Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/5193a4217afebf27d71f96b85d5129293d14d403.roa
File:                     5193a4217afebf27d71f96b85d5129293d14d403.roa (raw, json)
Hash identifier:          YHDo6I0mEZFCnFqWOdMQEVgsmWq9uO+0R6S6fIR4Cug=
Subject key identifier:   88:BC:0D:D4:68:D2:9F:F7:A6:5B:0A:DE:BC:26:55:4C:6C:C0:37:64
Certificate issuer:       /CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
Certificate serial:       0B6526
Authority key identifier: 86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/5193a4217afebf27d71f96b85d5129293d14d403.roa
Signing time:             Wed 24 Mar 2021 22:50:38 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     266668
IP address blocks:        45.228.188.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 746790 (0xb6526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=5193a4217afebf27d71f96b85d5129293d14d403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:88:0b:8b:bf:d4:15:b6:3b:46:32:32:84:
                    ca:b6:a7:0c:16:11:1d:b6:2a:9a:b5:1b:3d:b7:16:
                    93:a9:05:d1:c6:7e:44:f3:5f:14:25:0e:11:99:82:
                    5e:d6:41:68:51:51:b3:b0:ef:48:e3:72:00:ae:7e:
                    54:ef:a2:3b:bf:06:59:4d:c3:a9:48:24:99:30:48:
                    65:79:11:7b:9c:11:1a:9a:3f:e4:f1:27:cf:86:a9:
                    a9:6d:cf:35:27:8e:50:83:25:b9:f6:22:a1:78:16:
                    73:02:d9:6a:81:e2:d6:b7:a4:a1:e3:10:31:5f:49:
                    99:f3:12:84:e7:f7:59:29:4c:0e:15:d0:05:d6:7d:
                    ca:6e:f8:70:dd:8b:f9:32:24:d7:e6:05:e3:2e:27:
                    b9:de:f6:cc:0c:c3:52:82:57:ed:8d:9a:fd:10:50:
                    9b:9d:00:63:60:9b:c3:06:b3:40:8e:2a:11:b0:65:
                    e8:45:b7:7b:df:92:ef:6a:c0:c4:b3:78:34:c1:83:
                    9a:63:b6:7b:4e:54:a0:5c:e2:8a:90:0b:2b:02:a2:
                    57:5c:30:5e:9b:02:56:32:da:94:43:d6:91:5d:ca:
                    b4:13:f1:26:40:c0:89:12:93:a0:25:dd:cc:28:75:
                    e6:44:a8:0a:42:54:01:ea:6e:f3:76:8d:f0:50:95:
                    30:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BC:0D:D4:68:D2:9F:F7:A6:5B:0A:DE:BC:26:55:4C:6C:C0:37:64
            X509v3 Authority Key Identifier:
                keyid:86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/5193a4217afebf27d71f96b85d5129293d14d403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:97:02:ee:9b:65:6d:c6:df:d3:25:c5:16:34:41:e5:df:9a:
         c5:b1:82:11:1e:1d:a0:e8:46:8f:63:36:a9:c7:99:1b:f4:2e:
         4b:9d:73:06:56:ab:91:7e:69:7b:b4:fd:72:8d:40:3d:7c:5b:
         b0:87:81:df:c0:68:4e:c3:37:2a:9b:c2:62:7f:95:49:ba:8d:
         be:54:67:3e:34:63:7b:48:63:fc:e4:83:d2:0e:27:92:59:5c:
         18:79:af:60:e7:eb:b2:76:51:e5:96:82:23:6c:03:cc:f3:2a:
         86:e0:e3:2f:bc:72:f1:27:c9:61:65:4e:62:33:05:92:fc:11:
         44:61:04:b1:8a:b6:6b:c0:10:7c:3b:98:0e:94:e5:48:d5:2a:
         80:ed:be:f2:8b:0d:d5:1f:75:8a:9f:2b:95:cb:24:a6:70:71:
         87:34:ee:cd:3f:8f:80:fa:0c:2b:53:fb:f2:05:51:e6:b7:63:
         2b:b9:db:11:a8:3d:83:4c:0a:a7:10:be:da:e4:a1:b4:db:46:
         e0:65:02:88:98:05:46:91:4f:95:62:e6:18:f5:32:4a:09:11:
         36:50:48:ae:59:64:1d:4d:d1:a6:37:13:fe:c1:0b:d1:0b:86:
         5b:41:44:6b:17:a9:8d:22:12:04:1e:af:60:97:30:b0:6f:af:
         28:d8:3c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----