Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/e45af1af70e67c7b54340dcc6071d722c4c3971d.roa
File:                     e45af1af70e67c7b54340dcc6071d722c4c3971d.roa (raw, json)
Hash identifier:          R/dSkPijA2bhmVXtowQtntQmqaXqe6J/36KqDstcmbo=
Subject key identifier:   1F:C7:A9:19:40:7B:C9:42:7B:68:DF:89:96:F2:25:D5:3D:83:61:1A
Certificate issuer:       /CN=a00f13820b977914dc96250807fd66f6707db9ec
Certificate serial:       17A802
Authority key identifier: 62:B0:C9:CA:56:AE:C9:53:8D:D3:AB:F8:FC:64:F6:DF:35:4E:6E:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a00f13820b977914dc96250807fd66f6707db9ec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/e45af1af70e67c7b54340dcc6071d722c4c3971d.roa
Signing time:             Fri 17 Jun 2022 21:58:28 +0000
ROA not before:           Fri 17 Jun 2022 03:00:00 +0000
ROA not after:            Mon 17 Jun 2024 03:00:00 +0000
asID:                     3549
IP address blocks:        45.230.168.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1550338 (0x17a802)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a00f13820b977914dc96250807fd66f6707db9ec
        Validity
            Not Before: Jun 17 03:00:00 2022 GMT
            Not After : Jun 17 03:00:00 2024 GMT
        Subject: CN=e45af1af70e67c7b54340dcc6071d722c4c3971d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dc:ea:20:c2:71:e7:a8:3f:63:5f:c4:c6:7b:
                    f3:f5:d6:74:b6:1a:6f:1f:61:7b:ff:20:78:5c:9b:
                    a7:5d:36:4e:45:65:19:c1:21:65:c0:fb:0a:47:92:
                    11:d6:bc:8d:93:b7:e3:f0:ed:9a:da:ee:4c:69:4f:
                    58:64:5c:b6:5a:92:a1:92:78:e8:b2:d7:b1:a7:5d:
                    84:b0:7e:c6:38:cc:33:bc:7d:68:74:c3:75:1c:82:
                    c1:11:68:b2:7b:2c:2b:68:44:55:7d:de:8d:d8:3c:
                    ce:27:0d:35:26:d3:7a:22:c3:ca:1b:44:ab:4f:81:
                    ee:dc:f3:8c:61:29:cb:55:69:59:3f:49:69:4d:ce:
                    3e:e7:ac:cf:10:02:63:24:46:44:1d:37:31:b6:bd:
                    c3:82:2d:5f:e9:22:78:c3:db:f3:a7:b6:98:06:cb:
                    68:19:55:6f:9c:53:ff:13:f7:0e:2f:3f:87:9f:76:
                    e6:8c:1f:ea:47:a2:4b:3e:39:74:7b:8b:6e:b0:9a:
                    90:79:46:ca:80:48:f4:52:cd:5a:6a:70:d2:54:76:
                    b8:6c:e7:cf:54:8d:46:33:20:04:1e:ad:8c:2f:30:
                    56:cf:60:c2:1e:7f:b2:78:3e:13:f2:88:73:b4:6b:
                    5b:1f:e4:31:cb:84:19:87:79:6c:f3:0c:5c:34:b2:
                    f9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C7:A9:19:40:7B:C9:42:7B:68:DF:89:96:F2:25:D5:3D:83:61:1A
            X509v3 Authority Key Identifier:
                keyid:62:B0:C9:CA:56:AE:C9:53:8D:D3:AB:F8:FC:64:F6:DF:35:4E:6E:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a00f13820b977914dc96250807fd66f6707db9ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/e45af1af70e67c7b54340dcc6071d722c4c3971d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/a00f13820b977914dc96250807fd66f6707db9ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:6d:3f:77:94:86:54:91:67:40:76:e8:55:9c:f7:1b:af:4d:
         1a:31:0b:a9:86:bf:cc:80:1e:4f:f8:e9:e5:9e:9a:39:78:53:
         1c:10:a6:2e:c0:d6:2d:ce:b1:1c:3e:5b:00:aa:44:5b:94:37:
         17:0b:1c:4f:43:d2:08:ef:ee:67:43:9a:1a:c8:1b:55:02:e9:
         1d:9c:c1:e8:cc:04:7d:20:ab:0a:71:77:19:2e:7f:6d:d6:52:
         ce:82:41:2a:33:21:1e:0b:84:79:9d:16:1f:d1:b2:6d:6d:68:
         ae:d3:4c:17:b8:52:24:48:dd:5e:1f:fd:b1:66:90:e4:3e:af:
         a8:3a:74:1c:99:f2:7d:26:f4:cc:98:16:2b:f9:82:79:65:ce:
         ac:a4:00:17:91:08:60:1b:64:a8:b2:95:ae:59:2b:6a:7b:b7:
         e7:13:e3:4d:9d:2f:4e:60:97:0e:cc:6a:f7:27:c8:0e:fd:12:
         f6:0e:41:5c:47:05:0f:d4:77:c7:c8:77:da:5f:e8:46:e7:e6:
         4c:84:89:04:90:97:52:f3:ef:d7:da:5b:c0:56:2b:7e:35:b7:
         8d:97:38:ff:dd:6b:56:86:ad:87:99:9c:88:12:13:da:ee:3d:
         d0:86:8b:ca:05:42:be:2e:d1:58:af:d6:47:54:a6:73:6f:e6:
         72:f1:21:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----