Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/b014efc90707a48dc96f1491f2f4177da9448d92.roa
File:                     b014efc90707a48dc96f1491f2f4177da9448d92.roa (raw, json)
Hash identifier:          fEkhqqTPprIUyx3m3L8ZsBHnvmP2s+J11WwR8UsqJh0=
Subject key identifier:   A9:8E:25:0E:CF:10:12:85:3C:40:DE:03:E4:6E:5D:EC:A1:56:C1:AF
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       1C3623
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/b014efc90707a48dc96f1491f2f4177da9448d92.roa
Signing time:             Thu 27 Oct 2022 22:15:51 +0000
ROA not before:           Sun 23 Oct 2022 14:28:37 +0000
ROA not after:            Sat 26 Oct 2024 14:28:37 +0000
asID:                     272074
IP address blocks:        45.71.255.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1848867 (0x1c3623)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Oct 23 14:28:37 2022 GMT
            Not After : Oct 26 14:28:37 2024 GMT
        Subject: CN=b014efc90707a48dc96f1491f2f4177da9448d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ff:67:4f:4a:63:17:7e:16:4d:17:2e:60:ff:
                    30:e0:ae:dc:24:2b:10:79:8a:a7:17:bf:3f:29:e7:
                    d9:bc:c7:ef:a3:23:0c:d4:13:fd:3b:e2:e3:17:06:
                    df:34:d0:1f:f2:f9:f2:90:6a:f9:70:62:a7:69:90:
                    c7:5b:15:db:81:8e:fb:a6:5d:72:b7:de:79:8d:90:
                    4f:95:7b:b2:78:c8:78:86:b6:9c:7f:ba:9c:f5:0f:
                    2d:81:21:ab:96:e7:3b:64:6d:3c:97:06:7d:34:72:
                    fb:38:5c:44:08:8c:ea:7d:d2:c4:1b:85:58:d1:86:
                    ae:85:85:a0:c0:c2:34:e6:42:73:b5:50:a5:a0:28:
                    69:f0:55:0d:6c:35:02:b0:35:10:be:05:a8:a7:e2:
                    c1:03:26:82:5e:f8:74:82:9a:08:e7:89:0c:76:94:
                    92:09:bf:70:47:6c:a9:f9:fd:bd:70:44:92:d6:b5:
                    9a:8e:e9:f6:43:10:e5:59:f9:8e:d8:1c:2d:7b:43:
                    01:e4:cf:30:9d:cf:9b:b9:cc:58:05:5b:50:31:e6:
                    d2:e8:41:a0:18:e8:7e:c2:3b:4f:9b:87:70:65:2f:
                    4b:da:d2:ad:09:60:7d:c9:f2:08:36:c0:81:cb:4f:
                    78:5c:a1:c3:6a:8f:45:09:c1:02:a9:80:9e:3f:94:
                    65:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8E:25:0E:CF:10:12:85:3C:40:DE:03:E4:6E:5D:EC:A1:56:C1:AF
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/b014efc90707a48dc96f1491f2f4177da9448d92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:cb:43:d6:0f:ce:67:76:87:5e:25:1e:b1:6d:d2:4b:2e:f9:
         96:cd:39:f7:33:53:bf:27:e2:53:be:a1:89:f6:ed:18:3a:08:
         21:bc:e2:dd:36:f3:72:3c:e6:cb:2d:76:4a:49:11:69:24:bf:
         ac:17:79:22:70:bb:4b:b5:a1:2b:91:24:fe:9b:94:6d:d3:8a:
         9f:4b:7a:d0:f5:28:65:01:7c:f7:bf:e9:3a:13:41:3c:65:4c:
         96:3a:04:56:35:df:77:96:d3:be:a0:0b:a8:ec:8b:97:2c:b3:
         43:8f:b0:de:31:62:1c:e1:1d:57:03:4c:9b:59:af:2a:c6:c4:
         dd:81:f0:46:c7:fb:f1:39:9e:c0:2a:42:18:06:98:c7:35:a7:
         70:86:70:17:31:f0:fa:3c:d4:ad:d9:68:a6:b4:12:07:c7:06:
         93:4f:08:a5:87:c7:19:3f:f7:29:87:81:9b:79:52:1f:ec:8d:
         7c:f9:33:f4:39:62:19:49:b1:43:0e:e8:9e:04:53:20:2b:f7:
         b7:68:51:22:43:48:1b:1b:f5:a4:e2:41:e9:6e:72:a2:84:e5:
         f0:84:1d:b8:42:9c:eb:a7:e5:7d:64:51:62:23:64:de:9e:06:
         3e:2a:57:2e:c8:f3:40:95:67:62:31:9f:01:ac:99:ae:59:79:
         22:bd:10:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----