Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/4a4f79a26b8fdb9bc1a261f7a7d199423a6d6407.roa
File:                     4a4f79a26b8fdb9bc1a261f7a7d199423a6d6407.roa (raw, json)
Hash identifier:          g1f7wxsCfjmPKS+Ij2QMvVFe78fbK7KfsQ40clp2N6I=
Subject key identifier:   18:28:EB:A7:A2:C9:0F:DE:B1:C2:A2:60:EF:37:E2:A0:66:EB:42:D9
Certificate issuer:       /CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
Certificate serial:       0DA276
Authority key identifier: E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/4a4f79a26b8fdb9bc1a261f7a7d199423a6d6407.roa
Signing time:             Wed 24 Mar 2021 14:35:59 +0000
ROA not before:           Wed 24 Mar 2021 14:35:55 +0000
ROA not after:            Tue 24 Mar 2026 14:35:55 +0000
asID:                     265855
IP address blocks:        45.225.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 893558 (0xda276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
        Validity
            Not Before: Mar 24 14:35:55 2021 GMT
            Not After : Mar 24 14:35:55 2026 GMT
        Subject: CN=4a4f79a26b8fdb9bc1a261f7a7d199423a6d6407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:76:85:e8:4b:56:14:60:c3:e2:ee:9b:f3:7f:
                    e6:c5:78:18:46:64:cc:da:37:53:55:58:09:8f:50:
                    0e:42:17:30:1a:f7:62:1e:c4:64:c0:f6:10:a8:6d:
                    a0:66:c7:22:af:49:96:50:50:b7:32:3f:d0:ff:d4:
                    81:14:3a:39:a9:9a:be:2a:41:20:48:ff:7c:50:5c:
                    91:24:fc:ee:5d:bc:5a:9e:b9:49:83:e6:1e:59:a7:
                    df:87:16:04:69:e7:75:d6:bf:65:d4:69:08:90:2c:
                    3f:51:13:1c:ea:7b:7c:3d:c1:cf:95:29:ba:53:af:
                    2f:35:f8:55:66:06:ba:6d:f8:ac:b9:43:29:1e:72:
                    a3:41:70:ac:fb:e7:e7:74:c8:77:52:8a:fc:7e:a1:
                    ab:0a:ac:41:51:6c:fb:aa:83:fc:81:37:a2:1b:72:
                    69:66:fe:39:8a:79:3f:f5:be:7f:28:fa:ff:3d:94:
                    80:3e:a1:89:8e:b5:d9:36:60:8d:a6:97:9a:09:b3:
                    1a:f8:34:cc:24:ff:40:f0:73:1f:b3:63:c1:14:4b:
                    61:61:89:ca:9c:23:8d:4d:78:50:2a:a2:0b:b6:dc:
                    b7:2a:9b:5f:6e:58:47:d7:b4:c4:fc:1e:66:05:cb:
                    30:65:00:ff:9f:dd:fb:b8:0d:3d:60:0c:59:83:58:
                    bb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:28:EB:A7:A2:C9:0F:DE:B1:C2:A2:60:EF:37:E2:A0:66:EB:42:D9
            X509v3 Authority Key Identifier:
                keyid:E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/4a4f79a26b8fdb9bc1a261f7a7d199423a6d6407.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:1e:2a:14:cc:db:7a:9c:19:d7:e4:ec:a7:8f:21:07:d1:6a:
         9f:00:3f:0d:7a:4a:9a:45:43:fb:28:d4:ef:dd:c5:c3:c0:70:
         df:b4:1d:4f:d0:44:03:14:ab:1e:6b:ea:87:d1:e9:83:f8:7c:
         b6:e5:71:cc:0f:ea:ed:05:70:62:a0:9e:b9:fb:bd:c2:bd:8d:
         09:bb:2e:f8:f7:00:f8:2a:c0:51:9b:05:26:64:ce:49:15:6a:
         42:45:b9:11:d0:a3:9f:38:f9:53:8f:46:58:91:d9:dd:11:b1:
         06:1e:1e:fd:67:63:5b:e8:e5:8a:f9:01:30:4a:bf:33:58:dd:
         47:64:91:34:d8:c1:8c:68:cd:e7:09:24:ec:3d:e1:5b:10:1b:
         f7:39:be:f7:c7:cd:3f:a2:b3:76:42:7e:fb:25:f5:94:f2:1c:
         ec:a4:1a:01:ba:7b:9c:43:05:da:e3:d0:17:07:28:f3:72:71:
         ab:a6:09:47:bc:0a:47:79:a8:00:69:63:9c:7f:72:82:06:76:
         48:ab:98:18:95:bf:67:6d:ec:92:67:b8:4c:6d:72:5d:a4:65:
         35:66:bb:34:62:be:e8:6b:1e:f9:bf:4c:cf:58:b5:4b:e5:2d:
         64:0e:e6:94:3a:4c:69:b4:ae:d1:c0:af:6a:03:02:2d:14:46:
         5e:55:39:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----