Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/ec1ba1b1a0af7ef82c3cb9cb1ff20cb42aa660c1.roa
File:                     ec1ba1b1a0af7ef82c3cb9cb1ff20cb42aa660c1.roa (raw, json)
Hash identifier:          t2ZUL75cg6jfDBvQpFYjUkdDBQaRhyexmOpVVG9Rdog=
Subject key identifier:   CD:71:AE:F9:F4:55:E0:B9:FC:BC:CA:80:8B:E4:EE:AB:3F:E6:13:07
Certificate issuer:       /CN=7b96254f790811719be97d783ae33a3343e69c16
Certificate serial:       175CF5
Authority key identifier: A2:80:DD:07:5C:D5:B7:70:26:FB:A8:1E:C0:85:E9:B9:27:5D:47:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7b96254f790811719be97d783ae33a3343e69c16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/ec1ba1b1a0af7ef82c3cb9cb1ff20cb42aa660c1.roa
Signing time:             Mon 18 Jul 2022 21:45:24 +0000
ROA not before:           Mon 18 Jul 2022 03:00:00 +0000
ROA not after:            Sun 18 Jul 2027 03:00:00 +0000
asID:                     269832
IP address blocks:        45.186.144.0/22 maxlen: 24
                          45.186.144.0/24 maxlen: 24
                          45.186.145.0/24 maxlen: 24
                          45.186.146.0/24 maxlen: 24
                          45.186.147.0/24 maxlen: 24
                          2803:f60::/32 maxlen: 64
                          2803:f60:0:2906::/64 maxlen: 64
                          2803:f60:1:5169::/64 maxlen: 64
                          2803:f60:3:2934::/64 maxlen: 64
                          2803:f60:21:1612::/64 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1531125 (0x175cf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b96254f790811719be97d783ae33a3343e69c16
        Validity
            Not Before: Jul 18 03:00:00 2022 GMT
            Not After : Jul 18 03:00:00 2027 GMT
        Subject: CN=ec1ba1b1a0af7ef82c3cb9cb1ff20cb42aa660c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ec:9a:2b:9e:01:db:68:95:a0:2d:db:fd:2e:
                    ef:d3:70:7d:c3:b4:dc:c4:69:ec:cd:09:da:9c:23:
                    02:84:4e:2d:16:ef:e9:dd:4b:d5:c6:f0:18:6e:6d:
                    0c:9d:70:68:67:66:53:cf:d6:ed:89:34:9d:c6:eb:
                    67:ab:97:dd:e0:6d:5d:b7:a8:55:3f:a1:07:8c:c2:
                    9a:c3:93:e6:26:93:ec:1d:d1:8e:25:e4:c4:a6:e0:
                    de:05:7a:93:1b:d2:23:6d:2f:10:39:64:13:cf:80:
                    ec:d0:1d:43:e5:06:a5:af:ff:f8:13:fb:62:db:b9:
                    1c:0b:93:f3:f4:16:e6:56:9b:17:7a:41:c5:db:20:
                    aa:b6:4a:7c:b4:7f:50:ee:cd:19:0c:a0:0a:f2:f6:
                    96:0d:34:59:a1:cd:a2:1e:df:35:67:34:76:ca:a9:
                    65:a8:78:c4:c6:bc:c0:5e:18:84:3b:e8:1b:13:16:
                    3f:af:8e:85:59:44:b9:79:62:2c:67:df:7e:84:3e:
                    5c:69:32:1f:89:69:c2:23:5f:eb:29:76:79:82:18:
                    ec:6f:67:7b:d4:46:4c:43:76:66:14:e9:f5:3b:8a:
                    54:22:e3:8f:a2:2a:78:08:9a:03:1f:62:71:09:2c:
                    f6:ef:ea:6d:55:8a:77:95:e6:8c:e9:2b:8c:06:06:
                    86:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:71:AE:F9:F4:55:E0:B9:FC:BC:CA:80:8B:E4:EE:AB:3F:E6:13:07
            X509v3 Authority Key Identifier:
                keyid:A2:80:DD:07:5C:D5:B7:70:26:FB:A8:1E:C0:85:E9:B9:27:5D:47:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7b96254f790811719be97d783ae33a3343e69c16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/ec1ba1b1a0af7ef82c3cb9cb1ff20cb42aa660c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aba97471-2784-4382-b8a9-a07e3c4316dc/7b96254f790811719be97d783ae33a3343e69c16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.144.0/22
                IPv6:
                  2803:f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:c6:2a:87:4c:62:c8:c7:cf:94:00:2a:4e:ad:47:e6:44:76:
         38:e2:ab:41:49:f5:c5:33:a0:5f:9f:3f:a8:32:b5:1e:b4:21:
         19:5b:04:8c:14:de:09:fb:b8:aa:e9:bd:2d:20:c6:a6:a2:d2:
         ee:2f:ab:9d:5e:aa:be:51:e8:0b:11:5c:eb:80:bb:22:44:35:
         1e:97:ed:9c:7a:2c:fe:41:cd:43:0c:7b:61:c7:2d:44:c7:8f:
         93:e3:6e:51:af:30:d2:28:2a:97:a0:45:6a:18:f6:04:22:52:
         c9:33:7f:fd:98:de:9d:84:7f:5a:e6:94:e3:b7:4c:58:6b:26:
         89:19:09:f4:11:44:50:59:e1:ed:e5:e1:25:07:56:69:a1:98:
         2a:6b:47:1c:ed:77:95:fb:02:8c:5c:6e:08:97:63:c5:53:90:
         b0:16:f3:cc:a8:dd:03:94:de:93:04:84:7d:28:68:c8:53:d7:
         0e:64:06:80:9f:02:4d:70:39:b0:b7:8a:57:50:7c:f1:ff:75:
         58:8c:9f:15:77:98:d8:90:29:60:9a:00:9c:6b:b4:bf:16:b8:
         07:9c:1d:8f:d4:3a:a4:2f:93:b3:4f:a5:31:97:be:20:d2:b8:
         38:88:35:3d:0c:c9:e3:ea:2a:46:0c:c7:25:81:e0:ab:9f:9b:
         66:eb:33:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----