Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed512c13-0d14-4486-8622-54eddaad4218/a81ce915a4d2a1183828562b0ea3b90b42ec5f47.roa
File:                     a81ce915a4d2a1183828562b0ea3b90b42ec5f47.roa (raw, json)
Hash identifier:          KqLvQ3L+tJVC/z/W5CQOkTdQYclD/PJl0rh7Hj3XT2E=
Subject key identifier:   D2:99:10:08:E1:71:48:D2:37:99:0C:FC:72:C7:53:D8:85:76:E7:66
Certificate issuer:       /CN=285c4851f123355e1dfc7c41d72c849598bfbf31
Certificate serial:       0C6E7E
Authority key identifier: FA:6B:CD:9E:98:AC:70:13:19:5F:EA:8D:58:F0:86:83:7D:57:5D:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/285c4851f123355e1dfc7c41d72c849598bfbf31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed512c13-0d14-4486-8622-54eddaad4218/a81ce915a4d2a1183828562b0ea3b90b42ec5f47.roa
Signing time:             Wed 24 Mar 2021 14:36:07 +0000
ROA not before:           Wed 24 Mar 2021 14:36:07 +0000
ROA not after:            Tue 24 Mar 2026 14:36:07 +0000
asID:                     267790
IP address blocks:        45.169.98.0/24 maxlen: 24
                          2803:6fa0::/48 maxlen: 48
                          2803:6fa0:6::/48 maxlen: 48
                          2803:6fa0:fe::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 814718 (0xc6e7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=285c4851f123355e1dfc7c41d72c849598bfbf31
        Validity
            Not Before: Mar 24 14:36:07 2021 GMT
            Not After : Mar 24 14:36:07 2026 GMT
        Subject: CN=a81ce915a4d2a1183828562b0ea3b90b42ec5f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4e:b2:46:dc:dd:59:da:bc:d5:53:6d:44:7f:
                    9a:0e:0c:fe:c7:f7:d6:71:e1:e5:ad:c9:96:45:92:
                    72:8b:9f:a5:64:94:1d:7f:cc:98:b4:e1:ce:a3:eb:
                    0c:3c:4d:36:f9:78:dc:38:ff:51:47:d2:e0:9a:72:
                    49:d5:d4:fb:6f:a6:1f:0a:cd:24:6f:94:19:f0:32:
                    4f:73:58:33:a9:1b:02:05:f9:85:22:d4:9f:00:0e:
                    2c:d4:87:5a:1b:e5:cd:42:5b:8f:00:58:26:5a:d3:
                    c2:38:b3:56:c8:7c:0a:e2:c3:f8:7d:b0:e4:23:ee:
                    90:1c:a4:fb:09:b8:dd:70:0e:4b:5b:43:b3:76:b9:
                    e0:c1:2f:86:f2:0a:2a:11:7f:c9:f9:93:c1:5d:30:
                    fc:e6:90:aa:eb:9f:91:c5:7a:cd:f2:50:74:0b:4b:
                    d3:40:f7:af:e3:6e:a8:81:17:d1:c5:57:14:cd:d0:
                    c9:46:18:4a:cd:10:f3:0f:72:e1:ae:3b:01:84:dd:
                    5e:72:a1:bf:f0:d8:a7:a5:53:73:35:24:45:d1:10:
                    7f:0c:a3:cb:7e:8a:d5:e9:8e:9e:81:14:3e:18:ef:
                    3e:f9:6a:6c:b4:6b:56:b3:4c:0f:b1:26:80:fa:74:
                    0e:7b:6c:47:50:6a:b7:1e:4c:78:8e:83:ec:35:47:
                    50:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:99:10:08:E1:71:48:D2:37:99:0C:FC:72:C7:53:D8:85:76:E7:66
            X509v3 Authority Key Identifier:
                keyid:FA:6B:CD:9E:98:AC:70:13:19:5F:EA:8D:58:F0:86:83:7D:57:5D:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/285c4851f123355e1dfc7c41d72c849598bfbf31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed512c13-0d14-4486-8622-54eddaad4218/a81ce915a4d2a1183828562b0ea3b90b42ec5f47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed512c13-0d14-4486-8622-54eddaad4218/285c4851f123355e1dfc7c41d72c849598bfbf31.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.98.0/24
                IPv6:
                  2803:6fa0::/48
                  2803:6fa0:6::/48
                  2803:6fa0:fe::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:56:9a:05:4f:25:d6:f9:bb:39:78:77:29:44:c4:b5:16:2f:
         3b:ef:07:17:8a:55:b6:23:7c:6f:7d:03:b5:25:a4:2b:e4:1f:
         40:92:23:45:c5:e6:d9:f4:90:c4:8a:ec:e9:24:b1:06:6f:ae:
         38:96:9c:ac:4c:88:04:a1:3d:61:9d:90:3b:4c:e9:05:67:eb:
         0b:0d:d4:f3:16:3d:22:38:fe:6e:a5:23:94:3e:69:9a:4e:77:
         ae:b9:95:ab:6a:12:64:48:34:17:b3:1f:79:c1:d2:78:9f:a6:
         59:77:63:40:0f:4b:96:85:94:78:2b:cf:23:9e:c3:59:e5:39:
         f7:fd:85:7b:28:2b:30:13:20:f4:51:a9:62:3f:60:1f:2a:36:
         e6:a4:c2:de:1d:80:fd:95:18:b4:93:7b:17:18:ed:c3:82:28:
         86:32:32:15:23:30:fc:96:2c:9f:40:b0:18:f3:b9:15:80:7b:
         fe:4d:6e:d7:a6:5a:94:bc:94:1a:60:ab:4e:69:72:f2:ab:eb:
         0f:c0:d2:fa:33:b0:90:6a:4a:3c:55:a0:19:04:b3:53:f7:7e:
         ac:b7:33:ee:85:a1:ba:60:97:3c:13:93:67:dc:97:b0:10:39:
         76:86:c9:58:6e:98:b9:bb:d1:16:c4:34:45:22:15:ac:4c:ef:
         84:cf:7c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----