Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f0a2831f-42d5-479a-a50d-067fc960af1e/7314f41bde18cb1a11b29f06ad00381dc52fb31f.roa
File:                     7314f41bde18cb1a11b29f06ad00381dc52fb31f.roa (raw, json)
Hash identifier:          xEVbya2CYef0x//1q86OpNcP93q1GOzFDrlYQ/BJrQU=
Subject key identifier:   7C:1A:73:61:BD:15:E5:83:86:40:C4:85:E1:EB:2F:45:09:93:4C:90
Certificate issuer:       /CN=8a612a5048f3992505dee3fd707ff02cc9aa4192
Certificate serial:       0AF10B
Authority key identifier: 28:9E:AA:A8:9F:0E:1C:BC:EC:3F:C6:26:B9:20:29:A4:2A:C5:C1:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a612a5048f3992505dee3fd707ff02cc9aa4192.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f0a2831f-42d5-479a-a50d-067fc960af1e/7314f41bde18cb1a11b29f06ad00381dc52fb31f.roa
Signing time:             Wed 24 Mar 2021 14:40:12 +0000
ROA not before:           Wed 24 Mar 2021 14:40:12 +0000
ROA not after:            Tue 24 Mar 2026 14:40:12 +0000
asID:                     269852
IP address blocks:        45.188.228.0/24 maxlen: 24
                          2803:e0e0::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 717067 (0xaf10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a612a5048f3992505dee3fd707ff02cc9aa4192
        Validity
            Not Before: Mar 24 14:40:12 2021 GMT
            Not After : Mar 24 14:40:12 2026 GMT
        Subject: CN=7314f41bde18cb1a11b29f06ad00381dc52fb31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9d:de:0d:27:a4:31:7e:a2:62:82:35:3c:d0:
                    6d:b5:36:da:78:0a:0c:b8:6a:d3:96:31:4b:69:6b:
                    5b:26:9a:cf:a9:43:3e:1e:ad:f9:c3:b3:62:d9:7a:
                    a6:8b:b5:4b:24:ed:0d:b6:4c:e1:14:71:d4:eb:16:
                    2f:55:bf:47:c9:5c:24:32:d2:05:8a:ce:85:95:ec:
                    b9:bb:87:ba:d9:41:fd:47:78:33:ef:cf:8e:ac:62:
                    b6:52:4c:5d:b5:fc:04:79:1e:0c:be:3c:25:63:25:
                    07:d4:de:4f:fb:b3:30:92:db:72:71:d9:7d:6f:a0:
                    46:d3:67:ac:69:0e:3b:1a:21:8a:74:73:fd:2b:92:
                    bc:d5:79:f1:b5:d9:3b:89:ef:63:21:0f:f0:c5:68:
                    ae:c2:0f:d7:02:98:7b:b4:b6:bb:b2:00:26:de:16:
                    d4:9d:ae:a6:f4:2b:b6:64:30:2f:be:95:6b:a7:d4:
                    5a:5c:fc:1d:e8:ad:4c:64:36:86:a1:72:45:05:18:
                    43:36:5b:17:2c:b8:4f:80:06:97:0b:5f:6e:dd:94:
                    ac:0a:0b:17:c5:c3:22:9c:b0:e9:ed:f4:99:21:de:
                    6b:79:52:f0:14:03:91:4d:83:1d:87:74:c9:42:1f:
                    e2:4a:c0:4b:96:6a:24:f6:2b:33:e2:7c:a8:fb:f2:
                    ec:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1A:73:61:BD:15:E5:83:86:40:C4:85:E1:EB:2F:45:09:93:4C:90
            X509v3 Authority Key Identifier:
                keyid:28:9E:AA:A8:9F:0E:1C:BC:EC:3F:C6:26:B9:20:29:A4:2A:C5:C1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a612a5048f3992505dee3fd707ff02cc9aa4192.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f0a2831f-42d5-479a-a50d-067fc960af1e/7314f41bde18cb1a11b29f06ad00381dc52fb31f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f0a2831f-42d5-479a-a50d-067fc960af1e/8a612a5048f3992505dee3fd707ff02cc9aa4192.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.228.0/24
                IPv6:
                  2803:e0e0::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:a3:41:e4:35:49:db:42:2e:b1:96:b3:a5:35:c3:1f:da:01:
         0a:b1:98:60:a3:85:ce:77:16:25:d8:f3:bf:7d:ec:13:bb:ab:
         2f:e3:75:b3:df:d7:e7:01:a5:c6:40:5c:9b:ca:94:dd:ae:34:
         0f:36:b8:de:56:2d:6b:76:96:56:00:e9:38:5f:59:64:0f:ba:
         e1:25:99:d7:0b:c1:15:18:f3:a6:33:35:81:59:bc:0d:ab:ee:
         33:f8:ef:8f:4a:e3:07:c1:97:01:7f:d2:d7:80:cf:6c:cb:da:
         a5:11:2b:8a:56:6d:84:49:91:46:10:84:83:bf:33:66:50:a7:
         d2:1e:63:e1:03:45:90:f2:84:df:bf:ce:4c:a2:c2:e4:17:fa:
         ea:b0:27:ec:0c:40:4f:1c:30:87:da:91:01:78:fa:a9:35:2b:
         0a:7c:f1:14:2c:be:59:8d:84:75:1d:84:00:41:88:c9:61:df:
         a1:5e:43:c5:e1:75:f1:5d:5e:d0:2c:22:f1:ce:bd:c7:ad:9d:
         a4:70:d6:d0:de:16:b8:91:75:90:32:bc:5e:0b:6d:a0:0d:66:
         6a:5a:a5:91:7c:03:71:e4:16:78:72:d2:02:d7:74:3b:31:41:
         d3:4b:50:78:4c:4b:1d:39:0f:66:20:14:04:16:f5:d4:9b:98:
         57:3f:bf:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----