Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a815ce32-f0b4-4b96-8fdf-a0c4a7796f03/d50a97ba2246815534cc4a7840416997d133e6dc.roa
File:                     d50a97ba2246815534cc4a7840416997d133e6dc.roa (raw, json)
Hash identifier:          SIhTfssl9CZx2Ou+GIn1JYItIg7htyASCWuBew3dhq4=
Subject key identifier:   69:26:A1:AC:8C:D4:00:7B:D3:71:2E:C6:B7:F7:6F:CE:46:26:92:C4
Certificate issuer:       /CN=264594ab0a87e9fe0523de21ba1d3eda8a994014
Certificate serial:       0B2045
Authority key identifier: 7A:CD:C2:A7:9D:3E:91:CF:5B:35:93:D4:9B:D2:E5:BC:C6:E3:85:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/264594ab0a87e9fe0523de21ba1d3eda8a994014.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a815ce32-f0b4-4b96-8fdf-a0c4a7796f03/d50a97ba2246815534cc4a7840416997d133e6dc.roa
Signing time:             Tue 21 Jun 2022 11:50:48 +0000
ROA not before:           Mon 20 Jun 2022 03:00:00 +0000
ROA not after:            Thu 20 Jun 2024 03:00:00 +0000
asID:                     207688
IP address blocks:        45.180.21.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 729157 (0xb2045)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=264594ab0a87e9fe0523de21ba1d3eda8a994014
        Validity
            Not Before: Jun 20 03:00:00 2022 GMT
            Not After : Jun 20 03:00:00 2024 GMT
        Subject: CN=d50a97ba2246815534cc4a7840416997d133e6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:5b:b9:5e:ec:15:78:35:09:16:43:09:f4:b2:
                    66:54:1c:de:ed:1f:71:08:77:f8:e5:94:9b:c5:15:
                    53:f7:44:54:2f:30:6c:73:31:bb:04:93:65:39:4a:
                    44:88:fd:d3:f8:93:16:4a:ca:f9:9d:9a:28:48:55:
                    ec:9c:1e:32:7c:60:67:e8:e2:c9:2d:4c:50:9a:37:
                    31:ef:23:a5:44:35:4b:2e:f4:86:c6:01:ff:e9:73:
                    d0:10:91:17:71:17:4c:a2:e3:56:ea:de:5c:5e:aa:
                    24:e7:c5:af:d9:dc:47:d6:d7:8b:36:d1:a3:71:39:
                    61:26:49:7d:cd:e7:a7:56:f5:39:07:5d:05:32:94:
                    e4:ba:ca:ec:9b:6c:f7:69:a8:3d:f8:49:bf:d2:76:
                    72:94:2e:3f:50:17:ad:24:3c:79:29:7b:7e:49:a4:
                    d6:0c:c9:8c:69:88:12:e7:cc:6d:40:00:ec:a9:8a:
                    88:44:04:73:9d:ea:61:fa:d8:88:96:e1:c7:95:76:
                    23:92:51:b7:ee:2d:a3:4b:1a:49:67:d1:69:3e:71:
                    26:6f:af:ad:00:02:dc:27:10:11:fd:cd:42:6a:22:
                    b8:c6:96:fa:a4:73:6a:83:fc:16:be:7d:a0:db:e0:
                    d2:4b:51:af:e1:bb:bb:1b:24:eb:ab:31:4b:ab:4e:
                    d5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:26:A1:AC:8C:D4:00:7B:D3:71:2E:C6:B7:F7:6F:CE:46:26:92:C4
            X509v3 Authority Key Identifier:
                keyid:7A:CD:C2:A7:9D:3E:91:CF:5B:35:93:D4:9B:D2:E5:BC:C6:E3:85:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/264594ab0a87e9fe0523de21ba1d3eda8a994014.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a815ce32-f0b4-4b96-8fdf-a0c4a7796f03/d50a97ba2246815534cc4a7840416997d133e6dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a815ce32-f0b4-4b96-8fdf-a0c4a7796f03/264594ab0a87e9fe0523de21ba1d3eda8a994014.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:f7:44:af:4a:5d:8c:ac:9b:7d:70:8a:54:c6:76:2d:81:29:
         61:55:25:72:1c:72:0c:87:c5:3a:40:8e:77:92:6c:a9:72:d7:
         3b:51:d6:de:9c:3d:8a:54:27:d1:49:ae:f3:e1:40:50:2c:a2:
         a0:1f:e5:7c:ac:0e:23:4c:14:ba:62:36:41:03:85:ae:18:2b:
         14:2c:0e:cd:ce:47:dd:eb:26:4c:2e:a7:ae:c1:85:de:96:8d:
         bd:75:8d:a1:e7:d2:70:54:9f:59:b1:24:b4:9a:8f:f4:17:f9:
         9f:8a:3b:10:17:40:f0:b5:1d:56:e6:f0:30:8a:8f:c7:30:52:
         67:4b:22:e3:31:bc:8d:2a:6d:4c:76:8d:f2:6e:c8:ec:4f:c3:
         dd:4c:72:ce:5b:ce:8e:a6:cf:3e:5b:d4:12:88:9a:82:2c:fc:
         4d:db:89:c2:e3:44:cc:88:cb:8e:cc:1a:17:13:86:d7:b9:0d:
         c6:ae:f5:fb:40:ed:31:94:dd:73:11:f5:4a:cb:f6:d0:44:ff:
         6a:46:d6:0a:0d:61:66:e3:e2:6f:fc:20:bf:0e:d7:23:4d:73:
         02:63:34:16:f9:7b:71:5a:bd:96:f4:fc:e6:55:be:02:d7:06:
         60:22:b8:01:50:2d:5d:35:4a:82:c9:0a:3a:cd:a8:4f:bb:18:
         96:f4:2c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----