Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/f58ef81aaebf2a18cbea5c7f54bba7d0c79a43e2.roa
File:                     f58ef81aaebf2a18cbea5c7f54bba7d0c79a43e2.roa (raw, json)
Hash identifier:          GRUVUA9u/axflOgudn+pe3oJCenGBxOEqnaaNpNoA8k=
Subject key identifier:   2D:64:4C:7D:5D:E0:38:AD:EF:B0:5A:0C:F7:C1:2D:56:08:04:80:A4
Certificate issuer:       /CN=9dd6960f203691336ba50cdef7bcec2cfb628603
Certificate serial:       0D46ED
Authority key identifier: 71:D6:75:E9:58:4C:AA:53:28:75:3D:A0:B0:66:6C:89:50:96:06:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dd6960f203691336ba50cdef7bcec2cfb628603.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/f58ef81aaebf2a18cbea5c7f54bba7d0c79a43e2.roa
Signing time:             Wed 24 Mar 2021 14:36:21 +0000
ROA not before:           Wed 24 Mar 2021 14:36:20 +0000
ROA not after:            Tue 24 Mar 2026 14:36:20 +0000
asID:                     262186
IP address blocks:        45.65.136.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870125 (0xd46ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dd6960f203691336ba50cdef7bcec2cfb628603
        Validity
            Not Before: Mar 24 14:36:20 2021 GMT
            Not After : Mar 24 14:36:20 2026 GMT
        Subject: CN=f58ef81aaebf2a18cbea5c7f54bba7d0c79a43e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7b:0d:6f:ac:8d:88:25:3d:31:b4:2e:94:f7:
                    f7:77:4c:0c:58:0d:4f:9b:95:44:1d:13:f0:ba:79:
                    ac:6d:87:f5:72:f1:bd:85:9e:6a:61:a0:6a:cf:4f:
                    70:88:f7:a5:7c:20:29:51:a4:1a:f0:b0:9e:cd:c5:
                    8b:a5:c9:5a:6a:14:a3:e2:35:cc:eb:85:09:62:64:
                    88:e7:46:f0:e6:9f:af:ee:05:62:58:fd:29:60:79:
                    92:fd:f1:49:15:b6:7f:f8:19:8a:cf:4f:bb:e3:a6:
                    93:fe:d4:ab:92:95:8d:f7:da:46:0b:cd:8d:5c:a3:
                    4d:01:2e:95:27:46:21:cd:c0:0c:54:5f:70:04:8d:
                    09:33:aa:e6:0c:3e:48:17:53:9f:95:73:e8:07:33:
                    d4:c0:7d:44:54:95:a4:7b:48:6a:0d:8b:87:a8:c1:
                    55:56:36:09:43:3a:ae:25:44:ce:86:73:b8:cb:fd:
                    4d:54:80:57:f7:ad:d3:e4:c4:6d:1c:3a:9b:89:55:
                    af:06:9d:3c:54:d6:ed:08:e6:e3:65:50:68:76:b5:
                    a5:be:ad:1c:b3:88:f6:cf:0b:75:88:35:70:4f:cf:
                    5f:da:f6:53:00:36:18:55:57:62:91:13:44:4e:bd:
                    0c:eb:6e:5d:c5:e2:08:32:12:45:3d:a2:6a:93:31:
                    0a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:64:4C:7D:5D:E0:38:AD:EF:B0:5A:0C:F7:C1:2D:56:08:04:80:A4
            X509v3 Authority Key Identifier:
                keyid:71:D6:75:E9:58:4C:AA:53:28:75:3D:A0:B0:66:6C:89:50:96:06:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dd6960f203691336ba50cdef7bcec2cfb628603.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/f58ef81aaebf2a18cbea5c7f54bba7d0c79a43e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/9dd6960f203691336ba50cdef7bcec2cfb628603.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:26:35:07:a6:fe:41:f7:d6:6e:d0:c9:52:a3:99:2b:8f:8c:
         3c:f2:bc:09:74:ec:4e:1b:43:20:8b:da:9d:9a:7a:cf:b3:a4:
         d2:bb:06:5e:1e:bc:b8:c3:a1:a3:b7:be:bb:29:d0:18:00:a4:
         c1:f5:05:94:db:9d:b5:1d:d6:9b:07:ef:1e:de:34:27:9c:77:
         ae:ad:bc:25:af:20:78:9c:fd:1b:a7:f3:7e:9d:a0:d7:ae:65:
         5e:88:b8:a1:17:20:99:67:43:86:b7:5d:f4:5a:bb:36:7f:9a:
         41:f7:23:64:3d:64:87:32:fb:fa:29:18:7e:84:17:db:11:7d:
         70:9f:c9:3e:31:55:d0:69:05:48:16:0f:59:78:c3:6a:7e:c0:
         b3:e8:ff:17:bb:83:c1:a5:63:5f:7c:d0:43:1d:d6:30:3d:5c:
         16:6f:70:7a:3c:bc:72:46:77:61:88:21:2f:81:ec:ac:92:3b:
         e4:a8:82:d8:8d:19:30:1e:5c:8a:c8:ac:54:f5:0e:96:2a:51:
         88:ff:68:b2:54:be:be:99:f1:55:71:51:14:27:1a:a2:45:3a:
         62:da:30:a7:53:ff:6b:21:41:80:3e:58:6a:55:42:63:8f:b0:
         3b:aa:6a:ed:98:33:2f:81:9d:23:ee:54:80:15:2c:0d:98:04:
         2a:26:5f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----