Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d53a6a92-fb74-4e2d-a041-ae98bbcf9033/72759348e7f13efce7341d1e07417957e073e126.roa
File:                     72759348e7f13efce7341d1e07417957e073e126.roa (raw, json)
Hash identifier:          +dL+btdDVK6QLz8IuiyibzCE2DYVNCxDCPkoaJWsQwM=
Subject key identifier:   CD:1D:52:B5:6F:10:8E:E9:F6:83:B8:17:B1:A0:12:C3:36:22:B0:48
Certificate issuer:       /CN=ddadb9d544e015937addf6f7bacfb49314bd6944
Certificate serial:       09997A
Authority key identifier: DB:63:79:4E:47:9E:22:56:88:1F:69:19:6B:73:88:AB:BB:F7:31:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ddadb9d544e015937addf6f7bacfb49314bd6944.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d53a6a92-fb74-4e2d-a041-ae98bbcf9033/72759348e7f13efce7341d1e07417957e073e126.roa
Signing time:             Wed 24 Mar 2021 14:43:06 +0000
ROA not before:           Wed 24 Mar 2021 14:43:06 +0000
ROA not after:            Tue 24 Mar 2026 14:43:06 +0000
asID:                     265530
IP address blocks:        45.5.52.0/22 maxlen: 24
                          2806:28e::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629114 (0x9997a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddadb9d544e015937addf6f7bacfb49314bd6944
        Validity
            Not Before: Mar 24 14:43:06 2021 GMT
            Not After : Mar 24 14:43:06 2026 GMT
        Subject: CN=72759348e7f13efce7341d1e07417957e073e126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:67:b3:9f:89:93:b7:fb:b1:2c:2d:38:21:a9:
                    51:5a:d5:79:19:01:16:64:0b:b9:86:82:dd:e1:97:
                    25:3d:5b:31:89:2c:7c:a4:74:bf:c1:e0:dc:e8:e5:
                    af:37:2c:ef:45:be:a9:ea:63:af:82:e7:7a:45:49:
                    36:44:7b:53:5f:66:7a:d1:09:7b:0e:07:de:63:33:
                    18:54:15:71:66:4e:ce:91:b9:bc:2a:d4:47:43:16:
                    69:5a:22:0b:3c:49:ac:c9:f4:f0:a4:c1:ad:32:e0:
                    3f:9d:80:29:7d:9f:1e:04:3d:80:85:25:c4:cc:84:
                    67:c0:da:ac:ff:26:92:08:50:d0:ed:1c:68:76:fc:
                    38:9a:5f:4c:92:0a:e0:cc:bd:31:f6:b0:24:b3:e7:
                    5a:59:89:99:ee:7f:7e:38:d5:96:a4:60:72:a0:0a:
                    68:06:12:34:34:da:f5:4b:42:fa:bc:1f:3c:ce:ca:
                    0d:79:13:2d:a9:85:52:4c:83:41:18:df:36:f1:83:
                    e6:76:6a:b1:c2:2c:7b:94:ae:b3:35:ee:2b:c0:23:
                    1c:db:7d:d2:e5:1c:be:3f:af:17:5e:f2:7b:00:b1:
                    a0:d0:f2:8d:a8:04:fc:cc:16:d0:70:65:d9:54:7c:
                    91:0e:7b:73:e3:ec:8a:fb:f2:97:c0:45:90:26:00:
                    1a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1D:52:B5:6F:10:8E:E9:F6:83:B8:17:B1:A0:12:C3:36:22:B0:48
            X509v3 Authority Key Identifier:
                keyid:DB:63:79:4E:47:9E:22:56:88:1F:69:19:6B:73:88:AB:BB:F7:31:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ddadb9d544e015937addf6f7bacfb49314bd6944.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d53a6a92-fb74-4e2d-a041-ae98bbcf9033/72759348e7f13efce7341d1e07417957e073e126.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d53a6a92-fb74-4e2d-a041-ae98bbcf9033/ddadb9d544e015937addf6f7bacfb49314bd6944.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.52.0/22
                IPv6:
                  2806:28e::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:b5:5f:2b:50:3b:10:8d:f2:2f:de:39:73:77:6f:c3:e3:ef:
         30:92:fd:dd:34:7f:f8:4c:e4:a2:94:28:37:fd:33:6e:e9:24:
         0a:f3:0c:a4:df:5f:80:23:35:74:69:e4:67:96:e2:80:25:40:
         53:1b:5f:ce:0d:17:be:3f:1a:3b:43:7d:c4:23:0d:e4:9e:d2:
         c2:d6:75:a1:7c:2a:10:50:40:a9:44:43:31:53:f9:99:25:cd:
         96:9a:a5:34:4f:ee:78:07:a4:07:ea:a0:05:69:ec:f4:5c:2b:
         9b:9a:aa:07:1e:a1:69:88:cd:46:50:ec:7e:69:e5:55:89:12:
         ef:34:0e:90:f5:d4:3d:38:96:20:2a:3f:40:1b:07:b9:cd:d3:
         68:b6:b7:e8:c1:03:cf:f0:a4:46:ea:87:e5:16:08:62:66:ca:
         06:10:19:b2:50:dd:32:47:f1:39:d5:9a:a3:4c:e3:07:ad:9f:
         d3:0d:c5:41:21:66:86:8c:8b:f7:4a:b4:ad:f8:21:4d:6e:ce:
         05:11:08:36:97:bd:f2:2e:ec:73:11:70:0a:24:98:ac:bb:a1:
         6e:08:28:0d:be:a0:42:1b:d7:a2:5b:3a:5f:be:a1:ad:5c:e4:
         71:86:0b:98:61:fe:59:95:1f:5c:3f:13:35:94:5f:c9:36:28:
         cf:ec:08:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----