Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/958c92c8-a386-49c3-9691-8ee3c4ff17ee/997ba38ca2f3c49dd35e5927856318b351321ef4.roa
File:                     997ba38ca2f3c49dd35e5927856318b351321ef4.roa (raw, json)
Hash identifier:          GahuKyda81rPJ+FGuPXB//RTQL9dZH6BXrfP67rwZCE=
Subject key identifier:   E7:1D:E2:23:53:D0:F3:6D:EC:53:D8:20:B4:76:10:15:A5:9F:B5:0B
Certificate issuer:       /CN=e8b953b12842ffe0d97ca6fedbe7550e5a400acf
Certificate serial:       0C1AC0
Authority key identifier: 71:85:EB:FB:A8:0B:53:41:D8:52:3D:48:A0:FD:52:94:2E:E5:4E:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8b953b12842ffe0d97ca6fedbe7550e5a400acf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/958c92c8-a386-49c3-9691-8ee3c4ff17ee/997ba38ca2f3c49dd35e5927856318b351321ef4.roa
Signing time:             Wed 24 Mar 2021 14:39:18 +0000
ROA not before:           Wed 24 Mar 2021 14:39:18 +0000
ROA not after:            Tue 24 Mar 2026 14:39:18 +0000
asID:                     269728
IP address blocks:        45.180.140.0/24 maxlen: 24
                          2803:1160::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 793280 (0xc1ac0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b953b12842ffe0d97ca6fedbe7550e5a400acf
        Validity
            Not Before: Mar 24 14:39:18 2021 GMT
            Not After : Mar 24 14:39:18 2026 GMT
        Subject: CN=997ba38ca2f3c49dd35e5927856318b351321ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:35:bc:e7:6c:01:10:2c:c6:4f:4b:89:85:fa:
                    5c:85:83:38:29:be:02:81:db:12:1f:80:f0:b0:82:
                    bf:e6:80:e2:df:9a:fa:3a:20:ad:0a:be:ef:52:82:
                    c4:d9:c9:42:75:91:b2:77:fb:84:b9:29:c9:90:ec:
                    55:3d:59:2d:7c:e3:0d:02:8e:44:3a:2b:2a:da:f7:
                    34:74:5c:73:50:5f:2f:52:2d:51:74:73:d7:6e:6b:
                    9f:06:e1:4e:13:9a:42:6c:b8:95:12:99:0b:d0:b8:
                    73:ca:1c:d2:9a:0c:47:29:fb:61:56:bc:57:19:3f:
                    60:67:57:a2:1d:52:6b:51:f8:9e:a7:24:ac:99:fb:
                    5e:71:20:a9:ba:b2:cb:7c:52:d6:6e:ba:5e:54:0d:
                    55:0a:f8:af:cd:02:1b:96:af:d6:99:e5:2b:41:6a:
                    50:5c:19:f1:34:48:c5:1d:f9:19:89:3d:e8:b9:ce:
                    4a:d7:03:d3:fc:5b:5a:1a:01:08:e2:57:32:d7:eb:
                    bc:7f:93:4d:8d:35:d1:3b:f4:7c:83:60:ee:ca:0a:
                    be:68:e9:fa:e7:bd:7b:00:69:69:86:88:82:4a:77:
                    8c:58:e4:ae:63:39:c0:19:83:8f:82:b7:66:6d:34:
                    69:32:d3:49:3d:65:69:b7:3c:fc:bb:9d:5a:4d:1e:
                    b5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1D:E2:23:53:D0:F3:6D:EC:53:D8:20:B4:76:10:15:A5:9F:B5:0B
            X509v3 Authority Key Identifier:
                keyid:71:85:EB:FB:A8:0B:53:41:D8:52:3D:48:A0:FD:52:94:2E:E5:4E:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8b953b12842ffe0d97ca6fedbe7550e5a400acf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/958c92c8-a386-49c3-9691-8ee3c4ff17ee/997ba38ca2f3c49dd35e5927856318b351321ef4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/958c92c8-a386-49c3-9691-8ee3c4ff17ee/e8b953b12842ffe0d97ca6fedbe7550e5a400acf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.140.0/24
                IPv6:
                  2803:1160::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:df:71:a0:25:66:55:91:3f:b3:d1:fb:ec:61:04:da:5b:7e:
         09:10:35:fd:44:ba:29:fc:04:3c:57:cf:23:e6:5b:49:6b:06:
         45:57:c1:ce:c9:db:39:4f:2b:75:33:ec:89:5f:ca:02:2b:0d:
         6c:40:a5:4c:1e:7c:f4:87:db:99:9c:12:43:f0:ff:34:e2:3a:
         30:d2:42:8d:8a:40:03:41:40:0d:35:70:12:76:ea:5c:f2:92:
         38:46:a7:e2:4c:a3:a4:49:46:4e:1c:63:64:f6:c6:c3:0a:cf:
         a7:8e:2b:08:4b:1c:f2:8a:5e:a5:58:85:2f:35:f8:4c:b8:0e:
         13:cd:40:8a:2e:78:61:7f:4f:b3:38:03:32:5e:47:fe:fc:e4:
         74:58:bc:a7:9f:aa:09:31:c3:60:f0:fe:35:ca:18:fc:88:7f:
         52:bd:02:78:48:fd:24:b0:20:b6:5c:68:3b:d6:21:83:2e:9f:
         56:46:56:01:df:54:d7:d5:24:95:c9:b9:48:d3:f5:1e:56:a3:
         5d:e1:e0:1c:f5:26:c9:c6:6e:54:86:72:1b:f2:53:c7:e3:7e:
         a3:ac:e4:2c:72:f9:71:9a:fe:5f:bc:bd:c6:90:0a:76:15:62:
         7b:9b:cf:8d:b4:4a:dd:34:ec:98:f2:51:78:9e:d4:90:11:e2:
         4f:95:94:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----