Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/2678a0ae2c1ae5b437d8d0ba68f79c43007af402.roa
File:                     2678a0ae2c1ae5b437d8d0ba68f79c43007af402.roa (raw, json)
Hash identifier:          I5ijKQlEwefYTn9MFQzAiQW6dBymDms/ZeBoeBL0Nx0=
Subject key identifier:   E9:50:7C:A2:77:4C:72:26:FE:B3:30:66:09:11:50:9B:73:BE:A3:5E
Certificate issuer:       /CN=694b3d580e07f84edc87befe8b29d4e23ac87258
Certificate serial:       0C211C
Authority key identifier: 18:B1:57:82:A8:45:F8:32:C1:B4:30:C0:84:DC:A4:AF:2C:6C:E0:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/694b3d580e07f84edc87befe8b29d4e23ac87258.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/2678a0ae2c1ae5b437d8d0ba68f79c43007af402.roa
Signing time:             Wed 24 Mar 2021 14:44:38 +0000
ROA not before:           Wed 24 Mar 2021 14:44:37 +0000
ROA not after:            Tue 24 Mar 2026 14:44:37 +0000
asID:                     23470
IP address blocks:        45.170.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 794908 (0xc211c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694b3d580e07f84edc87befe8b29d4e23ac87258
        Validity
            Not Before: Mar 24 14:44:37 2021 GMT
            Not After : Mar 24 14:44:37 2026 GMT
        Subject: CN=2678a0ae2c1ae5b437d8d0ba68f79c43007af402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7f:0d:37:3a:58:2d:92:b2:ca:27:e1:bf:76:
                    3b:7e:c3:be:b3:e9:3f:1f:1d:16:b3:ce:85:c8:c3:
                    4b:2e:28:db:6d:40:c2:ed:ee:b6:b8:76:08:21:bf:
                    4b:c5:18:33:d5:0b:5f:21:32:c1:d6:a0:ef:62:f5:
                    da:34:19:79:b6:79:c4:1a:f0:46:8a:63:36:79:d2:
                    44:84:f7:f6:b4:87:b4:d4:c9:7e:cd:0e:b0:7c:64:
                    90:6b:de:29:9f:5e:58:cc:ea:66:2a:d2:47:c9:41:
                    a4:50:a9:0d:f7:29:63:0d:1d:1c:6f:50:23:23:4b:
                    df:c7:a1:07:22:18:dd:c1:c4:50:77:20:0b:99:d4:
                    5b:46:b5:e4:b7:f2:12:c1:c3:d3:41:53:0b:d8:46:
                    e6:f4:72:ba:6c:00:c1:d8:3d:19:58:21:42:9b:26:
                    92:08:aa:04:69:1a:ea:e2:17:96:53:fa:32:95:b9:
                    8a:e9:a8:ee:9a:e2:d0:9d:66:6d:e7:de:b9:89:ac:
                    6a:05:ba:9f:4e:37:14:ed:03:92:0c:7b:a5:42:e6:
                    3c:ff:c8:4c:6e:f5:6b:21:70:79:4a:89:d5:28:8d:
                    12:00:15:69:02:b2:78:d1:bc:ae:d0:64:a7:e6:96:
                    45:d4:17:8a:e2:d9:e2:5c:c9:49:72:19:98:bd:e7:
                    7b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:50:7C:A2:77:4C:72:26:FE:B3:30:66:09:11:50:9B:73:BE:A3:5E
            X509v3 Authority Key Identifier:
                keyid:18:B1:57:82:A8:45:F8:32:C1:B4:30:C0:84:DC:A4:AF:2C:6C:E0:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/694b3d580e07f84edc87befe8b29d4e23ac87258.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/2678a0ae2c1ae5b437d8d0ba68f79c43007af402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/694b3d580e07f84edc87befe8b29d4e23ac87258.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:16:ee:b0:9b:4d:cd:c2:fd:a3:5a:48:4f:e0:91:89:80:73:
         af:69:57:0f:ac:0f:b3:bf:68:4f:03:c0:b7:0a:f0:e2:b6:fb:
         11:51:45:3e:86:88:cc:29:9b:74:a8:eb:29:35:d9:a6:9b:dd:
         84:e8:7d:cc:80:b2:41:40:55:1b:fb:bf:94:76:70:8e:62:8a:
         b6:ed:43:1e:c5:12:e0:79:00:8e:b2:8a:9d:fd:44:68:8d:a0:
         07:54:a8:2a:5e:7e:4a:f8:d4:96:9e:51:f8:57:5b:0f:ad:bf:
         56:7c:8e:df:b1:3e:22:e1:98:9e:ae:b2:2b:86:fe:df:48:c0:
         22:02:62:11:db:35:1b:46:89:f6:25:b7:91:58:71:f8:11:e7:
         a8:86:d3:95:e1:e4:d3:9e:f3:6a:ce:76:0b:4b:53:94:9e:82:
         f7:ee:e7:01:b9:63:27:23:c8:41:7d:0a:e8:59:80:bd:2a:ea:
         6b:ec:48:cf:b5:fb:b3:b3:ca:40:30:2f:f3:7c:b3:cf:8a:aa:
         d4:3e:fc:df:e7:ef:67:5b:a1:5b:90:86:9a:8a:21:c5:dd:28:
         06:95:b6:dc:47:d4:a8:8e:ac:30:d3:c0:af:6a:44:9e:0c:b6:
         61:2d:76:90:bb:d7:be:1c:b7:15:3a:da:d0:c1:59:f4:9d:01:
         27:59:ea:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----