Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c2083efe-e569-438a-8f0c-bf793cedcd3e/3ebf323bdaafb4991dd068516691fafdeb34dd61.roa
File:                     3ebf323bdaafb4991dd068516691fafdeb34dd61.roa (raw, json)
Hash identifier:          hw9QWIax30nrOJwN0CARpcADZciU343FBhGjFB7SyHU=
Subject key identifier:   FE:0B:2E:B1:65:D0:BA:2A:4E:81:FF:A2:E2:CD:34:52:38:84:0C:39
Certificate issuer:       /CN=d8ec2e23c44f24767001626bdcf66010d00d9db8
Certificate serial:       0EFF19
Authority key identifier: 64:7D:FE:07:32:9D:CD:B9:0B:5C:BA:D5:3C:0A:35:5D:A6:9C:44:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8ec2e23c44f24767001626bdcf66010d00d9db8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c2083efe-e569-438a-8f0c-bf793cedcd3e/3ebf323bdaafb4991dd068516691fafdeb34dd61.roa
Signing time:             Tue 24 May 2022 10:41:54 +0000
ROA not before:           Thu 05 May 2022 03:00:00 +0000
ROA not after:            Sun 05 May 2024 03:00:00 +0000
asID:                     265580
IP address blocks:        45.174.252.0/22 maxlen: 24
                          2806:335::/32 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 982809 (0xeff19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8ec2e23c44f24767001626bdcf66010d00d9db8
        Validity
            Not Before: May  5 03:00:00 2022 GMT
            Not After : May  5 03:00:00 2024 GMT
        Subject: CN=3ebf323bdaafb4991dd068516691fafdeb34dd61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c1:a2:73:e4:5b:be:a7:2e:58:76:ef:0d:49:
                    25:25:c1:23:ae:82:2e:9f:2e:30:cf:74:28:ee:b5:
                    7f:4b:dd:4f:3b:1b:93:01:64:10:6f:d6:7c:bc:c3:
                    3a:3e:68:ee:5b:f6:a6:f5:3d:48:d6:0a:bd:5f:c8:
                    80:40:f2:fb:5a:59:3c:9e:82:43:34:34:bb:a9:5f:
                    05:02:f2:9c:2b:01:1e:96:a2:88:9b:15:a7:57:6e:
                    58:69:3e:f5:c8:4f:35:9d:21:a0:d1:37:03:17:ae:
                    9d:9c:44:e0:72:2f:9a:0f:6e:28:7a:df:d4:50:76:
                    03:a1:bc:5b:5f:12:e6:17:c3:ae:6b:ce:f9:3b:e0:
                    c5:47:0f:64:b9:a7:b5:e8:59:6c:c9:e3:2f:7d:4c:
                    06:96:59:34:c4:5b:a0:aa:b3:6c:0b:00:a4:e9:20:
                    b7:4a:57:ae:14:01:c5:9e:1c:1e:ab:5f:9d:77:96:
                    3a:97:25:bd:56:93:23:2e:d9:93:da:11:6d:83:bf:
                    60:82:f5:5b:e5:71:27:f5:78:94:b8:1b:3e:3b:51:
                    ea:44:3d:bf:df:13:c0:52:e8:7e:19:9f:58:7e:be:
                    dc:79:e0:db:1c:be:7b:e9:4e:6a:71:de:c5:cb:70:
                    85:f2:d9:08:25:0b:8c:61:5c:5b:c1:56:65:a5:84:
                    54:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0B:2E:B1:65:D0:BA:2A:4E:81:FF:A2:E2:CD:34:52:38:84:0C:39
            X509v3 Authority Key Identifier:
                keyid:64:7D:FE:07:32:9D:CD:B9:0B:5C:BA:D5:3C:0A:35:5D:A6:9C:44:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8ec2e23c44f24767001626bdcf66010d00d9db8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c2083efe-e569-438a-8f0c-bf793cedcd3e/3ebf323bdaafb4991dd068516691fafdeb34dd61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c2083efe-e569-438a-8f0c-bf793cedcd3e/d8ec2e23c44f24767001626bdcf66010d00d9db8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.252.0/22
                IPv6:
                  2806:335::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:ce:d9:8d:44:50:30:07:83:7f:a0:36:69:69:b1:bd:80:e4:
         71:d1:39:96:b6:49:8d:b7:f0:f5:6f:2c:0d:18:55:29:e2:4c:
         d2:45:6e:36:c2:83:31:60:b7:1e:50:98:9a:a9:49:16:92:0f:
         8c:0c:03:76:4e:2c:17:f4:01:6b:da:fc:e2:46:49:e6:93:44:
         d2:75:14:79:ae:90:1f:6a:c2:59:e2:47:75:c3:56:dd:f6:aa:
         54:bc:b1:35:f4:f1:9e:8b:2e:13:51:f0:e1:b5:d2:6c:fb:65:
         48:13:71:a6:f6:e1:79:aa:f5:19:90:b3:e9:94:35:a4:e7:1f:
         dc:dc:55:9b:63:3b:93:a6:6f:b1:23:d6:63:26:53:82:fd:4b:
         8f:ef:61:65:7e:2a:47:84:55:66:b6:f6:5b:44:43:80:1c:ad:
         5b:9d:d0:17:ce:a1:85:2f:02:3f:e4:ef:17:dc:e1:ec:ee:20:
         cb:c5:ea:c1:b6:4e:23:21:75:2f:87:f8:aa:65:45:56:e2:3e:
         e9:95:06:59:85:e8:ba:41:ea:13:41:02:81:e9:06:77:41:d0:
         48:be:47:29:2e:38:04:d5:64:88:ac:1b:02:b4:d0:7a:17:8d:
         a0:99:af:73:20:bb:43:0b:ed:2f:18:c2:6c:3b:57:57:7d:6a:
         c1:24:b0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----