Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/dfe66a9f55e92611f788947da97243c112e6d92d.roa
File:                     dfe66a9f55e92611f788947da97243c112e6d92d.roa (raw, json)
Hash identifier:          /N4MfwdQ1LTJholkhNgDHHglDxVjAeJtKxY9f4KLXk8=
Subject key identifier:   A9:ED:C3:3E:31:30:68:B4:09:57:67:D4:E2:79:0C:3A:E3:82:F7:79
Certificate issuer:       /CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
Certificate serial:       0DD078
Authority key identifier: 86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/dfe66a9f55e92611f788947da97243c112e6d92d.roa
Signing time:             Mon 28 Jun 2021 17:45:36 +0000
ROA not before:           Mon 28 Jun 2021 03:00:00 +0000
ROA not after:            Wed 28 Jun 2023 03:00:00 +0000
asID:                     266668
IP address blocks:        45.228.190.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905336 (0xdd078)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
        Validity
            Not Before: Jun 28 03:00:00 2021 GMT
            Not After : Jun 28 03:00:00 2023 GMT
        Subject: CN=dfe66a9f55e92611f788947da97243c112e6d92d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:37:bc:02:f0:a5:1d:4c:e2:76:ad:3a:44:a1:
                    f7:54:b2:18:7a:c9:94:24:25:cf:06:6c:ea:d9:5f:
                    fe:06:08:0e:ed:8b:e1:15:69:43:fa:ad:68:7e:a5:
                    16:8a:fe:66:7e:d1:13:33:f9:dd:88:13:9d:ff:37:
                    ca:74:7a:25:a5:bb:e6:f7:02:f5:6b:17:d3:43:71:
                    39:6a:bc:3c:4f:c2:ef:a2:0e:7c:83:8f:be:a3:59:
                    6a:23:54:f2:dc:e5:48:3c:19:f9:8f:d7:26:bc:ae:
                    63:26:b2:7e:4e:ea:45:aa:e1:45:25:f8:a2:23:f0:
                    4e:9f:70:ea:1f:46:03:bd:b0:0e:be:fd:e1:64:cb:
                    de:db:b9:14:9c:15:db:4c:99:86:ed:7c:ad:b5:f7:
                    99:46:6a:e7:7b:05:a2:d4:07:2e:05:ba:b5:52:20:
                    8f:a8:79:a5:35:12:84:b8:11:c4:80:45:d2:a4:fc:
                    2a:b2:d6:fc:23:71:a7:63:24:98:c9:f5:be:42:50:
                    e0:8d:2a:c5:c7:01:c8:2a:55:ac:04:da:84:ca:df:
                    2f:69:bb:ec:a3:66:86:39:ac:da:c6:51:42:8d:fc:
                    6d:fa:c7:0a:b7:56:ea:a6:bd:38:39:de:47:c9:bf:
                    b7:5e:1f:77:7b:16:5e:4d:26:97:d8:b8:e0:02:ca:
                    71:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:ED:C3:3E:31:30:68:B4:09:57:67:D4:E2:79:0C:3A:E3:82:F7:79
            X509v3 Authority Key Identifier:
                keyid:86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/dfe66a9f55e92611f788947da97243c112e6d92d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:24:7a:97:b0:fa:20:ab:40:51:e4:73:59:9a:14:30:36:01:
         e2:81:50:e7:23:22:ed:c5:80:ac:69:7a:28:8d:7b:d3:0c:a6:
         c6:d7:86:5b:56:f0:53:54:db:81:bf:c6:ef:8c:c8:4c:e0:8f:
         69:c7:e9:a1:46:6f:1e:b7:6e:34:66:88:c1:36:e8:b5:06:bb:
         d2:26:c1:71:ca:b5:90:16:77:7d:14:c7:01:5e:2c:3c:ef:76:
         0f:0c:78:db:f6:d9:d9:a6:d0:16:29:ac:b2:1f:e2:f3:dd:cd:
         04:11:c2:19:42:f7:51:bd:b5:4a:b1:b4:1b:58:4e:a4:8f:84:
         34:5f:17:8e:a9:b5:9a:8c:7a:24:bc:7a:6c:b8:5a:bf:68:20:
         82:2e:d1:69:99:9b:9e:93:57:71:d1:e7:f8:29:ca:ba:72:c6:
         ea:8f:93:24:6a:d6:1f:f4:c7:31:7a:03:8e:7b:ad:ee:9d:17:
         fd:da:99:4b:74:a6:7b:85:45:5e:4c:3a:c0:95:21:09:3d:ce:
         26:67:1f:e2:ce:63:f1:d5:be:e3:89:ef:ed:a3:f4:e6:58:50:
         61:93:5d:a1:d5:39:56:e7:2a:e1:10:b8:13:4f:01:bb:6a:20:
         af:78:b2:39:87:0b:9d:21:83:ea:79:4f:18:84:84:8e:39:bb:
         07:dc:1f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----