Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/008df597b6a624e237d4e8f08e1e26c151d72e5c.roa
File:                     008df597b6a624e237d4e8f08e1e26c151d72e5c.roa (raw, json)
Hash identifier:          o6vFtXZPuffQ5YvgqK41jX0SJDJ+75XkH6OwMmcrfbg=
Subject key identifier:   F2:40:7E:C7:82:2A:EB:DE:C3:6A:85:FF:24:C2:3E:A8:10:39:EF:61
Certificate issuer:       /CN=392ca19b432c483d5aa2dbbefd00061b3e86b29c
Certificate serial:       0F2B82
Authority key identifier: 9B:CF:86:21:80:B5:A6:DC:7F:0E:B3:96:24:73:A8:E5:5D:49:83:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/392ca19b432c483d5aa2dbbefd00061b3e86b29c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/008df597b6a624e237d4e8f08e1e26c151d72e5c.roa
Signing time:             Wed 08 Jun 2022 15:58:06 +0000
ROA not before:           Wed 08 Jun 2022 03:00:00 +0000
ROA not after:            Sat 08 Jun 2024 03:00:00 +0000
asID:                     52363
IP address blocks:        45.232.204.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 994178 (0xf2b82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=392ca19b432c483d5aa2dbbefd00061b3e86b29c
        Validity
            Not Before: Jun  8 03:00:00 2022 GMT
            Not After : Jun  8 03:00:00 2024 GMT
        Subject: CN=008df597b6a624e237d4e8f08e1e26c151d72e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:17:fa:3f:c8:d7:29:58:05:c7:36:04:79:28:
                    94:aa:36:92:8e:5b:ec:f8:ee:24:c5:50:3b:a9:a1:
                    1e:31:aa:7a:39:64:0e:9a:22:e7:60:24:00:95:5a:
                    d3:df:1f:58:89:2b:49:ff:ad:35:f4:18:7b:86:90:
                    9f:fe:27:34:bb:92:45:b3:f1:2b:bd:80:63:8c:b6:
                    6d:94:89:9d:41:50:a9:c9:25:74:38:2f:51:a0:14:
                    63:98:36:53:79:16:b7:0b:50:0d:f2:ca:c9:81:6b:
                    5f:88:27:80:f7:c1:e5:cc:04:7c:a1:dc:2b:f0:dd:
                    bb:19:21:66:ab:80:62:89:04:61:36:f4:dc:eb:24:
                    c9:12:62:6f:51:ad:1d:92:fe:82:f9:df:15:87:ed:
                    ec:d4:d4:25:51:cf:20:d2:64:19:4b:9b:35:3b:09:
                    f1:ed:8e:79:c3:57:2d:4b:4a:ed:8a:1d:fe:12:5c:
                    23:f5:d7:ec:e7:9d:fa:ee:1c:dc:c9:47:72:c1:af:
                    58:44:a5:c3:e4:74:66:fb:b8:c8:26:44:f7:cd:15:
                    f6:50:5a:fc:12:14:45:3c:a2:b9:2c:ee:2b:ba:ee:
                    07:b9:a9:33:88:4e:61:48:2d:bb:0a:1a:bd:ae:c7:
                    55:1f:77:91:54:62:22:c5:b4:71:af:b8:8f:2f:2b:
                    9c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:40:7E:C7:82:2A:EB:DE:C3:6A:85:FF:24:C2:3E:A8:10:39:EF:61
            X509v3 Authority Key Identifier:
                keyid:9B:CF:86:21:80:B5:A6:DC:7F:0E:B3:96:24:73:A8:E5:5D:49:83:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/392ca19b432c483d5aa2dbbefd00061b3e86b29c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/008df597b6a624e237d4e8f08e1e26c151d72e5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/392ca19b432c483d5aa2dbbefd00061b3e86b29c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:7a:cd:ab:b5:a3:c5:e5:ae:5b:07:a3:8d:1d:84:a8:cb:57:
         2b:0b:46:de:e6:9a:ee:bf:7e:48:5a:0d:d1:c8:e7:1d:8f:99:
         9a:6e:4b:63:d2:6c:54:5f:46:a1:ba:26:42:57:fb:17:52:8f:
         b5:0c:4b:5d:ae:c2:dc:05:60:0b:8f:b5:d2:bd:16:05:10:b5:
         70:26:8d:b7:c9:76:d7:19:82:73:77:57:7f:5b:5b:5d:58:0e:
         34:71:95:34:55:33:8d:59:4a:e7:94:a9:cd:39:80:02:e0:c4:
         85:f4:95:df:b5:a9:bd:5e:da:1b:2b:2c:86:36:ac:2f:02:78:
         dc:5a:f3:73:ff:8d:94:f2:4d:6d:4d:86:cb:af:af:17:b3:d3:
         3c:fe:4e:12:11:72:7e:19:08:d7:84:79:78:c3:9c:92:e2:1a:
         c7:55:62:a1:d7:a6:4c:ec:a3:e8:99:6e:74:64:c6:21:49:ba:
         a8:39:6c:22:73:b0:d0:14:22:e4:c1:da:e0:9f:a7:01:7a:85:
         14:6d:82:9b:96:4a:ea:f0:96:c8:fe:7c:db:be:3d:c8:e0:48:
         11:e9:49:d9:e1:2b:c3:ea:68:06:b6:73:f4:0f:74:d6:d9:53:
         d4:23:10:93:9f:4d:d6:b6:5a:a0:45:47:49:f0:fb:62:ae:31:
         da:58:6f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----