Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90c20066-735a-49b1-9fd1-245d8c1994d2/d67f193aa81bdb9833127621bbb9403c4b420e7f.roa
File:                     d67f193aa81bdb9833127621bbb9403c4b420e7f.roa (raw, json)
Hash identifier:          nKuTF5BSLn2TFLB0oX37UA3QvnGyuH8A6v9/UWPKiFI=
Subject key identifier:   F9:E2:08:C8:9A:59:B6:A3:A7:D1:9E:05:1E:2B:C7:C5:FA:79:E5:41
Certificate issuer:       /CN=605717121a8b67da0bf3a5f2f42198217533cf35
Certificate serial:       01AB
Authority key identifier: 5C:79:BC:5E:49:6E:FB:EE:FC:08:2C:07:FD:EB:F8:7F:22:7D:AE:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/605717121a8b67da0bf3a5f2f42198217533cf35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90c20066-735a-49b1-9fd1-245d8c1994d2/d67f193aa81bdb9833127621bbb9403c4b420e7f.roa
Signing time:             Fri 22 Apr 2022 22:09:44 +0000
ROA not before:           Fri 22 Apr 2022 03:00:00 +0000
ROA not after:            Mon 22 Apr 2024 03:00:00 +0000
asID:                     265835
IP address blocks:        45.224.28.0/22 maxlen: 24
                          2803:a220::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605717121a8b67da0bf3a5f2f42198217533cf35
        Validity
            Not Before: Apr 22 03:00:00 2022 GMT
            Not After : Apr 22 03:00:00 2024 GMT
        Subject: CN=d67f193aa81bdb9833127621bbb9403c4b420e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b2:b6:85:56:68:90:4b:ae:62:98:26:2d:a0:
                    b7:b5:fe:4e:a1:83:72:db:2c:11:83:ce:ae:b8:25:
                    d5:c6:1b:d7:a9:66:37:42:07:08:e2:c7:71:ed:5d:
                    e4:a7:af:5c:d2:85:28:a3:ac:9d:30:7c:5b:43:42:
                    ff:55:51:72:a4:04:52:79:8b:b7:3d:7e:e4:fd:b4:
                    d1:09:ab:f8:f0:04:7f:83:b5:1d:cb:c2:51:45:cf:
                    57:f1:ac:f8:98:98:ee:fb:21:68:6f:b2:db:d7:10:
                    cd:2d:35:16:03:9c:3a:ce:00:1e:ba:c3:d5:9d:fb:
                    e7:c7:ee:8c:fe:ec:44:15:ab:e9:36:5e:7a:d9:58:
                    69:c9:a5:2b:e3:f0:c2:52:d2:2e:14:be:df:e1:89:
                    48:f8:56:8d:47:28:4a:e6:53:22:bf:a7:08:f2:28:
                    6a:20:40:76:08:67:c1:8f:65:c6:e0:22:bf:14:74:
                    85:2b:6c:02:bd:bc:1d:98:77:a0:7c:18:43:3b:2c:
                    85:9f:a1:bd:4d:3c:a6:ac:16:7e:4c:53:c0:0e:19:
                    a5:02:dc:2f:87:5d:d9:de:de:20:db:b0:80:a0:02:
                    db:5f:65:c5:3b:0c:d6:c3:a5:a1:31:8a:dc:18:e5:
                    dd:43:6c:74:a2:6e:f0:3f:3e:06:78:ed:8f:1f:02:
                    f8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E2:08:C8:9A:59:B6:A3:A7:D1:9E:05:1E:2B:C7:C5:FA:79:E5:41
            X509v3 Authority Key Identifier:
                keyid:5C:79:BC:5E:49:6E:FB:EE:FC:08:2C:07:FD:EB:F8:7F:22:7D:AE:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/605717121a8b67da0bf3a5f2f42198217533cf35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90c20066-735a-49b1-9fd1-245d8c1994d2/d67f193aa81bdb9833127621bbb9403c4b420e7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90c20066-735a-49b1-9fd1-245d8c1994d2/605717121a8b67da0bf3a5f2f42198217533cf35.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.28.0/22
                IPv6:
                  2803:a220::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:73:67:c7:d2:9d:25:26:9f:6c:56:43:8e:0c:a6:34:c5:6a:
         fe:ef:35:d9:26:09:bf:3f:9f:81:13:1e:08:d0:c2:4c:39:f5:
         6c:2c:42:cf:31:71:4b:be:69:71:41:78:ef:aa:4e:7a:a7:ad:
         fc:ff:6e:d5:d5:f3:1d:4b:d8:46:c7:ea:46:11:41:80:e1:f9:
         7d:83:18:f0:43:61:1c:05:f6:d2:eb:41:48:b1:ea:c7:52:ca:
         59:df:24:8c:20:66:10:b2:56:46:17:69:a2:9c:74:43:11:4b:
         7f:ba:fe:a5:b2:ad:24:12:b2:d9:7d:1b:71:b9:50:19:bc:6d:
         2f:c8:06:57:f6:ad:3d:a7:8f:42:12:a5:d1:7b:50:79:28:91:
         7a:11:de:4f:83:e1:8f:4d:01:83:1d:ff:55:8c:27:c1:88:15:
         4f:2c:64:ef:3b:53:a4:03:74:6f:f6:c6:f8:bd:e1:94:fc:d9:
         79:97:94:37:19:92:b7:3a:50:fe:d9:f7:b5:dc:39:17:39:7d:
         85:db:40:e0:47:4d:0f:6c:0a:7b:08:04:51:05:fb:3d:19:da:
         43:96:78:92:df:46:d9:aa:e4:5e:a6:51:63:ef:13:11:b9:df:
         16:53:2b:63:bd:51:7d:23:95:02:f6:58:98:87:0a:35:e8:0d:
         37:5a:d5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----