Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d46ef708-78f7-487e-8fbb-ee30bde8e3d5/5a12879c45ec1287fe42083d6e7cf66fdb41ae0a.roa
File:                     5a12879c45ec1287fe42083d6e7cf66fdb41ae0a.roa (raw, json)
Hash identifier:          pnh7Xqvb6FB8Jpwf1zfZGH5Mn+GFFznsqBb6X6yXS8A=
Subject key identifier:   55:52:A8:87:00:76:9A:7C:CF:B5:70:24:4E:96:8E:B0:16:90:40:84
Certificate issuer:       /CN=8b30529e01283b8f6a2964516330aadb9c799016
Certificate serial:       0284
Authority key identifier: E2:F8:01:66:86:34:14:DD:25:6A:31:7B:C3:A1:39:13:36:FA:A2:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b30529e01283b8f6a2964516330aadb9c799016.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d46ef708-78f7-487e-8fbb-ee30bde8e3d5/5a12879c45ec1287fe42083d6e7cf66fdb41ae0a.roa
Signing time:             Thu 13 May 2021 12:42:32 +0000
ROA not before:           Thu 13 May 2021 03:00:00 +0000
ROA not after:            Sat 13 May 2023 03:00:00 +0000
asID:                     270000
IP address blocks:        177.10.188.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644 (0x284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b30529e01283b8f6a2964516330aadb9c799016
        Validity
            Not Before: May 13 03:00:00 2021 GMT
            Not After : May 13 03:00:00 2023 GMT
        Subject: CN=5a12879c45ec1287fe42083d6e7cf66fdb41ae0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:02:b2:2a:ab:7c:73:df:d4:e7:39:d1:2c:b4:
                    7b:c5:fe:03:4f:3f:c7:59:0f:31:db:19:2a:27:6a:
                    1c:18:c0:8f:b0:55:6a:a0:96:a2:8e:40:27:2a:c1:
                    e8:11:ac:63:e4:89:9b:b5:05:e2:4e:b3:65:d6:aa:
                    0a:a7:4c:03:b8:84:65:aa:cf:e8:39:d0:ec:2e:26:
                    03:44:ff:92:80:1d:a3:64:85:6a:52:87:ea:8d:31:
                    4c:17:90:af:7b:0b:a7:e5:cc:13:dc:00:4c:25:b6:
                    3e:c3:5e:43:f0:77:41:92:8f:f0:db:ea:42:7f:e2:
                    d0:da:b5:ce:5a:c2:50:d5:45:aa:01:ad:97:f9:d4:
                    6c:94:a3:c8:52:a2:db:c4:b5:53:0c:b4:54:84:29:
                    13:9a:cf:de:bf:34:44:d7:b8:4a:18:12:79:f6:59:
                    81:26:44:10:7c:2c:5e:56:b6:b7:15:ce:e7:67:d2:
                    bb:8e:ab:7e:0d:c6:0f:53:a2:20:15:3d:9d:0c:f7:
                    c3:00:73:bc:c5:98:8d:58:2a:ff:85:7f:3a:d9:1a:
                    13:13:83:b0:2d:b7:8d:59:23:7a:9d:8b:73:77:aa:
                    78:5d:04:19:b9:49:75:fa:39:17:53:53:47:3a:54:
                    65:45:21:9f:d1:ab:21:f1:0e:5e:b9:c4:d8:ac:80:
                    20:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:52:A8:87:00:76:9A:7C:CF:B5:70:24:4E:96:8E:B0:16:90:40:84
            X509v3 Authority Key Identifier:
                keyid:E2:F8:01:66:86:34:14:DD:25:6A:31:7B:C3:A1:39:13:36:FA:A2:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b30529e01283b8f6a2964516330aadb9c799016.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d46ef708-78f7-487e-8fbb-ee30bde8e3d5/5a12879c45ec1287fe42083d6e7cf66fdb41ae0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d46ef708-78f7-487e-8fbb-ee30bde8e3d5/8b30529e01283b8f6a2964516330aadb9c799016.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:44:e4:7e:ea:8b:ee:6b:f6:44:76:27:44:3f:6d:06:60:91:
         f9:19:a2:11:1b:8b:6b:95:f9:fc:19:b3:47:79:4b:9e:26:33:
         6d:da:9a:11:d3:8d:c2:31:20:ac:b0:f5:72:88:03:c1:38:29:
         c6:cf:fe:8d:a8:38:ea:d1:64:f5:b6:6a:aa:b1:b0:50:fa:d1:
         90:df:9e:e0:21:2d:60:8f:e8:9b:24:0d:78:42:78:23:fb:1b:
         b0:b9:4e:61:47:fb:a7:e4:5b:51:a6:30:e0:47:4e:e9:1d:40:
         f3:7b:c7:ce:b9:7d:5b:7c:10:5e:22:19:92:a7:de:b1:8c:fd:
         8d:92:d1:46:48:c3:4d:71:d9:97:7e:25:53:14:ce:7e:e8:bd:
         c3:bb:83:57:d4:a4:e8:8f:e3:bf:1d:04:c0:ff:5f:c3:90:ce:
         2a:31:bf:67:36:c2:9e:40:7d:0f:dd:3f:09:5b:7d:58:5c:8b:
         9f:c0:63:03:e2:de:56:bd:be:3c:5f:15:b8:ac:06:a1:e1:00:
         bb:64:79:c8:91:da:2f:f5:b9:e2:6f:79:b8:0d:fb:af:17:d8:
         e9:c1:8b:e0:d2:86:a8:89:32:d3:42:01:e8:21:5f:e4:05:dc:
         27:e7:8b:3b:95:c0:0c:ff:d4:8c:ea:40:12:bb:1c:cd:00:a1:
         d5:1a:79:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----