Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ae7164a8-f366-4d63-9629-f5b8596a55aa/d0893a562da90ba40114017bf6995ef21341fdb9.roa
File:                     d0893a562da90ba40114017bf6995ef21341fdb9.roa (raw, json)
Hash identifier:          ldJlxD0IBkIRpAiYa/Y/KPJBobicK7CVMTzhyyHoQWk=
Subject key identifier:   4A:3E:D1:68:6D:6A:44:25:0D:78:B4:7F:63:23:5B:09:EC:6C:77:48
Certificate issuer:       /CN=14dd9710595884a6cdc2418a4de21b5c2b40042b
Certificate serial:       0BED24
Authority key identifier: 82:98:69:10:AA:69:1C:81:21:C9:B9:7D:04:26:26:63:24:2D:09:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14dd9710595884a6cdc2418a4de21b5c2b40042b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ae7164a8-f366-4d63-9629-f5b8596a55aa/d0893a562da90ba40114017bf6995ef21341fdb9.roa
Signing time:             Wed 24 Mar 2021 14:43:28 +0000
ROA not before:           Wed 24 Mar 2021 14:43:28 +0000
ROA not after:            Tue 24 Mar 2026 14:43:28 +0000
asID:                     23470
IP address blocks:        45.170.250.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 781604 (0xbed24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14dd9710595884a6cdc2418a4de21b5c2b40042b
        Validity
            Not Before: Mar 24 14:43:28 2021 GMT
            Not After : Mar 24 14:43:28 2026 GMT
        Subject: CN=d0893a562da90ba40114017bf6995ef21341fdb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:48:7d:cc:1f:a0:96:2e:30:ce:76:4a:8c:a3:
                    49:61:a4:c3:7f:71:a2:83:6a:3b:b8:ad:fe:8b:74:
                    bf:58:a0:99:72:ea:3a:2b:bf:ec:bf:fb:6f:51:f3:
                    37:c5:14:06:8c:ca:68:19:8c:bd:ed:4e:4e:b6:c9:
                    6b:c2:05:9a:a5:73:30:23:59:78:cb:c7:d7:d4:be:
                    96:5f:90:9a:aa:ad:a8:d1:19:76:66:b0:ad:a9:73:
                    99:3a:a4:71:b3:12:e7:3e:92:be:76:3f:54:a4:9a:
                    58:8e:06:c9:49:be:50:ba:29:6a:1f:02:90:c5:fd:
                    1e:88:39:5a:0c:84:80:f2:cf:86:24:8f:b0:47:19:
                    2b:56:c7:44:33:91:9e:1e:40:35:1b:6e:1a:66:d3:
                    a5:74:9c:18:f3:bf:14:2f:c1:d4:bf:f3:87:9a:f0:
                    2a:b9:da:45:f1:c0:73:38:33:0f:14:eb:67:57:df:
                    0f:80:17:95:f0:55:c7:15:f7:8c:10:1b:0f:a4:0f:
                    bd:06:23:7c:02:a1:12:1f:69:d4:08:92:87:a2:59:
                    2f:b5:3a:16:99:00:f2:85:46:55:28:96:9e:57:ce:
                    04:e6:c7:15:84:9d:d2:74:8b:92:d2:11:0c:c4:21:
                    e6:bf:4a:1f:09:57:82:de:90:fe:10:4a:11:39:d8:
                    c7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3E:D1:68:6D:6A:44:25:0D:78:B4:7F:63:23:5B:09:EC:6C:77:48
            X509v3 Authority Key Identifier:
                keyid:82:98:69:10:AA:69:1C:81:21:C9:B9:7D:04:26:26:63:24:2D:09:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14dd9710595884a6cdc2418a4de21b5c2b40042b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ae7164a8-f366-4d63-9629-f5b8596a55aa/d0893a562da90ba40114017bf6995ef21341fdb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ae7164a8-f366-4d63-9629-f5b8596a55aa/14dd9710595884a6cdc2418a4de21b5c2b40042b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:d8:cb:76:4d:7f:51:a3:43:d7:6d:31:f9:47:a0:64:34:8e:
         ea:e6:7f:ad:24:91:cd:7a:b8:94:9d:65:e9:52:06:d0:65:a8:
         60:c6:9f:5e:26:c3:bb:1c:c9:73:3c:c4:47:40:93:d0:e8:b1:
         c3:70:c2:e7:08:38:cc:81:0d:91:2f:52:09:a2:89:e8:76:54:
         4d:8f:c3:14:3c:41:e5:86:89:2f:39:7a:a3:5d:cb:0b:ab:4b:
         e8:6c:db:7d:67:ae:f7:87:10:40:3a:1c:9d:5c:7d:71:88:43:
         8c:2a:7b:b8:69:ef:08:f3:b1:f0:67:5e:a5:68:e2:bf:c3:d5:
         36:59:99:e5:2f:7f:ae:49:6e:03:95:8b:f6:d7:f8:e5:93:a0:
         19:ec:fd:1b:b5:ab:3c:0d:84:0b:f4:12:f6:9c:08:0f:82:82:
         7b:3f:0d:23:e9:70:0e:96:b3:71:5f:0b:c8:05:82:19:72:99:
         06:19:fc:51:3c:12:55:17:e7:56:af:5b:cd:33:0d:57:f3:b5:
         44:8c:33:7a:81:60:c7:4f:f5:e2:b6:f2:0d:12:84:ed:cb:f5:
         f4:9a:be:27:b5:4c:c2:26:7c:f9:e3:e1:74:d1:fb:56:e2:b3:
         a2:07:e4:03:f2:b7:5c:c2:64:b1:37:1a:c2:b2:bf:81:65:f4:
         1b:73:25:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----