Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c8c82d87-9e3f-45c5-83fa-ac60276a0918/dd19718122dfb41b2ba135e05be3930468a144bd.roa
File:                     dd19718122dfb41b2ba135e05be3930468a144bd.roa (raw, json)
Hash identifier:          pdHDg+bWQxI7VU4cBhe3SDNMJapnlC6b+AIDWg97mtQ=
Subject key identifier:   B2:79:E0:AA:28:2D:75:5E:0A:D5:70:01:06:C0:73:E5:06:8F:5C:3D
Certificate issuer:       /CN=32d4ee4c6cbb510dff8752615e5c10ead28fc25b
Certificate serial:       0CEE8B
Authority key identifier: 81:F7:78:67:24:19:97:75:7B:FC:0A:8F:1A:AE:54:D9:37:60:43:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32d4ee4c6cbb510dff8752615e5c10ead28fc25b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c8c82d87-9e3f-45c5-83fa-ac60276a0918/dd19718122dfb41b2ba135e05be3930468a144bd.roa
Signing time:             Wed 24 Mar 2021 14:30:02 +0000
ROA not before:           Wed 24 Mar 2021 14:30:02 +0000
ROA not after:            Tue 24 Mar 2026 14:30:02 +0000
asID:                     266753
IP address blocks:        45.232.96.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 847499 (0xcee8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32d4ee4c6cbb510dff8752615e5c10ead28fc25b
        Validity
            Not Before: Mar 24 14:30:02 2021 GMT
            Not After : Mar 24 14:30:02 2026 GMT
        Subject: CN=dd19718122dfb41b2ba135e05be3930468a144bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:76:fd:9d:77:08:4a:65:dd:0d:49:b1:88:7d:
                    87:5e:17:4d:4f:53:39:2e:2f:22:34:dc:89:bd:eb:
                    30:89:b3:17:3a:99:81:27:9c:3b:bb:f1:d1:bf:b2:
                    e2:ab:9c:c6:a6:cd:38:6c:42:e0:35:fc:80:f2:0c:
                    82:45:64:41:7b:fe:c0:07:66:dc:6c:0c:69:c2:5e:
                    2c:3d:18:2c:11:9d:f0:72:f8:cb:00:eb:89:76:b8:
                    dc:4a:45:8d:1e:44:17:57:61:a3:86:9a:4b:bf:bc:
                    44:f3:c4:24:1a:53:61:39:83:23:7c:48:a9:f3:3f:
                    58:9b:41:21:17:52:64:63:da:90:ca:e7:bd:53:97:
                    2e:1c:ed:67:04:ba:d4:95:1c:fe:20:13:f0:9a:73:
                    fa:35:a5:79:87:8b:64:ab:03:ee:09:5b:e5:63:38:
                    63:31:df:66:16:ec:db:18:a9:c0:67:a9:51:81:f7:
                    08:89:79:0a:48:c1:49:2b:13:71:d1:9f:ff:b9:e6:
                    f0:e0:27:e1:e1:88:6b:f4:bf:3a:50:be:13:8c:f4:
                    d4:1f:6d:97:68:25:63:60:97:4c:a9:0c:68:da:89:
                    d1:74:c1:bb:cb:ea:32:71:70:14:46:85:b1:86:28:
                    3b:3b:4b:ed:ea:1c:b9:f7:96:9b:bc:72:4b:32:c6:
                    93:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:79:E0:AA:28:2D:75:5E:0A:D5:70:01:06:C0:73:E5:06:8F:5C:3D
            X509v3 Authority Key Identifier:
                keyid:81:F7:78:67:24:19:97:75:7B:FC:0A:8F:1A:AE:54:D9:37:60:43:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32d4ee4c6cbb510dff8752615e5c10ead28fc25b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c8c82d87-9e3f-45c5-83fa-ac60276a0918/dd19718122dfb41b2ba135e05be3930468a144bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c8c82d87-9e3f-45c5-83fa-ac60276a0918/32d4ee4c6cbb510dff8752615e5c10ead28fc25b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:dc:d1:e3:9e:13:ca:50:cc:5b:80:d1:b8:4c:f3:6b:27:c6:
         0f:a8:db:94:74:c6:94:d4:4e:b8:cd:e6:f9:d1:56:37:83:0f:
         70:43:a6:48:34:68:ff:10:a4:36:0a:f0:9d:6a:4d:55:13:4e:
         53:11:85:5a:04:27:64:37:51:7b:3a:49:5e:de:67:89:35:b4:
         68:07:39:bf:fd:06:99:22:7d:ce:7a:cc:75:f8:57:c6:77:80:
         1d:d6:0e:7b:49:87:c3:8f:08:0c:a1:c1:78:dc:ed:58:7f:75:
         20:b6:20:3a:be:18:a8:5d:56:89:c8:64:8f:3c:cc:a7:01:37:
         78:b7:b0:f9:e6:c7:77:ff:30:b4:e7:40:cb:7a:28:74:d9:9e:
         1f:2b:51:eb:a7:c4:8d:2e:a5:64:05:fc:e3:cb:4a:6e:22:0b:
         a7:4a:b3:5c:f9:45:37:e4:f7:e8:63:09:34:28:aa:b7:61:54:
         38:01:2e:bf:3e:eb:27:99:06:f3:91:1e:c5:92:0f:0a:84:dd:
         42:f0:fa:6b:f1:41:3b:6b:75:22:52:d1:f2:13:a4:db:f9:c6:
         40:4c:9f:53:2a:0d:8a:e1:ea:46:c7:c6:8d:3f:dc:69:7c:74:
         58:4d:47:c4:d9:be:5c:0b:5f:b7:4d:35:84:db:98:1e:82:0f:
         56:f0:b3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----