Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/0decd8584835cee85b9127836154d55d8224435e.roa
File:                     0decd8584835cee85b9127836154d55d8224435e.roa (raw, json)
Hash identifier:          bRcrSZ+5c3cHpcSHzLGOt/+UkbrQcJDBa7+9uLdNp8k=
Subject key identifier:   3B:42:3B:02:53:19:F9:D8:24:02:D1:59:49:A4:D2:7D:E8:18:ED:E1
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       18CCE6
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/0decd8584835cee85b9127836154d55d8224435e.roa
Signing time:             Thu 23 Jun 2022 21:50:52 +0000
ROA not before:           Thu 23 Jun 2022 03:00:00 +0000
ROA not after:            Sun 23 Jun 2024 03:00:00 +0000
asID:                     264668
IP address blocks:        45.71.254.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1625318 (0x18cce6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Jun 23 03:00:00 2022 GMT
            Not After : Jun 23 03:00:00 2024 GMT
        Subject: CN=0decd8584835cee85b9127836154d55d8224435e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7d:8a:53:76:ac:59:6a:05:52:0e:4c:86:ec:
                    43:04:5d:42:82:df:0a:73:0a:19:53:36:88:45:aa:
                    bb:d0:14:9b:3a:a9:9f:ed:08:6e:74:ec:e4:1c:1c:
                    44:df:24:df:f3:54:63:cb:aa:ee:f2:46:20:c2:ef:
                    bb:c4:14:d8:60:36:58:fe:77:79:1c:37:44:60:1c:
                    3b:9a:4e:3b:e6:2d:2f:6c:79:c3:4f:b7:7e:c6:a1:
                    a2:3c:3e:26:c7:4b:a8:f9:c2:13:67:99:8e:1f:dc:
                    02:19:df:32:82:a9:73:b4:82:e0:e7:02:5b:ad:6d:
                    28:19:ea:0f:b6:61:77:3d:66:c0:d6:9f:ea:37:f1:
                    b1:4d:1a:f4:73:03:0e:3d:30:de:ae:f9:95:76:5e:
                    f1:bf:38:04:ce:19:2b:cb:ec:75:e0:fa:53:ad:b8:
                    6c:97:7a:6d:1f:5f:d3:ae:46:96:a6:3c:07:f7:fc:
                    72:97:9e:9c:60:67:da:53:44:a0:c8:9b:d9:fc:0f:
                    93:e9:64:a5:65:67:a2:83:87:af:a5:83:e9:99:55:
                    3c:1f:b9:ff:f2:c3:78:eb:62:3f:85:67:37:8e:37:
                    22:9d:5f:31:04:a9:2e:19:05:5c:03:19:8d:c7:fc:
                    5b:6a:e3:d8:82:75:84:fc:6d:a1:74:e4:6c:9e:95:
                    9d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:42:3B:02:53:19:F9:D8:24:02:D1:59:49:A4:D2:7D:E8:18:ED:E1
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/0decd8584835cee85b9127836154d55d8224435e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:51:b2:86:78:95:11:88:50:32:95:f2:06:c1:97:ad:06:88:
         3e:1a:f6:75:f4:00:36:e6:a7:a2:6e:1a:67:e4:90:26:d5:70:
         14:2a:d1:f4:bc:20:17:aa:ac:a3:37:5f:7d:2a:4b:76:94:4a:
         b4:a3:58:db:d3:bc:41:0b:b6:01:82:83:c9:b7:5f:39:9f:97:
         c7:4c:4c:ba:a5:de:b3:65:21:a3:c2:db:16:56:0b:58:fe:56:
         be:40:64:99:c8:a1:cc:72:95:77:4c:01:3e:d8:9a:1b:09:38:
         4d:67:15:83:5b:43:99:7e:16:36:b6:84:38:d7:c5:50:59:b2:
         65:37:d5:44:8a:39:f2:7d:2e:8f:e8:c5:b6:d9:46:96:3c:60:
         ae:10:8b:ab:1e:87:a7:ef:c0:96:f9:9b:0a:c8:a7:1c:f2:c2:
         d7:c5:f9:60:00:5a:ee:a4:21:c7:f4:0c:73:2e:ce:9f:77:75:
         1c:c2:db:ff:77:e5:93:81:72:78:57:0f:79:53:65:f4:c4:58:
         8a:b5:51:7d:0e:97:36:e7:c2:23:3e:d2:39:5d:72:b9:37:6f:
         3e:a6:04:f5:34:61:c1:b5:8b:5b:66:84:4c:1f:87:d1:ce:2e:
         f7:fc:05:a2:ab:91:ab:bf:55:93:29:b4:79:5b:0d:31:21:b6:
         e3:14:19:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----