Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/6b9b45adbd16138b5560c6007582923c94dd85bf.roa
File:                     6b9b45adbd16138b5560c6007582923c94dd85bf.roa (raw, json)
Hash identifier:          DstNT60tFv1MXO26IdfGOVfmWEfhPikTys8aP/xz3EE=
Subject key identifier:   E5:02:E8:5D:57:75:3D:7A:1B:F3:06:1B:53:7E:66:37:7F:1C:6A:73
Certificate issuer:       /CN=79714d073f4d520d9dfb9d6d8ac625b3c9a02caf
Certificate serial:       0C02F0
Authority key identifier: 5F:99:72:18:43:B5:F9:7D:54:A4:6C:88:6D:8F:1A:BC:45:75:4A:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79714d073f4d520d9dfb9d6d8ac625b3c9a02caf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/6b9b45adbd16138b5560c6007582923c94dd85bf.roa
Signing time:             Wed 24 Mar 2021 14:47:32 +0000
ROA not before:           Wed 24 Mar 2021 14:47:32 +0000
ROA not after:            Tue 24 Mar 2026 14:47:32 +0000
asID:                     267811
IP address blocks:        45.169.140.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 787184 (0xc02f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79714d073f4d520d9dfb9d6d8ac625b3c9a02caf
        Validity
            Not Before: Mar 24 14:47:32 2021 GMT
            Not After : Mar 24 14:47:32 2026 GMT
        Subject: CN=6b9b45adbd16138b5560c6007582923c94dd85bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:49:d5:d0:ad:18:3b:1f:d6:b9:08:91:c3:9b:
                    ba:a6:a6:0d:05:3c:72:0f:f7:16:66:11:02:a1:92:
                    a6:97:b9:ce:a1:ad:6c:b7:2f:fd:c2:fd:e9:13:c3:
                    7d:c6:bf:37:79:7d:9c:6b:7f:0d:f2:52:a5:92:ca:
                    a6:50:dd:58:62:ce:7b:f5:a9:d6:f2:94:4b:85:64:
                    fc:16:6e:e4:ee:51:ba:6c:a3:25:ce:0c:cb:63:01:
                    ca:bc:56:fe:c3:09:f1:1e:e3:63:4e:8f:f8:e0:f3:
                    fa:72:9b:25:d4:1a:f4:71:54:51:0f:5e:fd:f2:77:
                    6c:9f:17:80:7b:fa:e7:f7:ff:32:75:52:b1:bb:58:
                    0c:e5:00:61:62:e2:5f:d7:cf:00:47:1d:f4:ba:8b:
                    b2:13:a3:90:d7:0b:4c:59:84:29:1b:38:77:e3:12:
                    52:a9:ff:f7:48:90:eb:13:65:9d:db:ad:5d:11:ce:
                    2f:14:67:6d:c2:3c:ab:54:90:68:97:1d:13:fa:14:
                    d0:e9:10:77:af:f6:f2:a9:71:cd:a0:36:56:63:e4:
                    69:b6:11:e3:72:e2:35:7f:4e:c7:67:36:2d:0b:f7:
                    d8:0f:08:64:34:d6:6d:62:29:8a:cf:01:f8:9b:8c:
                    b4:0d:8a:fc:4b:25:e5:19:10:b9:0e:5f:a5:e2:c0:
                    db:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:02:E8:5D:57:75:3D:7A:1B:F3:06:1B:53:7E:66:37:7F:1C:6A:73
            X509v3 Authority Key Identifier:
                keyid:5F:99:72:18:43:B5:F9:7D:54:A4:6C:88:6D:8F:1A:BC:45:75:4A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79714d073f4d520d9dfb9d6d8ac625b3c9a02caf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/6b9b45adbd16138b5560c6007582923c94dd85bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/79714d073f4d520d9dfb9d6d8ac625b3c9a02caf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:3b:c7:dc:55:58:fe:9d:61:24:b9:7b:c2:f9:45:f3:6a:65:
         d5:e5:07:d0:0b:f9:44:51:80:d8:c2:02:65:ae:9c:3e:da:45:
         91:c6:eb:86:ab:ee:ee:ab:46:39:19:99:7f:c9:75:22:3e:ca:
         9b:63:6d:21:af:f1:f4:40:c8:8d:da:de:9e:45:15:d1:f2:af:
         53:f8:fb:ab:83:c1:c8:75:d1:0c:66:63:64:fa:e3:ed:71:05:
         5b:63:d7:3b:be:17:e3:dc:c7:9f:b3:39:30:fb:f1:8e:f7:7d:
         81:a0:a2:1a:ce:01:f7:9e:a5:d5:6c:24:df:21:86:3d:fc:3f:
         e0:a8:c3:ec:4e:d7:d0:32:7b:d0:42:93:25:84:1f:65:81:42:
         3c:f7:25:4c:5e:68:55:7e:4e:5f:2d:cb:92:a4:8b:51:6d:be:
         f4:31:36:bb:cf:97:f8:6e:4f:bc:da:60:9f:cd:b8:da:51:50:
         cc:92:19:46:f4:74:9a:78:81:64:40:c2:b8:81:1e:dd:f1:57:
         46:87:b4:66:8a:5f:df:4c:51:7a:75:0f:9f:72:f8:0f:22:a7:
         43:01:18:43:87:ca:30:39:43:dc:0a:9d:6d:c3:00:cc:22:9e:
         13:89:aa:e2:8c:32:53:41:2a:24:45:af:bf:74:1d:dd:64:fe:
         d3:94:78:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----