Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d566cb80-0cc8-490b-b8df-49bfc26b548e/7aaa0992ae0ca899f51415a3c993fd3a52a30fb9.roa
File:                     7aaa0992ae0ca899f51415a3c993fd3a52a30fb9.roa (raw, json)
Hash identifier:          xCwEe4gHdfiOUA3zf2Qse5fpy4coBwGdm5DdIkqi9Jc=
Subject key identifier:   B6:87:4C:05:D9:13:F8:E4:53:1A:CF:42:29:AD:92:C0:B5:8C:DD:E3
Certificate issuer:       /CN=a92f05c91ca1bd718ba55ab08c4ea612f4b6d6e4
Certificate serial:       1099FE
Authority key identifier: 67:30:E8:4C:10:93:C1:82:69:D7:51:6B:5A:DB:7D:48:EC:D9:0B:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a92f05c91ca1bd718ba55ab08c4ea612f4b6d6e4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d566cb80-0cc8-490b-b8df-49bfc26b548e/7aaa0992ae0ca899f51415a3c993fd3a52a30fb9.roa
Signing time:             Thu 30 Sep 2021 20:47:37 +0000
ROA not before:           Tue 05 Oct 2021 03:00:00 +0000
ROA not after:            Sat 30 Sep 2023 03:00:00 +0000
asID:                     28007
IP address blocks:        45.173.204.0/22 maxlen: 24
                          2803:d060::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1087998 (0x1099fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92f05c91ca1bd718ba55ab08c4ea612f4b6d6e4
        Validity
            Not Before: Oct  5 03:00:00 2021 GMT
            Not After : Sep 30 03:00:00 2023 GMT
        Subject: CN=7aaa0992ae0ca899f51415a3c993fd3a52a30fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:aa:6c:a7:e1:a7:7f:7f:42:36:e2:77:f7:44:
                    1d:06:9a:d5:fe:0b:a7:b1:cf:0f:c1:11:07:1a:ab:
                    00:64:86:b1:c7:ac:5c:43:d9:52:26:ed:da:e4:ee:
                    6d:9a:e2:40:f1:cf:b9:36:21:f4:a9:29:60:6d:df:
                    55:3c:55:0c:94:cd:0c:d6:11:c3:8d:fb:50:1b:7a:
                    66:38:02:b3:81:ba:81:02:0d:c3:65:38:19:8e:20:
                    52:f2:9d:d5:41:56:8c:6f:da:80:90:30:a0:ed:5c:
                    1d:89:c8:a5:31:51:af:6d:9c:72:fc:8e:0d:79:74:
                    33:77:62:88:4d:d2:dd:ae:a9:d6:76:eb:b9:50:18:
                    14:ff:2b:f3:2c:a0:78:1c:df:f9:c9:19:91:74:9a:
                    78:9d:f5:2b:a4:68:81:5d:8e:e7:e3:4e:f8:2b:b8:
                    04:df:e4:a9:41:ea:9f:df:ba:61:6a:b6:63:ea:12:
                    53:39:83:55:b1:9e:5f:de:26:6c:03:54:0f:62:e6:
                    0a:46:2f:0d:af:06:4e:8e:93:d9:8a:2a:ca:1a:f2:
                    74:be:39:58:1c:39:91:a1:c4:c4:22:91:35:d3:e6:
                    6c:b1:d7:64:1a:59:c6:0e:4c:72:dc:c7:d0:c3:7f:
                    be:ba:1a:30:43:37:20:25:86:5a:45:00:74:da:cf:
                    a9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:87:4C:05:D9:13:F8:E4:53:1A:CF:42:29:AD:92:C0:B5:8C:DD:E3
            X509v3 Authority Key Identifier:
                keyid:67:30:E8:4C:10:93:C1:82:69:D7:51:6B:5A:DB:7D:48:EC:D9:0B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a92f05c91ca1bd718ba55ab08c4ea612f4b6d6e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d566cb80-0cc8-490b-b8df-49bfc26b548e/7aaa0992ae0ca899f51415a3c993fd3a52a30fb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d566cb80-0cc8-490b-b8df-49bfc26b548e/a92f05c91ca1bd718ba55ab08c4ea612f4b6d6e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.204.0/22
                IPv6:
                  2803:d060::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:ed:07:3b:a4:a2:45:6a:a1:99:e1:2a:6b:7e:98:b0:79:95:
         81:a4:b9:16:92:9c:0d:0f:75:66:07:d2:8a:8b:d6:64:97:48:
         51:d1:38:9d:b8:74:c8:e8:53:eb:92:31:e2:90:75:3b:10:e4:
         be:55:87:1b:68:e7:00:db:9b:8e:3a:c1:d6:a5:b1:72:02:00:
         cf:5b:56:47:14:53:96:08:75:4b:27:4d:79:f5:37:99:69:38:
         58:72:e4:6a:3a:e3:5a:67:06:a2:08:16:eb:5c:92:5b:c2:85:
         0a:f7:94:c9:d1:92:0f:e0:d9:52:c0:d2:b9:40:e3:ba:7a:f5:
         66:5e:b2:5b:9e:f8:c6:a2:3d:16:1d:80:64:20:36:1c:c0:f2:
         75:31:88:d7:8d:f9:e3:a0:52:dd:65:ca:76:61:e9:8c:72:79:
         18:1a:77:50:88:58:8f:67:ba:89:1e:51:03:10:1f:8c:09:e0:
         1e:87:07:73:5d:6c:2b:c4:b1:69:45:f9:95:2b:03:12:5f:4a:
         67:1f:77:e4:6f:2e:2b:cf:a8:f9:5b:b6:a5:67:aa:c4:1b:7c:
         50:5e:fa:f0:2b:40:18:d4:54:0e:c1:e3:53:62:75:c3:38:18:
         b6:93:8e:75:21:4b:05:43:3b:18:2f:4c:ab:ea:44:20:87:ec:
         bc:9c:24:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----