Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/fbb9d2e024ed826cfd40945331e241054d7e2239.roa
File:                     fbb9d2e024ed826cfd40945331e241054d7e2239.roa (raw, json)
Hash identifier:          uMFUKCgcR7r++s3elS5k973OZOR9hsqW/JMxRbktfNA=
Subject key identifier:   95:D0:97:97:8D:40:9F:A5:43:BD:0E:DC:92:37:33:36:80:C5:06:F6
Certificate issuer:       /CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
Certificate serial:       0D9117
Authority key identifier: E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/fbb9d2e024ed826cfd40945331e241054d7e2239.roa
Signing time:             Wed 24 Mar 2021 14:35:56 +0000
ROA not before:           Wed 24 Mar 2021 14:35:55 +0000
ROA not after:            Tue 24 Mar 2026 14:35:55 +0000
asID:                     265855
IP address blocks:        45.225.224.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889111 (0xd9117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
        Validity
            Not Before: Mar 24 14:35:55 2021 GMT
            Not After : Mar 24 14:35:55 2026 GMT
        Subject: CN=fbb9d2e024ed826cfd40945331e241054d7e2239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:34:75:4d:d7:0b:89:fc:0a:47:0e:e1:55:34:
                    62:d5:ed:0c:17:4b:46:1e:24:b9:1a:5f:c2:0b:7c:
                    23:f0:d9:25:48:3d:5a:82:05:30:c7:ab:0c:fc:a1:
                    83:ea:7e:83:d3:83:47:8e:26:f6:c1:86:54:6e:14:
                    ff:0e:cf:bc:f5:a3:8f:a4:09:42:92:a3:36:de:70:
                    fa:3d:b1:a4:90:9c:02:e2:4b:98:94:de:00:cf:ad:
                    5c:47:f7:11:64:e0:38:60:05:70:c7:34:d7:a9:ac:
                    9c:34:68:65:88:79:20:73:74:ff:55:46:9c:70:6a:
                    04:89:44:79:70:4d:a7:f1:dc:5e:10:9f:79:21:93:
                    d3:ab:35:6b:41:b1:40:61:3d:49:38:b9:fa:5b:bc:
                    df:70:34:c2:12:e2:de:f5:c0:d3:6f:79:49:f2:4c:
                    83:9a:a0:f3:44:9f:1c:b2:1f:a1:9f:0c:f9:1e:97:
                    dd:a3:0e:53:16:33:3f:c0:9c:20:b8:d5:1b:5b:ae:
                    e1:1e:29:10:6a:f7:57:5e:a4:c8:ab:a1:22:cb:9d:
                    c9:23:93:fe:18:11:b4:e1:36:46:af:44:42:13:7d:
                    ef:ab:d9:f4:0f:30:33:ba:1f:6c:89:e1:d7:8e:58:
                    d3:37:39:c5:90:33:ac:ae:4a:01:52:ae:57:46:8a:
                    99:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D0:97:97:8D:40:9F:A5:43:BD:0E:DC:92:37:33:36:80:C5:06:F6
            X509v3 Authority Key Identifier:
                keyid:E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/fbb9d2e024ed826cfd40945331e241054d7e2239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:f7:18:e9:74:d5:96:04:fa:30:81:16:a8:fa:51:c3:ef:2e:
         15:b5:f9:0e:7e:2e:d1:84:b0:1e:25:87:fe:72:9d:1c:89:2b:
         32:64:c5:20:2c:27:95:2d:57:f7:9a:1a:ed:84:cf:3f:c4:78:
         14:ea:fd:76:40:45:55:18:0e:60:0b:5b:0b:aa:00:08:49:99:
         53:9c:a5:ac:f3:8d:b7:49:bc:ce:15:60:68:3d:03:11:51:d3:
         47:9b:33:d2:df:59:f1:0b:03:1a:e7:a7:8a:17:dc:4d:c2:0e:
         17:85:7e:a9:8d:4d:1a:63:15:b6:3d:bc:dc:f8:ed:ec:a5:5a:
         f7:cb:af:88:46:23:37:85:03:a7:89:19:4b:eb:7f:64:20:bd:
         05:6b:27:ef:9a:68:d1:9a:eb:9c:d1:cb:fd:2e:3e:85:d5:0a:
         68:09:81:ee:f2:45:eb:20:27:e0:a9:f3:67:47:af:a1:97:8d:
         d1:1a:1b:f6:20:66:0b:c2:98:e9:ea:6e:5f:4a:db:69:3c:86:
         20:bf:e3:cc:10:1c:01:b7:25:a4:15:de:a5:1f:ea:84:e7:9f:
         0a:7a:20:29:7f:49:88:eb:91:9c:62:70:93:5d:75:75:aa:74:
         2a:47:e8:3b:bb:4f:7c:b5:23:7a:53:10:34:06:40:70:7b:43:
         ba:e4:13:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----