Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cb61467e-e2da-409b-954c-94e048924c6d/2eb72d1feb7a08588950f7380c6aa890bf99ca4a.roa
File:                     2eb72d1feb7a08588950f7380c6aa890bf99ca4a.roa (raw, json)
Hash identifier:          RYEtd2ELTXSzvvPhJ8iuzq5O3ZVwSxuGxIF11K9tL9A=
Subject key identifier:   56:53:17:54:4E:D4:B8:BF:2F:7D:94:0B:D7:9B:5F:9C:9B:EA:5E:AF
Certificate issuer:       /CN=dee6b996a76c14ae5f55dba4ca3c67bc234275ff
Certificate serial:       1C9CD4
Authority key identifier: 38:9B:FD:ED:3A:29:09:6C:95:AA:11:C8:7C:08:F8:35:C9:9D:A1:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dee6b996a76c14ae5f55dba4ca3c67bc234275ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cb61467e-e2da-409b-954c-94e048924c6d/2eb72d1feb7a08588950f7380c6aa890bf99ca4a.roa
Signing time:             Wed 21 Dec 2022 17:11:41 +0000
ROA not before:           Tue 20 Dec 2022 17:11:37 +0000
ROA not after:            Sat 21 Dec 2024 17:11:37 +0000
asID:                     3549
IP address blocks:        45.70.171.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1875156 (0x1c9cd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dee6b996a76c14ae5f55dba4ca3c67bc234275ff
        Validity
            Not Before: Dec 20 17:11:37 2022 GMT
            Not After : Dec 21 17:11:37 2024 GMT
        Subject: CN=2eb72d1feb7a08588950f7380c6aa890bf99ca4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:06:fe:b8:f5:e7:3e:65:0d:d6:bd:3b:95:73:
                    e8:32:9c:39:64:1d:04:f5:6d:cc:8b:bd:5a:41:bc:
                    4c:8c:a9:19:64:31:33:36:d8:45:23:18:67:e2:d7:
                    35:a8:4e:65:90:8d:f6:eb:24:c6:99:ce:c7:d6:cb:
                    39:7d:0d:d9:bf:85:1f:bc:54:2e:57:00:30:84:79:
                    5e:9c:52:2e:70:1c:10:a3:70:60:55:c0:ba:71:6a:
                    26:e9:3d:3d:32:dc:bb:82:ad:34:10:fb:85:38:91:
                    82:c3:3a:2e:54:39:ae:e9:b0:d2:42:64:3d:5d:4a:
                    f8:96:bb:c9:9e:b4:f5:18:41:84:47:a3:19:f8:d0:
                    9b:ae:8c:2e:c3:c1:3b:46:22:1e:03:64:19:49:ca:
                    13:08:92:ed:0a:0b:55:34:1a:8e:ec:ec:42:71:45:
                    08:ad:c5:14:8d:d4:83:a8:17:fe:fd:1a:d2:86:4a:
                    72:8b:3d:23:bc:ad:18:f2:e6:c1:80:be:d1:10:f9:
                    5c:4e:ce:4b:57:18:91:04:f0:c5:c9:b3:6f:df:4f:
                    01:48:1b:df:2a:05:a6:93:35:88:65:4e:1b:81:c8:
                    b1:56:b2:f9:02:1f:e1:41:af:26:c2:3a:95:f5:55:
                    7d:c3:fa:b7:85:b6:15:87:10:56:c5:49:89:14:57:
                    c8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:53:17:54:4E:D4:B8:BF:2F:7D:94:0B:D7:9B:5F:9C:9B:EA:5E:AF
            X509v3 Authority Key Identifier:
                keyid:38:9B:FD:ED:3A:29:09:6C:95:AA:11:C8:7C:08:F8:35:C9:9D:A1:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dee6b996a76c14ae5f55dba4ca3c67bc234275ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cb61467e-e2da-409b-954c-94e048924c6d/2eb72d1feb7a08588950f7380c6aa890bf99ca4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cb61467e-e2da-409b-954c-94e048924c6d/dee6b996a76c14ae5f55dba4ca3c67bc234275ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:c3:15:06:c9:d1:b9:70:38:72:1c:83:69:e3:9d:6a:f6:b5:
         57:eb:33:d1:bd:ea:97:68:86:52:3d:ab:1d:8e:49:18:75:64:
         b8:67:47:71:18:7f:f9:1f:aa:d1:6a:fc:1e:b7:c5:96:be:0f:
         9e:d1:15:76:28:8e:21:e1:f4:00:59:66:3e:9c:29:76:ba:5a:
         d4:a3:ce:ef:8e:bd:ca:03:e3:f9:c0:0a:35:2f:8f:aa:a1:9f:
         ab:33:95:f7:6a:d2:b3:9b:e8:6a:a1:db:21:46:0c:bd:f3:97:
         e0:0a:71:cf:4c:76:43:2c:fd:ef:2e:84:f7:04:5c:3a:66:6b:
         dc:e4:5c:05:4a:16:8e:0b:59:1c:30:59:1c:bb:26:37:01:06:
         05:eb:8b:52:51:90:c3:dd:dc:4e:d5:df:af:cf:7b:99:7b:a9:
         fa:2e:27:66:63:75:98:97:38:fc:75:2a:53:9c:07:6f:56:a7:
         84:44:a9:03:90:eb:16:5a:34:49:4b:4d:b8:8d:33:d5:7d:4f:
         bb:c9:9d:80:fe:93:18:06:db:d6:02:04:8a:c8:27:bc:50:65:
         51:bc:b5:5a:0d:98:e5:33:ac:c7:e9:da:d5:9a:3f:11:f5:a1:
         08:75:f4:c1:08:87:d9:66:f9:ce:ac:f8:ac:9c:fb:57:de:59:
         a4:b4:e0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----