Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/72e4f1514f744521ce0abd5b88b01d2a543a371c.roa
File:                     72e4f1514f744521ce0abd5b88b01d2a543a371c.roa (raw, json)
Hash identifier:          Mrr2/pDtmk1Bu5D04ALPCxsET1Svuf2qrVdrBNEMbFI=
Subject key identifier:   22:97:66:08:AF:37:8A:5E:08:DA:2F:6C:B5:0D:D6:AE:99:2C:2D:2D
Certificate issuer:       /CN=7b96254f790811719be97d783ae33a3343e69c16
Certificate serial:       176041
Authority key identifier: A2:80:DD:07:5C:D5:B7:70:26:FB:A8:1E:C0:85:E9:B9:27:5D:47:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7b96254f790811719be97d783ae33a3343e69c16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/72e4f1514f744521ce0abd5b88b01d2a543a371c.roa
Signing time:             Mon 18 Jul 2022 21:45:27 +0000
ROA not before:           Mon 18 Jul 2022 03:00:00 +0000
ROA not after:            Sun 18 Jul 2027 03:00:00 +0000
asID:                     269832
IP address blocks:        45.186.144.0/22 maxlen: 24
                          45.186.144.0/24 maxlen: 24
                          45.186.145.0/24 maxlen: 24
                          45.186.146.0/24 maxlen: 24
                          45.186.147.0/24 maxlen: 24
                          2803:f60::/32 maxlen: 64
                          2803:f60:0:2906::/64 maxlen: 64
                          2803:f60:1:5169::/64 maxlen: 64
                          2803:f60:3:2934::/64 maxlen: 64
                          2803:f60:21:1612::/64 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1531969 (0x176041)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b96254f790811719be97d783ae33a3343e69c16
        Validity
            Not Before: Jul 18 03:00:00 2022 GMT
            Not After : Jul 18 03:00:00 2027 GMT
        Subject: CN=72e4f1514f744521ce0abd5b88b01d2a543a371c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:24:07:e2:56:a1:cc:80:ca:e7:00:ef:fd:ca:
                    92:6e:da:3f:fd:7d:c4:38:39:54:0e:de:06:f1:15:
                    45:0c:21:f3:fc:75:de:03:78:37:82:5c:aa:02:4c:
                    f9:40:84:08:c4:72:86:ae:a9:e5:dc:79:04:72:cc:
                    2c:36:69:2e:b3:55:c9:ac:58:ee:42:f8:ec:52:78:
                    dd:9e:0b:a3:0a:ae:fe:77:58:e2:6a:26:8c:70:7d:
                    64:70:83:06:78:d8:42:f1:c3:6b:7b:32:b4:cf:da:
                    52:d0:16:cd:13:f2:e9:1d:6a:1c:96:d2:b0:f7:cb:
                    1b:32:78:ca:d7:8e:83:17:fd:e7:11:c8:6d:bb:59:
                    09:37:16:c9:0b:ab:79:aa:bf:7b:f4:55:78:ec:35:
                    2b:09:24:23:82:64:a1:02:d7:1e:47:cf:9b:db:b0:
                    7b:8b:bb:73:aa:25:32:14:90:c4:54:4c:ea:1e:e2:
                    80:a3:df:a4:76:8c:15:4c:8e:0b:46:e4:bc:19:fe:
                    77:fa:1e:93:1d:e3:94:51:b1:ea:0d:02:6d:e1:06:
                    8c:14:57:64:6e:f8:7c:72:13:f5:95:0c:5c:52:45:
                    93:8c:ad:3e:3d:2f:41:99:ca:f0:d0:3a:43:b5:98:
                    46:0e:96:56:52:b2:50:72:dc:ef:1e:b7:41:f6:51:
                    67:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:97:66:08:AF:37:8A:5E:08:DA:2F:6C:B5:0D:D6:AE:99:2C:2D:2D
            X509v3 Authority Key Identifier:
                keyid:A2:80:DD:07:5C:D5:B7:70:26:FB:A8:1E:C0:85:E9:B9:27:5D:47:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7b96254f790811719be97d783ae33a3343e69c16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/72e4f1514f744521ce0abd5b88b01d2a543a371c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/7b96254f790811719be97d783ae33a3343e69c16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.144.0/22
                IPv6:
                  2803:f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:9b:be:5d:0a:ae:61:6a:57:3a:63:0d:b7:3c:1e:a1:23:f6:
         f7:46:86:de:14:de:53:89:19:40:91:1e:90:b3:ed:54:30:c3:
         c4:bc:16:31:ad:fb:a4:e9:69:62:5b:04:62:79:d5:5c:a0:a4:
         0e:cc:b8:e7:be:b0:8e:52:f9:1d:14:a8:e3:bb:d0:5d:00:14:
         ce:18:5e:cb:cc:42:30:ce:bf:72:50:5f:71:01:17:5e:0f:d2:
         96:af:56:62:ea:7e:67:7e:f1:31:1d:95:93:9c:70:fa:e9:5e:
         59:a7:28:0b:1e:d5:bc:62:a9:d4:25:b3:90:55:e5:53:a1:50:
         10:c3:ce:3b:db:e1:a8:39:fc:f4:c1:7a:53:1e:96:62:42:d3:
         03:54:0a:e9:4c:cf:ca:ed:9f:bb:31:c0:fa:57:9f:f9:e6:09:
         4b:e7:2c:41:81:97:6b:56:22:6c:33:92:d9:17:0c:dd:22:ce:
         90:e2:80:e6:60:c8:f8:52:dc:1b:3a:26:b8:32:44:7c:99:c0:
         1d:8a:9c:97:45:09:41:a4:e3:cd:b0:6f:9a:b5:aa:45:f7:17:
         f9:52:b4:c5:38:3a:35:7a:68:46:0b:a7:bc:93:cf:7a:ca:a9:
         4c:11:86:a0:82:da:8d:35:ac:db:c0:02:28:49:a8:e9:63:e4:
         61:49:f8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----