Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/93c623d63f2820fb6b021f413d6edfdf03f2182a.roa
File:                     93c623d63f2820fb6b021f413d6edfdf03f2182a.roa (raw, json)
Hash identifier:          rWZm7UYOZ1JjuHA5uzWWQjQrLTEwig5k/ZVnQjT4png=
Subject key identifier:   96:AE:34:55:7B:C1:52:E5:34:28:85:86:D1:15:3E:79:81:24:19:4A
Certificate issuer:       /CN=dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41
Certificate serial:       DEAC
Authority key identifier: D9:6D:D2:B7:71:67:C2:1F:92:DE:02:EE:86:61:3D:1D:C7:99:1B:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/93c623d63f2820fb6b021f413d6edfdf03f2182a.roa
Signing time:             Mon 01 Nov 2021 21:46:20 +0000
ROA not before:           Mon 01 Nov 2021 03:00:00 +0000
ROA not after:            Sun 01 Nov 2026 03:00:00 +0000
asID:                     267689
IP address blocks:        45.163.20.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57004 (0xdeac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41
        Validity
            Not Before: Nov  1 03:00:00 2021 GMT
            Not After : Nov  1 03:00:00 2026 GMT
        Subject: CN=93c623d63f2820fb6b021f413d6edfdf03f2182a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:92:84:db:9e:8d:35:eb:c2:ae:f3:77:e4:22:
                    9e:f5:e6:14:fe:fa:2c:89:ee:43:3d:0c:47:fb:0b:
                    ad:8c:a3:77:ef:55:14:41:9e:a9:6b:1a:e2:41:c6:
                    65:a2:fe:12:8d:12:2b:0d:f6:76:a8:1f:97:2d:ff:
                    6f:92:a1:d1:6b:5e:17:b2:1c:8b:ee:7f:d7:46:02:
                    40:43:9b:47:16:63:50:ce:6e:5b:ca:6b:4e:23:b2:
                    00:ae:79:df:3c:bd:23:29:40:09:37:3f:07:a7:46:
                    bd:6b:49:70:d2:03:6e:92:db:e8:a0:ee:9e:ef:81:
                    64:91:5d:e2:7f:b9:a1:bf:fb:f1:aa:2b:6f:2c:ca:
                    4d:95:8f:4a:a5:81:a9:5f:02:c6:d1:38:9a:e5:f9:
                    48:c0:53:be:6c:41:ee:56:c7:80:55:b9:5f:50:06:
                    32:13:9c:7c:ff:de:e1:63:ee:5d:6f:6a:47:25:88:
                    aa:ce:4f:c5:c2:ea:ed:9e:7b:31:95:65:00:b6:63:
                    ae:4f:9e:9f:62:2d:c4:d3:16:7d:0a:2b:b6:8d:f8:
                    2b:07:e5:7c:2d:ff:77:e9:59:f8:1e:0d:16:42:de:
                    88:d1:f9:b8:8c:72:0e:d8:2f:de:19:38:fc:bc:f6:
                    a2:ac:68:db:41:7b:e5:09:57:b0:b2:0b:2c:bd:13:
                    79:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AE:34:55:7B:C1:52:E5:34:28:85:86:D1:15:3E:79:81:24:19:4A
            X509v3 Authority Key Identifier:
                keyid:D9:6D:D2:B7:71:67:C2:1F:92:DE:02:EE:86:61:3D:1D:C7:99:1B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/93c623d63f2820fb6b021f413d6edfdf03f2182a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:12:ef:dc:b4:3c:c9:59:0e:62:1f:1a:be:c9:0e:dc:e3:1a:
         60:6b:4c:d5:05:c8:81:aa:a9:9e:57:eb:e6:ec:09:55:89:93:
         72:0b:1b:b9:c3:82:75:49:a6:f3:62:74:6a:0f:56:db:d2:a7:
         2a:dc:68:49:c1:51:38:3a:b4:aa:14:5f:e6:d1:b1:69:d6:a7:
         47:4a:1a:d8:4e:5f:68:f0:e9:05:d1:2d:e4:30:04:46:85:5d:
         96:54:0c:ff:62:c0:4e:b6:09:b8:41:23:8e:e5:e7:63:6c:4b:
         f8:b4:73:9f:f2:ff:be:06:17:79:6a:88:96:03:ec:b4:12:0b:
         95:93:7b:3d:a3:e8:7d:e4:ae:2e:bc:2b:c5:0a:0e:51:8c:a6:
         cd:65:7c:9c:93:9f:6b:14:70:e9:7a:2a:c2:fd:57:e0:65:65:
         36:94:80:12:97:ca:ce:80:54:72:d5:33:af:b0:c3:05:00:5a:
         ad:ca:bd:e4:fa:ee:30:2f:c3:58:9e:2c:6f:d4:ee:0d:15:1e:
         19:53:a2:dd:7e:8d:01:29:88:06:42:10:7a:12:aa:c0:81:ea:
         7d:3b:74:5e:45:09:38:67:e3:1d:03:4e:6c:23:78:43:89:e0:
         a8:62:f2:c6:33:fc:40:66:51:e8:64:56:a3:24:a4:da:38:da:
         6f:29:3b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----