri 27 Aug 2021 03:00:00 +0000
ROA not after:            Sun 27 Aug 2023 03:00:00 +0000
asID:                     267871
IP address blocks:        45.177.22.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 994380 (0xf2c4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4af662c498c0cbd2bb68b3ef74b602a2d494d901
        Validity
            Not Before: Aug 27 03:00:00 2021 GMT
            Not After : Aug 27 03:00:00 2023 GMT
        Subject: CN=4b9537f68a91e9cb1225fbe70253b6272065a7ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:be:ce:3f:b2:ef:ed:63:97:7a:15:dc:6b:ed:
                    47:cd:de:ae:67:9d:36:b7:7b:86:ea:ef:9c:91:92:
                    d1:5a:d3:34:8a:5f:6e:44:34:36:35:c0:5c:0b:27:
                    4d:8e:07:d4:e7:43:ff:33:7a:b3:e4:86:33:2c:1d:
                    b6:23:06:7c:39:03:83:e8:cf:2d:78:93:2d:c6:26:
                    31:e5:a7:09:07:b3:4b:d3:f4:00:ce:b0:16:69:34:
                    3a:b4:10:4f:16:d6:09:f7:05:d1:e9:c3:2b:7b:af:
                    a7:6b:2d:06:13:e7:a9:fc:d1:e9:cc:a7:60:c9:cb:
                    19:2c:39:56:ca:07:55:c4:2e:f3:a6:78:8e:21:e4:
                    82:cb:4b:8d:7e:b8:60:9b:40:87:62:9e:bf:e3:cf:
                    ed:d5:aa:fc:7f:66:0d:0d:c9:71:cd:f6:5c:85:72:
                    fc:16:3f:01:d9:14:2e:7e:ce:e8:b2:5a:ad:c6:e6:
                    84:c7:33:bc:7e:7a:d4:d6:9f:88:b5:7e:69:31:1c:
                    b9:90:17:42:92:ce:27:09:7c:4c:fa:22:64:4a:87:
                    99:d7:73:da:f7:22:d4:96:9c:cd:69:a9:62:87:c6:
                    77:22:3f:a8:4d:b1:ae:cc:d1:37:ae:4a:eb:d7:c9:
                    8a:35:d3:4d:50:f0:f2:3d:fa:b6:36:40:fd:9d:b3:
                    e1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:71:12:90:66:D9:10:AC:C5:56:88:AA:AE:98:DC:88:08:BC:8D:E4
            X509v3 Authority Key Identifier:
                keyid:BB:D1:20:25:B0:48:F6:B5:AE:15:FC:50:B1:54:60:6F:52:7C:AA:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4af662c498c0cbd2bb68b3ef74b602a2d494d901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/4b9537f68a91e9cb1225fbe70253b6272065a7ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8accc968-07f2-40c3-b8a8-147e520150b2/4af662c498c0cbd2bb68b3ef74b602a2d494d901.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:be:85:74:4a:cb:bc:0a:04:d3:d3:4e:64:e5:a3:25:c8:92:
         e8:46:4b:5b:6e:02:92:2f:3a:92:dc:98:f3:7b:1f:d5:77:96:
         33:7f:79:74:2f:39:70:77:b8:3b:e2:6d:4f:49:76:cf:17:43:
         ca:23:8a:71:c2:95:9e:02:e8:16:54:1a:c6:f4:7f:31:e7:69:
         72:40:aa:c4:e6:c7:41:fd:28:d5:0a:23:85:68:2d:65:c0:6c:
         f8:21:d3:a8:31:55:ef:8b:67:ca:32:f1:b0:4b:a2:26:ff:e0:
         b0:e9:41:2a:61:44:40:cc:e6:76:6a:12:d9:a4:f1:bd:8d:99:
         39:64:85:d8:8d:58:3a:49:78:fc:b3:98:fe:15:bb:2c:28:2f:
         ce:b4:4a:3c:89:7d:a9:97:b4:60:45:cb:20:14:c0:d2:c6:5f:
         76:0d:64:d9:c7:f0:36:2d:a7:f9:b9:6f:be:b3:3f:4e:45:1a:
         a4:c9:3f:8e:1c:26:9f:3d:d6:e3:a0:59:bc:3c:02:f1:3f:df:
         f7:5c:c3:24:48:55:f4:d3:77:20:4b:75:d4:a1:17:98:59:7b:
         fd:32:e0:e6:8d:75:91:e1:ae:08:35:d4:f9:85:58:9c:21:69:
         81:26:83:40:ce:3c:b6:12:01:dd:2d:54:b7:21:98:70:b1:f5:
         72:7d:d8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----