Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/a269518459b41c8f42abcd92a0a04fde89a93718.roa
File:                     a269518459b41c8f42abcd92a0a04fde89a93718.roa (raw, json)
Hash identifier:          xsHS7M9MxrmZEXSpHxA4HLwfXqInyKKoknFgLDIfPbw=
Subject key identifier:   FD:2C:12:4F:CF:55:4F:4C:FD:25:76:FD:03:5D:37:23:CF:79:98:EE
Certificate issuer:       /CN=6ca9ba10afd54135352807b3dddedf3c53d15f16
Certificate serial:       11141B
Authority key identifier: 70:FE:31:A0:4C:7D:2D:19:E4:8E:29:0F:60:F7:17:9D:F1:BD:7F:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ca9ba10afd54135352807b3dddedf3c53d15f16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/a269518459b41c8f42abcd92a0a04fde89a93718.roa
Signing time:             Fri 29 Oct 2021 18:15:46 +0000
ROA not before:           Fri 29 Oct 2021 03:00:00 +0000
ROA not after:            Fri 31 Oct 2025 03:00:00 +0000
asID:                     267829
IP address blocks:        45.174.151.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1119259 (0x11141b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca9ba10afd54135352807b3dddedf3c53d15f16
        Validity
            Not Before: Oct 29 03:00:00 2021 GMT
            Not After : Oct 31 03:00:00 2025 GMT
        Subject: CN=a269518459b41c8f42abcd92a0a04fde89a93718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:e7:4e:3c:b9:54:01:0a:65:cf:d3:bf:62:
                    11:38:cd:3e:f6:6e:4b:40:17:80:09:3a:c6:8a:f0:
                    46:24:85:e0:78:48:63:d5:d3:6d:6d:1d:18:6c:14:
                    84:90:4e:0e:97:cf:c1:51:19:bc:13:5c:79:0b:2d:
                    fb:3c:0a:e3:30:31:ff:b5:37:fd:de:63:14:ed:74:
                    8f:0c:2a:b6:f9:a0:01:a4:69:63:d3:8c:50:a3:da:
                    72:5d:12:3e:a1:47:cb:2e:cf:9a:52:7e:b2:c3:eb:
                    b9:3f:df:b2:6c:12:92:26:5e:dc:7c:94:4d:45:6a:
                    79:59:9c:25:0d:59:0b:50:9f:0b:43:01:5d:62:25:
                    4b:d5:53:0a:5e:dc:ec:b6:68:32:a8:6d:b5:c6:86:
                    67:d1:3c:fb:d9:46:6a:8a:db:82:8e:fa:fe:79:ca:
                    a6:bf:ce:62:50:d3:27:86:30:79:b6:1f:9f:f7:87:
                    7b:c7:d5:5c:1c:8e:da:5a:c7:84:66:c9:b6:48:28:
                    48:f2:21:3d:c1:65:48:ee:00:f2:cf:e3:04:93:4f:
                    be:61:60:d7:75:62:90:3d:5e:a3:ed:06:ad:94:55:
                    6d:0b:50:22:0c:e9:55:1a:31:3e:c5:c9:4b:da:bf:
                    61:81:aa:60:d8:da:0b:0f:f4:8f:6d:2b:10:95:11:
                    60:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:2C:12:4F:CF:55:4F:4C:FD:25:76:FD:03:5D:37:23:CF:79:98:EE
            X509v3 Authority Key Identifier:
                keyid:70:FE:31:A0:4C:7D:2D:19:E4:8E:29:0F:60:F7:17:9D:F1:BD:7F:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ca9ba10afd54135352807b3dddedf3c53d15f16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/a269518459b41c8f42abcd92a0a04fde89a93718.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/6ca9ba10afd54135352807b3dddedf3c53d15f16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:e3:f9:83:8d:cc:89:46:43:0e:53:3e:8f:5d:9e:eb:31:85:
         b4:ad:18:bc:7b:3c:20:6c:71:c7:dc:80:4a:aa:0c:f9:e0:3c:
         c2:6c:98:80:f7:c7:31:a8:ec:95:0a:49:68:f5:d4:7e:91:31:
         4b:1b:80:31:2d:75:5c:9c:2a:d4:36:7e:77:56:ee:bb:53:e9:
         4c:2a:3b:5c:2c:41:e2:fd:c7:b9:41:87:e7:6f:85:f9:3d:a7:
         b9:3d:62:cc:a6:d4:ad:29:02:87:65:f6:95:28:fa:86:84:3a:
         72:5c:2b:65:5b:84:3e:ef:54:01:60:43:22:93:ac:c1:c4:92:
         0d:6c:9c:19:c0:1f:76:2b:5f:08:e4:7b:17:52:87:b0:3b:05:
         c0:3f:c1:8c:97:2d:45:82:5a:fe:04:ee:fe:c8:52:06:d2:d8:
         47:75:50:4e:5b:2d:83:a4:a8:29:af:8a:8a:75:bb:56:ab:17:
         b0:e6:12:52:c8:ce:40:b0:04:ab:db:09:af:65:40:ba:9d:ab:
         94:ff:03:89:42:59:51:63:e5:52:db:0d:40:cf:60:c7:56:e3:
         ca:17:88:0d:76:8b:b9:7b:72:ea:52:41:6d:11:0b:15:4b:e8:
         24:bd:09:ac:da:14:5d:03:ac:8c:bc:f4:81:7e:06:44:8b:fd:
         f6:18:10:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----