Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/1384aad5edc6f9d5f813cb7eb32b460e61e0a7e2.roa
File:                     1384aad5edc6f9d5f813cb7eb32b460e61e0a7e2.roa (raw, json)
Hash identifier:          R1D9jAj1PaaCY2uAD4m9j0whid+WIpxCtOgz4nvq8vY=
Subject key identifier:   84:93:B1:00:FF:60:75:EB:EC:C1:E2:54:B4:20:4D:44:EB:05:A4:15
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       1B00BD
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/1384aad5edc6f9d5f813cb7eb32b460e61e0a7e2.roa
Signing time:             Thu 15 Sep 2022 22:04:57 +0000
ROA not before:           Thu 23 Jun 2022 03:00:00 +0000
ROA not after:            Sun 23 Jun 2024 03:00:00 +0000
asID:                     266904
IP address blocks:        45.71.254.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1769661 (0x1b00bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Jun 23 03:00:00 2022 GMT
            Not After : Jun 23 03:00:00 2024 GMT
        Subject: CN=1384aad5edc6f9d5f813cb7eb32b460e61e0a7e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:97:32:4c:f2:91:3f:24:59:b1:81:e0:1f:23:
                    9f:ac:32:4e:42:69:6e:2b:56:d9:b4:3b:cf:ea:f4:
                    6a:ce:9b:4d:b4:dc:dc:83:75:29:a6:e0:f8:96:c5:
                    86:02:14:67:8b:4e:3a:03:eb:11:79:04:5f:38:f1:
                    f0:70:f0:b9:78:cc:ab:94:17:0f:23:64:e0:57:08:
                    41:4e:79:bf:eb:98:64:fe:8d:16:45:6f:d3:ac:b8:
                    87:35:e4:0a:cf:0c:a7:ee:a3:eb:bd:0f:e6:39:ef:
                    45:7d:11:f0:3e:5c:79:62:a5:0d:ca:86:b6:59:81:
                    8a:1f:e9:0b:00:39:f2:19:35:31:87:f1:0d:d0:64:
                    6a:5d:04:bf:f0:29:f2:e9:92:af:f1:1e:91:67:fa:
                    52:f3:25:44:c4:a9:fc:91:f2:9b:5a:85:d9:d7:40:
                    2f:61:5b:8c:30:38:d0:f8:08:35:d9:88:b6:7e:c9:
                    ca:43:69:58:b5:40:7b:97:2e:05:94:14:ee:25:46:
                    67:ee:29:ff:14:9e:11:1f:52:aa:7b:5e:a0:24:a8:
                    fb:76:c4:31:c4:86:d3:38:ca:02:c5:79:c3:3e:ee:
                    23:10:87:a1:6f:e7:26:bb:e2:50:4c:71:c8:15:d6:
                    d0:67:9c:6e:c4:06:12:49:90:a2:07:39:cc:e9:2b:
                    67:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:93:B1:00:FF:60:75:EB:EC:C1:E2:54:B4:20:4D:44:EB:05:A4:15
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/1384aad5edc6f9d5f813cb7eb32b460e61e0a7e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:eb:06:4f:de:d9:83:bf:af:05:2f:88:08:9a:85:d6:68:af:
         2a:ec:78:f6:40:a5:1c:1d:19:58:d8:96:c6:09:bf:54:32:7d:
         cd:65:23:e9:f8:35:07:ab:b2:0f:87:58:df:10:95:77:7a:45:
         bb:3b:01:1e:14:4b:d2:49:e0:79:3a:4e:fa:40:d0:dd:1f:07:
         fe:5d:9f:8e:9e:b7:c6:f4:3a:0b:c8:39:12:cc:19:8b:15:4b:
         79:5f:b8:50:78:f0:b9:fa:75:45:1e:25:5d:99:60:14:ad:5d:
         9f:de:3d:1c:7e:c1:dc:c3:32:e5:f4:12:e5:28:f3:95:3b:7f:
         1f:b6:3f:0c:78:96:78:f9:d6:8d:22:5c:e4:42:36:bd:53:5f:
         8d:4d:39:79:31:ed:37:48:ce:b8:91:57:3e:c8:ea:d3:ca:97:
         d4:74:82:9a:ff:ad:22:35:80:2d:53:79:bb:61:df:06:7c:fd:
         01:ef:a9:72:ee:4d:76:ea:da:cd:53:e9:e4:0c:d0:8a:16:33:
         f6:0f:4a:5e:c7:d3:50:ee:c3:9c:22:31:2c:82:09:ac:33:8b:
         88:0c:0b:74:c4:fb:d8:e0:20:24:5c:da:ec:32:0e:bd:b2:19:
         1c:51:7f:79:f8:31:b5:b7:b8:9f:93:96:20:ab:b4:b9:9d:32:
         4a:45:85:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----