Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f224f274-c1f3-485f-b9f4-313cfd310dda/54683325bc5117d01aaa036e01da69e307c6648c.roa
File:                     54683325bc5117d01aaa036e01da69e307c6648c.roa (raw, json)
Hash identifier:          Af/56hF3kcE+X/iLvvpA1MLWRn9NWTtBXivYcYpClps=
Subject key identifier:   08:35:24:30:08:2F:95:3E:CF:0F:90:42:86:68:AE:CB:50:BC:17:98
Certificate issuer:       /CN=ec6822a6bcab43d61ec7ceff1bb6b19a80120000
Certificate serial:       050A
Authority key identifier: B2:B4:33:91:56:7C:65:ED:4E:07:52:35:8F:24:14:01:CF:8E:08:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec6822a6bcab43d61ec7ceff1bb6b19a80120000.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f224f274-c1f3-485f-b9f4-313cfd310dda/54683325bc5117d01aaa036e01da69e307c6648c.roa
Signing time:             Tue 16 Nov 2021 18:27:58 +0000
ROA not before:           Tue 16 Nov 2021 02:00:00 +0000
ROA not after:            Thu 16 Nov 2023 02:00:00 +0000
asID:                     265534
IP address blocks:        45.7.44.0/22 maxlen: 24
                          2806:2e6::/32 maxlen: 34

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1290 (0x50a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec6822a6bcab43d61ec7ceff1bb6b19a80120000
        Validity
            Not Before: Nov 16 02:00:00 2021 GMT
            Not After : Nov 16 02:00:00 2023 GMT
        Subject: CN=54683325bc5117d01aaa036e01da69e307c6648c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1b:e3:55:b1:55:e0:a0:83:6a:db:c7:1d:a7:
                    bb:ff:ef:2e:51:d9:69:59:04:0f:5b:75:1e:e0:1d:
                    01:2f:36:11:e9:7e:a3:28:77:20:15:dc:30:0b:dc:
                    45:e3:9f:6c:43:83:4c:c5:0d:c6:1a:bf:70:bf:24:
                    45:aa:9c:8c:ec:54:34:47:cf:93:3d:42:2a:46:39:
                    e8:e8:c4:b0:5e:85:7d:fd:61:e3:57:35:57:fe:fe:
                    c6:5c:b8:1a:55:bc:31:f5:c1:ca:5a:52:9e:4e:08:
                    a7:16:df:a2:1a:0b:be:bf:57:b8:34:28:1a:63:2d:
                    c5:b2:7f:c2:5b:46:12:b6:33:65:ed:48:41:5e:0e:
                    9c:16:fa:03:c7:ae:4d:25:84:dd:c4:fd:60:8c:cd:
                    2c:5d:a4:49:d0:4d:df:80:6d:b9:11:10:55:68:4b:
                    d8:ca:e5:5b:e0:c3:6b:b6:27:b2:07:7f:8f:80:10:
                    c6:9a:b6:9f:28:e6:49:86:bb:68:ec:24:a1:33:0c:
                    be:85:2d:d8:77:81:f2:3c:28:86:12:b0:a1:18:69:
                    ec:ec:f2:fc:35:de:98:07:9d:07:7a:1f:29:82:a4:
                    29:8a:40:86:d5:3a:9e:ce:cf:c7:98:0a:b2:80:bf:
                    64:28:f0:8c:96:59:eb:38:f1:d6:35:27:65:3a:9a:
                    d9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:35:24:30:08:2F:95:3E:CF:0F:90:42:86:68:AE:CB:50:BC:17:98
            X509v3 Authority Key Identifier:
                keyid:B2:B4:33:91:56:7C:65:ED:4E:07:52:35:8F:24:14:01:CF:8E:08:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec6822a6bcab43d61ec7ceff1bb6b19a80120000.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f224f274-c1f3-485f-b9f4-313cfd310dda/54683325bc5117d01aaa036e01da69e307c6648c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f224f274-c1f3-485f-b9f4-313cfd310dda/ec6822a6bcab43d61ec7ceff1bb6b19a80120000.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.44.0/22
                IPv6:
                  2806:2e6::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:14:f6:2d:df:43:04:fb:e7:84:17:b9:b7:32:d1:eb:a4:4e:
         03:03:a1:68:ad:ba:ed:01:c3:f6:cd:86:31:93:27:8e:82:4c:
         f1:f5:b1:3b:5d:a3:0e:a5:40:f6:19:ff:fe:2b:da:cb:fc:dc:
         16:51:fa:ed:62:1b:37:9f:93:72:65:42:1d:c1:19:fe:bf:7d:
         09:f7:b8:47:b8:6e:2b:a0:b1:b7:ba:aa:a7:37:e5:2e:e7:58:
         25:20:35:80:b9:a1:6b:88:a3:ca:94:a0:fe:c1:99:2d:3a:77:
         f2:74:41:27:18:29:be:e1:fd:1f:70:12:b0:62:51:0d:5d:de:
         5a:ba:72:50:c8:3c:c2:19:45:7e:08:75:ed:c1:7f:38:a8:ea:
         f6:cb:4f:f3:b1:15:ae:82:14:91:c7:cb:12:37:63:33:7b:a8:
         ba:36:76:7f:f4:88:c9:80:3d:a5:6e:92:36:26:9e:c3:a4:0d:
         f7:ef:10:b7:22:1f:d2:34:52:ae:c1:24:6b:e0:0c:2c:c9:1f:
         aa:47:b1:c7:93:2c:37:88:68:1e:84:c6:85:f7:2c:71:5d:9f:
         e9:5f:04:bf:0d:28:73:53:e9:9c:36:6c:b7:2c:ba:99:70:1b:
         75:82:0c:1c:e6:74:64:33:fe:25:d2:76:7a:12:ed:49:db:b7:
         f8:79:cc:67
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICBQowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZWM2
ODIyYTZiY2FiNDNkNjFlYzdjZWZmMWJiNmIxOWE4MDEyMDAwMDAeFw0yMTExMTYw
MjAwMDBaFw0yMzExMTYwMjAwMDBaMDMxMTAvBgNVBAMTKDU0NjgzMzI1YmM1MTE3
ZDAxYWFhMDM2ZTAxZGE2OWUzMDdjNjY0OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDeG+NVsVXgoINq28cdp7v/7y5R2WlZBA9bdR7gHQEvNhHpfqMo
dyAV3DAL3EXjn2xDg0zFDcYav3C/JEWqnIzsVDRHz5M9QipGOejoxLBehX39YeNX
NVf+/sZcuBpVvDH1wcpaUp5OCKcW36IaC76/V7g0KBpjLcWyf8JbRhK2M2XtSEFe
DpwW+gPHrk0lhN3E/WCMzSxdpEnQTd+AbbkREFVoS9jK5Vvgw2u2J7IHf4+AEMaa
tp8o5kmGu2jsJKEzDL6FLdh3gfI8KIYSsKEYaezs8vw13pgHnQd6HymCpCmKQIbV
Op7Oz8eYCrKAv2Qo8IyWWes48dY1J2U6mtkXAgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQUCDUkMAgvlT7PD5BChmiuy1C8F5gwHwYDVR0jBBgwFoAUsrQzkVZ8Ze1OB1I1
jyQUAc+OCEAwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9lYzY4MjJh
NmJjYWI0M2Q2MWVjN2NlZmYxYmI2YjE5YTgwMTIwMDAwLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9mMjI0ZjI3NC1jMWYzLTQ4NWYtYjlmNC0zMTNjZmQz
MTBkZGEvNTQ2ODMzMjViYzUxMTdkMDFhYWEwMzZlMDFkYTY5ZTMwN2M2NjQ4Yy5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2YyMjRmMjc0LWMxZjMtNDg1Zi1iOWY0LTMxM2Nm
ZDMxMGRkYS9lYzY4MjJhNmJjYWI0M2Q2MWVjN2NlZmYxYmI2YjE5YTgwMTIwMDAw
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCLQcsMA0EAgACMAcDBQAoBgLmMA0GCSqGSIb3DQEBCwUAA4IB
AQAkFPYt30ME++eEF7m3MtHrpE4DA6ForbrtAcP2zYYxkyeOgkzx9bE7XaMOpUD2
Gf/+K9rL/NwWUfrtYhs3n5NyZUIdwRn+v30J97hHuG4roLG3uqqnN+Uu51glIDWA
uaFriKPKlKD+wZktOnfydEEnGCm+4f0fcBKwYlENXd5aunJQyDzCGUV+CHXtwX84
qOr2y0/zsRWughSRx8sSN2Mze6i6NnZ/9IjJgD2lbpI2Jp7DpA337xC3Ih/SNFKu
wSRr4AwsyR+qR7HHkyw3iGgehMaF9yxxXZ/pXwS/DShzU+mcNmy3LLqZcBt1ggwc
5nRkM/4l0nZ6Eu1J27f4ecxn
-----END CERTIFICATE-----