Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9c3445fd-2308-4a06-af1f-e8143a49d47e/6ffd2841d7044b54035d7a4c36ad103ddf6bdda3.roa
File:                     6ffd2841d7044b54035d7a4c36ad103ddf6bdda3.roa (raw, json)
Hash identifier:          syPwMMbzkvjP/JNh3agBjSvkGT1l1dPbOLc0OPLtfb8=
Subject key identifier:   C8:CE:3E:AD:A8:59:68:80:B7:EC:04:80:73:2C:28:89:9B:E9:96:E3
Certificate issuer:       /CN=54a3bca48dfc42afc7c19f9e5e976a803425265b
Certificate serial:       031B
Authority key identifier: 04:61:47:85:51:0C:F6:91:5A:E3:C4:3C:9C:59:CE:1F:E3:92:6C:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/54a3bca48dfc42afc7c19f9e5e976a803425265b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9c3445fd-2308-4a06-af1f-e8143a49d47e/6ffd2841d7044b54035d7a4c36ad103ddf6bdda3.roa
Signing time:             Mon 19 Apr 2021 02:32:14 +0000
ROA not before:           Sun 18 Apr 2021 03:00:00 +0000
ROA not after:            Tue 18 Apr 2023 03:00:00 +0000
asID:                     269894
IP address blocks:        45.191.96.0/22 maxlen: 24
                          2803:44e0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 795 (0x31b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54a3bca48dfc42afc7c19f9e5e976a803425265b
        Validity
            Not Before: Apr 18 03:00:00 2021 GMT
            Not After : Apr 18 03:00:00 2023 GMT
        Subject: CN=6ffd2841d7044b54035d7a4c36ad103ddf6bdda3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dd:2c:87:14:2d:15:34:18:bd:ea:8b:fd:90:
                    f5:f5:27:aa:60:d2:1e:26:79:5e:2a:79:c2:c0:f2:
                    0c:44:c4:91:ed:67:2c:4f:9d:33:b0:bb:a9:64:8a:
                    46:df:93:9c:60:15:5b:ed:36:b4:69:db:70:7d:16:
                    01:01:5f:06:fc:aa:55:37:33:45:35:e1:e4:76:dc:
                    7e:9f:da:79:9b:ec:35:2c:49:7d:71:32:d8:63:4b:
                    03:ee:cf:dd:9e:e3:3d:6c:81:8f:04:ea:00:e7:8c:
                    1b:7e:72:39:8b:86:d1:4e:b1:8e:28:11:bf:ac:ca:
                    98:a7:33:70:42:70:64:d6:a4:86:4b:a7:a5:3a:91:
                    65:a1:f1:58:65:fd:67:83:7e:dc:94:cf:a0:8f:6e:
                    b3:3a:e0:ff:b9:ce:69:e2:a8:6f:a5:f7:7b:09:1b:
                    c8:a3:e0:bb:12:8c:1d:01:4b:a1:bf:a2:24:bc:95:
                    5e:90:a3:e6:a6:71:3c:62:8e:ce:fd:9c:17:41:e7:
                    20:e1:4e:ab:5a:40:ab:ac:37:ed:a4:7d:df:5e:bf:
                    9a:71:2c:3b:91:d4:dc:c8:05:4b:58:73:ce:50:14:
                    73:65:59:38:cc:a5:35:8d:3b:33:e7:d1:9f:98:42:
                    20:cd:b1:7d:58:f2:6a:8e:a4:de:22:b6:81:ae:6b:
                    9b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CE:3E:AD:A8:59:68:80:B7:EC:04:80:73:2C:28:89:9B:E9:96:E3
            X509v3 Authority Key Identifier:
                keyid:04:61:47:85:51:0C:F6:91:5A:E3:C4:3C:9C:59:CE:1F:E3:92:6C:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/54a3bca48dfc42afc7c19f9e5e976a803425265b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9c3445fd-2308-4a06-af1f-e8143a49d47e/6ffd2841d7044b54035d7a4c36ad103ddf6bdda3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9c3445fd-2308-4a06-af1f-e8143a49d47e/54a3bca48dfc42afc7c19f9e5e976a803425265b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.96.0/22
                IPv6:
                  2803:44e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:ec:ee:86:44:66:3d:30:9d:7c:4c:7b:04:70:38:30:d8:3c:
         a1:38:97:a0:54:f3:ff:71:86:1a:38:5a:79:84:8d:29:68:43:
         fd:60:25:ff:18:3b:cc:ca:9f:4d:a5:02:b2:3b:b3:0a:4a:8a:
         02:5e:3c:45:d7:8d:b1:3b:bd:38:78:ee:3a:f9:ec:49:5b:3d:
         52:55:af:90:6c:0d:9f:8f:cc:32:62:9e:24:42:a1:d4:47:0c:
         9a:b2:e3:5e:84:11:88:18:e0:8f:fb:d9:98:cf:70:37:1a:8a:
         a1:d8:75:da:a4:6f:0f:a9:a0:e2:f5:06:d9:58:4b:23:57:d4:
         3a:c1:c3:91:30:6a:44:ff:ac:9b:32:7e:09:6c:95:e7:4d:a8:
         38:13:19:e1:b7:41:ef:11:1d:40:99:56:64:7b:82:bb:6a:02:
         64:58:c4:4b:0a:99:69:9b:b6:3e:b2:59:38:15:02:76:3a:07:
         38:21:60:b8:6c:37:e4:37:09:14:75:94:0e:42:a0:3d:15:55:
         a1:26:82:37:35:f0:ce:d5:1f:f8:b1:26:0a:2b:04:07:ff:e8:
         2e:ce:41:e9:58:e3:7e:6d:48:71:b2:8a:49:9e:14:c7:3c:e6:
         17:04:26:73:a9:41:f5:20:9a:a8:96:e8:c1:3c:95:6a:7c:8e:
         8e:5e:57:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----