Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/248136e1621e8dafba37b6c177393bd7d7cb31fe.roa
File:                     248136e1621e8dafba37b6c177393bd7d7cb31fe.roa (raw, json)
Hash identifier:          qDM67ZUxCFabGFwhP8v9Tc5fOf+slQJKY7cG+yEQ1Nk=
Subject key identifier:   B8:E4:A5:50:90:0C:01:85:78:CA:63:40:E1:FA:CF:A8:D8:E5:E6:CA
Certificate issuer:       /CN=aaf4571e3a5915e171eb5856008590d6211ff016
Certificate serial:       1691
Authority key identifier: 81:0F:F0:61:CE:B2:2C:B9:C7:D3:22:2D:E9:76:43:7C:B8:C3:FA:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aaf4571e3a5915e171eb5856008590d6211ff016.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/248136e1621e8dafba37b6c177393bd7d7cb31fe.roa
Signing time:             Tue 25 May 2021 16:05:03 +0000
ROA not before:           Tue 25 May 2021 03:00:00 +0000
ROA not after:            Thu 25 May 2023 03:00:00 +0000
asID:                     204300
IP address blocks:        45.4.204.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5777 (0x1691)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf4571e3a5915e171eb5856008590d6211ff016
        Validity
            Not Before: May 25 03:00:00 2021 GMT
            Not After : May 25 03:00:00 2023 GMT
        Subject: CN=248136e1621e8dafba37b6c177393bd7d7cb31fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bf:e3:93:37:ee:4e:c8:ba:df:40:79:22:12:
                    2b:7f:e0:1e:95:4a:56:21:6b:fa:62:3d:f4:b0:5a:
                    0e:ed:b1:0a:c7:85:e8:6f:72:c5:ba:f6:99:c4:64:
                    8d:96:66:09:71:d1:0a:30:61:35:f0:b3:2c:8b:93:
                    b6:c9:5a:4a:34:9c:7f:93:08:79:46:36:e5:0d:b8:
                    e1:c1:f2:27:a4:23:75:42:20:05:d0:09:82:15:d2:
                    62:23:f2:53:b9:a8:67:76:9b:bf:fe:73:97:ed:6c:
                    a5:29:5e:b3:bd:7a:a7:7e:0c:4b:73:86:ea:d6:2a:
                    47:bc:94:ed:e6:6e:c7:56:e5:65:8f:89:03:27:ef:
                    6a:90:61:51:cb:f3:d0:66:c4:27:ee:94:93:ed:db:
                    75:1a:5a:40:fa:d6:81:42:68:f5:07:91:a3:74:c9:
                    27:64:3b:47:09:ee:5d:ed:c2:d4:b3:f5:19:6d:84:
                    c0:07:ce:d5:18:1b:c3:0c:f7:df:36:37:90:65:69:
                    a2:0d:34:db:f7:db:04:72:5d:32:02:16:d5:53:30:
                    05:92:12:c9:52:c0:ec:1a:f5:a2:f2:26:14:6b:9e:
                    f7:23:f7:4c:db:59:6b:f5:3f:4d:c0:a9:6b:cd:1d:
                    5f:1f:ad:e8:40:8a:2e:7d:ce:11:f5:16:e7:38:43:
                    f7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E4:A5:50:90:0C:01:85:78:CA:63:40:E1:FA:CF:A8:D8:E5:E6:CA
            X509v3 Authority Key Identifier:
                keyid:81:0F:F0:61:CE:B2:2C:B9:C7:D3:22:2D:E9:76:43:7C:B8:C3:FA:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aaf4571e3a5915e171eb5856008590d6211ff016.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/248136e1621e8dafba37b6c177393bd7d7cb31fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/aaf4571e3a5915e171eb5856008590d6211ff016.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:2a:63:fa:1b:d7:8f:dd:82:68:91:fb:21:05:f1:2e:0b:dc:
         f5:35:67:3b:5c:a8:c3:20:23:a1:3c:d2:dd:17:fb:68:b3:96:
         dc:d2:a2:d8:66:d6:86:97:dc:7f:ab:02:8f:98:e6:03:2d:24:
         28:ea:87:55:6b:f5:b8:00:37:49:02:ed:04:f1:4a:d7:94:5f:
         80:5d:8a:b6:f9:c7:43:e9:70:49:b9:95:82:68:66:be:94:2b:
         a5:e3:69:7a:c4:7d:06:2d:17:c0:85:3c:dd:c5:44:df:d0:90:
         d8:fd:63:22:1c:c7:97:7e:6d:b1:78:91:74:c8:a3:a5:37:d9:
         39:3a:53:dc:0e:28:88:41:fc:cc:dc:55:fa:3f:15:f9:75:9c:
         d5:ec:62:da:ac:ae:61:e8:7d:c7:c8:97:a8:d8:1d:2b:b8:51:
         f5:8d:42:b0:51:ae:3d:65:4e:7c:56:4e:ec:9c:84:64:ce:41:
         e9:b4:95:a5:d0:8c:8c:b7:e3:53:08:1c:8d:2a:64:6e:68:ba:
         12:54:fe:62:5b:bb:03:44:40:47:dc:c9:6b:ab:7d:ee:b4:e7:
         84:c0:cb:44:9d:0f:eb:fb:a5:2b:b8:4f:6a:97:75:ab:f7:4e:
         0e:57:85:48:47:c2:de:d0:f8:a3:f8:c3:1d:e2:52:c1:fc:83:
         65:56:f9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----