Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f0a2831f-42d5-479a-a50d-067fc960af1e/2d1c9c16ccc3b9732ad0934908fc68e00c9ed23f.roa
File:                     2d1c9c16ccc3b9732ad0934908fc68e00c9ed23f.roa (raw, json)
Hash identifier:          6U8qGXtCvk4aTI5zN40PyCKu8AKbv/JRBHdryyQFRSE=
Subject key identifier:   B7:D7:3C:0A:B4:DA:4A:2C:82:0C:8A:6A:CF:AB:2B:EB:E7:B5:5B:80
Certificate issuer:       /CN=8a612a5048f3992505dee3fd707ff02cc9aa4192
Certificate serial:       0AF237
Authority key identifier: 28:9E:AA:A8:9F:0E:1C:BC:EC:3F:C6:26:B9:20:29:A4:2A:C5:C1:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a612a5048f3992505dee3fd707ff02cc9aa4192.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f0a2831f-42d5-479a-a50d-067fc960af1e/2d1c9c16ccc3b9732ad0934908fc68e00c9ed23f.roa
Signing time:             Wed 24 Mar 2021 14:40:12 +0000
ROA not before:           Wed 24 Mar 2021 14:40:12 +0000
ROA not after:            Tue 24 Mar 2026 14:40:12 +0000
asID:                     269852
IP address blocks:        45.188.229.0/24 maxlen: 24
                          2803:e0e0:100::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 717367 (0xaf237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a612a5048f3992505dee3fd707ff02cc9aa4192
        Validity
            Not Before: Mar 24 14:40:12 2021 GMT
            Not After : Mar 24 14:40:12 2026 GMT
        Subject: CN=2d1c9c16ccc3b9732ad0934908fc68e00c9ed23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:92:52:b7:82:b3:46:49:36:05:07:5c:97:a4:
                    ba:09:e4:37:32:75:45:cf:f6:23:a1:27:97:a9:a0:
                    3d:b4:cd:39:7d:a4:29:a8:4a:ae:cc:35:d8:bf:7e:
                    5c:3b:24:16:d8:e9:a1:46:bd:b6:78:9d:15:3d:c0:
                    46:57:fe:c3:ab:2b:03:3b:bb:52:f4:d1:75:b1:fc:
                    e3:98:db:b8:21:70:f5:cd:0a:60:79:f2:5f:00:70:
                    59:e9:54:4b:03:67:57:e2:2a:78:ba:45:a2:ae:0c:
                    c8:7e:6a:66:14:54:e3:47:b1:3f:18:f1:c7:28:f9:
                    f3:ed:21:ca:8a:ac:f6:e5:6d:70:d3:08:c2:31:81:
                    17:a7:e3:42:29:88:2b:c9:87:7b:92:ff:4f:a0:68:
                    b7:33:a4:0e:10:37:6c:f0:6e:a7:93:b9:8f:31:00:
                    71:bc:4e:53:a9:0f:95:e0:fa:f4:ae:a7:b6:29:6b:
                    a2:ce:9d:39:3f:48:56:95:ca:b2:61:b6:e5:37:90:
                    3d:41:92:d0:dd:43:15:86:90:66:93:7d:3b:d3:85:
                    cc:f8:a7:c4:f2:2f:69:73:97:66:36:de:b7:bd:fe:
                    f9:e8:cf:7c:93:6e:4c:82:6f:e6:c5:ea:a4:c7:37:
                    af:43:8a:85:c3:2b:51:e8:b6:93:53:c6:19:8f:a7:
                    35:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D7:3C:0A:B4:DA:4A:2C:82:0C:8A:6A:CF:AB:2B:EB:E7:B5:5B:80
            X509v3 Authority Key Identifier:
                keyid:28:9E:AA:A8:9F:0E:1C:BC:EC:3F:C6:26:B9:20:29:A4:2A:C5:C1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a612a5048f3992505dee3fd707ff02cc9aa4192.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f0a2831f-42d5-479a-a50d-067fc960af1e/2d1c9c16ccc3b9732ad0934908fc68e00c9ed23f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f0a2831f-42d5-479a-a50d-067fc960af1e/8a612a5048f3992505dee3fd707ff02cc9aa4192.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.229.0/24
                IPv6:
                  2803:e0e0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:1e:f9:fd:52:7e:61:27:b5:df:02:23:c3:db:9f:8c:f7:2d:
         e0:9a:8c:84:61:76:f8:57:49:da:b9:b4:ff:23:f2:68:45:02:
         94:6c:ad:fb:8d:20:d3:b1:d0:a4:07:27:b2:66:a0:3a:0a:2d:
         19:97:08:28:34:1f:66:48:da:66:6b:7b:b1:94:b1:89:f4:81:
         87:c3:58:54:a8:42:aa:45:93:24:80:d6:09:5d:9c:59:25:eb:
         b6:49:9f:aa:26:04:92:c8:3f:cf:38:c1:d8:17:a4:7c:20:78:
         ee:1b:fb:37:0d:27:7a:3b:8a:eb:6e:77:b9:89:35:52:3f:e7:
         0b:d7:c5:1b:00:f2:a7:68:f5:25:02:5e:51:06:5f:95:21:9b:
         e0:47:31:64:0f:3e:49:fc:c2:bc:72:3c:08:a1:81:a9:d9:3b:
         b6:c5:31:d5:51:da:40:f3:82:f0:42:18:0f:92:8e:f1:08:cb:
         89:d5:df:72:f1:2c:99:e2:25:15:53:3e:18:6e:f4:02:5b:30:
         07:ba:b0:1d:6e:f1:c5:56:27:d7:2e:77:35:34:85:2c:62:53:
         50:11:ff:29:44:4d:65:db:e1:ec:8a:c3:78:6e:a0:e6:d7:e2:
         f8:1c:7f:45:ca:0d:0a:9e:6d:14:04:c4:42:92:56:9b:d7:8f:
         62:9b:5a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----