Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bfb53b51-2771-4955-bce8-15fa02a33048/f8c329dbd10e104ad9954586c77b8994e77810d1.roa
File:                     f8c329dbd10e104ad9954586c77b8994e77810d1.roa (raw, json)
Hash identifier:          nSsrrBg6JOKd7/Vq7vzjI95vBE/Kpy8K4+/ShZXpzKE=
Subject key identifier:   85:EE:7B:4C:B8:29:3D:91:36:7E:8A:B8:0C:ED:F3:87:95:98:78:7C
Certificate issuer:       /CN=56e566f79450b7c73ae61f31355b7b7075b9d2b3
Certificate serial:       01C2
Authority key identifier: 5F:C4:CC:1F:DD:C7:70:1B:1B:32:96:60:71:28:86:F8:7B:F9:CB:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56e566f79450b7c73ae61f31355b7b7075b9d2b3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bfb53b51-2771-4955-bce8-15fa02a33048/f8c329dbd10e104ad9954586c77b8994e77810d1.roa
Signing time:             Thu 06 Jan 2022 17:43:55 +0000
ROA not before:           Thu 06 Jan 2022 03:00:00 +0000
ROA not after:            Sat 06 Jan 2024 03:00:00 +0000
asID:                     269802
IP address blocks:        45.186.128.0/22 maxlen: 24
                          2803:2b60::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450 (0x1c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e566f79450b7c73ae61f31355b7b7075b9d2b3
        Validity
            Not Before: Jan  6 03:00:00 2022 GMT
            Not After : Jan  6 03:00:00 2024 GMT
        Subject: CN=f8c329dbd10e104ad9954586c77b8994e77810d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:59:ce:d2:d1:46:c3:a4:0d:bb:b3:ea:84:6a:
                    29:fe:dd:bc:d3:69:d5:b0:f6:dc:91:26:03:9a:fe:
                    c2:e2:d6:69:72:06:af:77:84:2b:e4:dc:de:cf:dd:
                    14:80:57:5e:c7:c3:84:ac:ea:2a:4d:d5:83:9a:01:
                    d7:34:00:0e:ce:b5:a8:ac:4d:0f:d8:01:9b:7b:88:
                    8e:b2:45:b4:d9:b4:7f:85:2b:0a:22:af:7a:aa:57:
                    05:da:ca:07:a7:5a:21:f0:6a:f0:e6:41:1b:d5:3e:
                    dd:9b:9d:99:eb:61:e3:e3:52:d3:c6:3a:7a:f8:64:
                    1a:f5:26:f7:98:63:a0:65:90:49:a0:f6:f0:a9:6d:
                    85:cd:64:bd:39:93:e6:08:32:ba:61:33:82:c2:6d:
                    7d:2f:52:cc:25:94:1c:43:19:cd:82:2c:ae:f1:84:
                    a1:1a:5e:48:31:82:30:2e:9f:d9:f2:ea:2e:9c:7e:
                    58:d4:21:8e:cd:e5:bd:2d:fb:44:30:66:72:e9:1f:
                    54:bf:f4:62:64:53:0a:0a:2e:39:bf:a8:da:2e:45:
                    0b:12:f1:c9:f2:96:a6:4a:4b:72:1c:2d:52:2f:74:
                    e6:01:54:11:b3:ad:ae:1f:45:80:b1:21:2e:18:19:
                    85:08:02:f7:02:06:e1:c7:9a:00:00:40:80:ca:bf:
                    71:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:EE:7B:4C:B8:29:3D:91:36:7E:8A:B8:0C:ED:F3:87:95:98:78:7C
            X509v3 Authority Key Identifier:
                keyid:5F:C4:CC:1F:DD:C7:70:1B:1B:32:96:60:71:28:86:F8:7B:F9:CB:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56e566f79450b7c73ae61f31355b7b7075b9d2b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bfb53b51-2771-4955-bce8-15fa02a33048/f8c329dbd10e104ad9954586c77b8994e77810d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bfb53b51-2771-4955-bce8-15fa02a33048/56e566f79450b7c73ae61f31355b7b7075b9d2b3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.128.0/22
                IPv6:
                  2803:2b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:1c:3f:84:5e:1e:6d:11:49:44:2a:51:d5:b3:77:5c:55:88:
         c8:d0:49:0d:25:05:31:17:c9:a4:45:eb:06:42:30:2c:96:01:
         62:be:cc:24:29:eb:56:13:62:72:10:f3:7b:64:a5:1b:0f:ff:
         ea:47:78:95:dd:c7:8e:32:3e:6a:98:dd:da:f7:11:f5:76:19:
         48:86:ef:50:84:09:ea:93:67:9e:cc:f6:cc:2b:7b:4d:1a:eb:
         a3:db:7c:17:86:df:e1:67:19:d7:65:b2:83:6d:0f:2d:67:eb:
         59:0c:fa:25:af:53:af:77:8d:9a:80:f2:44:7a:74:ac:fd:49:
         bc:84:68:0f:e0:c2:ae:96:a9:0f:0d:e8:6a:77:fa:7d:3a:5b:
         b9:d5:ee:a2:d2:81:ef:b4:c9:f0:59:55:54:a8:21:0e:90:57:
         b0:5d:0e:db:a2:fd:fe:a7:f1:6c:c1:fd:a3:09:1f:fc:ba:67:
         3b:24:3e:a6:6e:df:76:00:6d:6b:e6:b2:30:23:b7:07:6e:7c:
         79:da:8e:09:7e:f6:6e:b4:11:25:ec:2f:5b:35:2c:98:10:f5:
         fd:b7:80:e1:eb:88:c0:78:df:cf:32:70:50:89:37:65:79:27:
         70:69:01:a1:ca:5c:cc:8e:15:71:1a:5a:36:4b:1b:5e:2d:fe:
         3d:2a:42:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----