Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/199947122fc35244d764649759466a508312812f.roa
File:                     199947122fc35244d764649759466a508312812f.roa (raw, json)
Hash identifier:          sBWWgzLZGXC3Vdy/eHwnNcCahl24JggtCbsHxO0KzdE=
Subject key identifier:   50:AC:29:2D:D5:89:D4:A2:EA:AA:AA:A0:02:80:23:BD:92:48:0E:10
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       1C221C
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/199947122fc35244d764649759466a508312812f.roa
Signing time:             Wed 26 Oct 2022 18:19:49 +0000
ROA not before:           Mon 24 Oct 2022 14:28:37 +0000
ROA not after:            Sat 26 Oct 2024 14:28:37 +0000
asID:                     272074
IP address blocks:        45.71.255.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1843740 (0x1c221c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Oct 24 14:28:37 2022 GMT
            Not After : Oct 26 14:28:37 2024 GMT
        Subject: CN=199947122fc35244d764649759466a508312812f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fc:5a:ab:8a:9f:76:bf:b1:ec:53:79:c8:97:
                    a5:42:50:15:71:ce:b9:81:a0:8b:36:7c:c5:9d:c1:
                    52:53:77:15:5d:81:c5:d0:e6:4c:d8:d3:e1:8a:16:
                    3a:e0:6a:26:48:c6:63:cf:52:3c:46:63:8a:93:15:
                    87:4c:3e:92:5e:93:b3:7c:45:e2:87:6b:32:78:10:
                    f0:20:e7:14:fd:88:59:2b:11:c9:0f:b5:8e:da:61:
                    19:26:aa:ce:b5:27:3e:bb:71:0f:35:f2:91:b8:da:
                    5e:92:50:c7:6e:6a:7b:d5:96:60:fd:28:01:fb:29:
                    bf:f2:f5:3c:fc:63:20:68:3e:7b:8f:75:b0:f7:4f:
                    e2:4e:a3:bb:ed:f7:73:75:6e:ef:75:1b:c7:7a:9b:
                    3a:1f:79:a4:20:83:7a:eb:95:a2:c4:78:72:8d:c7:
                    ac:75:f4:e5:05:e0:42:b9:87:c9:5a:04:af:7e:b5:
                    45:19:bc:9e:72:d1:98:be:0e:91:82:94:da:39:81:
                    c7:63:cf:13:4b:bc:db:54:f9:76:48:f9:eb:2b:fa:
                    63:07:fb:63:42:21:77:0d:96:d3:28:a2:6b:46:1c:
                    eb:85:67:48:7c:42:51:90:df:bc:30:b6:79:22:a4:
                    1b:2a:cb:01:ba:ac:51:bd:a2:95:d6:73:15:e2:fb:
                    fb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AC:29:2D:D5:89:D4:A2:EA:AA:AA:A0:02:80:23:BD:92:48:0E:10
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/199947122fc35244d764649759466a508312812f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:8a:d9:00:89:ef:27:8b:7d:80:6d:98:41:2d:48:4c:9d:26:
         05:28:89:0f:7e:4b:19:0e:1d:d1:fb:f1:7e:76:e4:f8:3c:5e:
         9d:84:af:28:fd:b2:28:b2:c1:81:02:2d:57:60:6a:82:44:6b:
         bd:30:0a:11:3d:d1:a6:9a:dd:f8:8c:bc:c4:cb:8f:2a:0b:e6:
         cb:5f:32:f4:26:f3:79:62:d8:6f:a2:e4:dc:09:e7:51:92:4a:
         73:24:e7:97:5d:8f:9d:4c:21:e2:e9:1c:a1:5f:a2:29:b9:1a:
         fd:79:e9:72:e3:c5:c5:23:41:2c:a2:f1:9e:26:cd:c4:a3:46:
         89:ee:d7:16:85:41:d1:94:ee:eb:34:78:b7:24:46:e2:1e:ef:
         a7:09:99:8f:a5:94:68:3b:5f:9b:ff:11:74:30:0a:cb:7e:84:
         2b:d4:fb:bf:69:ce:f2:49:9a:3d:93:11:3e:9c:37:54:08:2e:
         4e:fe:89:02:37:c2:73:43:f3:b4:2f:8d:2a:8a:f4:b2:ae:16:
         f6:f5:8d:f0:5b:2e:72:ba:49:51:12:8a:2d:3f:62:a0:98:20:
         79:e8:d3:6e:42:95:6f:d5:91:70:73:3f:24:a7:52:5d:8e:82:
         a6:0e:15:1a:06:64:dd:8a:fd:f6:ed:a7:f1:87:a4:3c:25:c1:
         b2:cc:07:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----