Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b44427e-3dd0-482b-a887-18f1b2639154/72044512c6da55fd268c8fdb95e5a5c4a5df31d8.roa
File:                     72044512c6da55fd268c8fdb95e5a5c4a5df31d8.roa (raw, json)
Hash identifier:          cPnyNiTlzaZrrPQkBs1lVAcXnr1choxfYFZA+ljIJnc=
Subject key identifier:   F2:E4:52:6D:FA:0A:B1:92:43:CC:BE:B6:DE:79:1B:17:38:DC:F9:92
Certificate issuer:       /CN=3abe8205e3875032dfb3042786eec7a637777979
Certificate serial:       17BB25
Authority key identifier: 61:AF:26:30:6F:76:7B:3B:D2:72:BD:1C:6F:1C:27:F9:A7:8A:1D:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3abe8205e3875032dfb3042786eec7a637777979.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b44427e-3dd0-482b-a887-18f1b2639154/72044512c6da55fd268c8fdb95e5a5c4a5df31d8.roa
Signing time:             Sat 16 Jul 2022 10:40:34 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     267831
IP address blocks:        45.173.200.0/22 maxlen: 24
                          2803:8460:1000::/36 maxlen: 36
                          2803:8460::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1555237 (0x17bb25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3abe8205e3875032dfb3042786eec7a637777979
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=72044512c6da55fd268c8fdb95e5a5c4a5df31d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ee:6b:f8:da:76:87:61:f8:43:eb:9e:bf:52:
                    5d:47:83:27:58:16:84:44:96:33:ed:57:09:1b:a1:
                    82:68:1d:a7:4e:d5:3a:fa:d0:b9:c0:9a:db:44:c1:
                    ee:0a:d6:a8:61:43:6e:eb:08:37:32:59:5a:80:21:
                    67:3e:17:4a:92:9f:08:11:f2:7e:55:c3:ca:41:7e:
                    8c:f0:84:af:12:65:c2:67:90:0c:eb:28:79:fb:5e:
                    c6:f9:5a:76:9a:26:8b:54:9c:3c:74:08:96:8c:5e:
                    b2:b2:e3:81:c9:45:84:6a:37:63:c1:24:18:30:90:
                    93:6f:3a:fd:e6:90:e6:74:21:1b:4a:23:42:62:f2:
                    59:b0:23:9a:73:7c:24:b1:66:94:3b:f7:e4:bc:3b:
                    1c:dc:7f:35:4a:e3:22:4c:eb:ff:ff:a1:fb:00:61:
                    cf:fa:22:d9:bf:07:85:b3:ad:cb:1f:1e:e4:8c:32:
                    04:75:7c:ec:db:84:8e:81:2c:30:f3:98:fa:78:81:
                    c8:12:b6:97:78:8c:b9:5a:c2:9e:46:41:5f:6f:d4:
                    86:fa:25:b0:45:8b:ca:47:6c:9b:52:42:13:2a:0c:
                    5e:f7:22:15:e7:1f:dd:67:4f:ec:5c:cc:83:5b:72:
                    d0:81:9a:b3:26:d9:64:d3:73:bc:10:cd:dc:16:ed:
                    b5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E4:52:6D:FA:0A:B1:92:43:CC:BE:B6:DE:79:1B:17:38:DC:F9:92
            X509v3 Authority Key Identifier:
                keyid:61:AF:26:30:6F:76:7B:3B:D2:72:BD:1C:6F:1C:27:F9:A7:8A:1D:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3abe8205e3875032dfb3042786eec7a637777979.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b44427e-3dd0-482b-a887-18f1b2639154/72044512c6da55fd268c8fdb95e5a5c4a5df31d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b44427e-3dd0-482b-a887-18f1b2639154/3abe8205e3875032dfb3042786eec7a637777979.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.200.0/22
                IPv6:
                  2803:8460::/35

    Signature Algorithm: sha256WithRSAEncryption
         47:14:90:e1:ab:2b:ee:c0:cd:0a:b5:18:90:30:9b:24:a3:08:
         09:88:da:34:69:78:29:22:e3:08:ff:c5:b4:a3:ee:11:d0:be:
         fd:b9:cf:a4:47:39:af:49:f1:d5:a2:24:fc:b0:e1:1f:1b:fd:
         83:35:11:bb:05:dc:e3:35:e5:3d:91:02:e9:f8:58:bc:ec:12:
         70:7a:bb:21:71:a5:d6:3e:af:1b:9a:f1:d5:58:5c:1d:58:6b:
         8a:85:9d:29:6b:9d:e2:ba:aa:a0:48:1b:bb:0a:50:3c:fe:68:
         45:06:b3:ac:c7:71:f3:20:91:e9:e6:fc:7f:61:95:51:3e:5b:
         5e:a9:d7:c7:ae:e7:cd:3c:ed:60:1e:3e:16:ac:25:f3:cb:19:
         ee:88:f6:5f:1f:e2:34:37:a3:19:88:5a:3c:ff:e9:6f:83:15:
         a4:1b:c4:d7:65:93:73:17:c2:f7:65:ce:fd:86:22:11:de:77:
         d5:02:ed:18:03:4e:0f:40:20:a3:27:78:5f:82:32:76:6e:db:
         63:a8:92:ca:53:a9:d2:c6:1f:0d:a8:f3:22:7b:da:44:6b:0a:
         34:23:fd:90:eb:f0:af:48:48:86:51:01:2b:c7:a4:ef:2f:60:
         45:01:7d:ea:0e:f9:8e:0a:93:a6:cf:7f:b7:ed:7d:2c:c1:70:
         ea:b0:d5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----