Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f7cbb791-0118-44a2-942e-8264f6f91496/a17251c690c3e4f1c71e5c08c9a0a87e7af46111.roa
File:                     a17251c690c3e4f1c71e5c08c9a0a87e7af46111.roa (raw, json)
Hash identifier:          wcqUs9py+n91fEzxEIkMdPlzsvgpNMEyTAdiFU8dYys=
Subject key identifier:   FA:78:47:B4:32:46:E1:73:B4:E6:1F:FB:A4:5E:70:93:5E:64:66:64
Certificate issuer:       /CN=96b6385dac5d112ac08ad68e528602afddcc7d04
Certificate serial:       0B9B83
Authority key identifier: 05:0C:07:7C:9B:CC:2C:E2:AF:AB:41:60:26:63:87:F7:AE:CC:01:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96b6385dac5d112ac08ad68e528602afddcc7d04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f7cbb791-0118-44a2-942e-8264f6f91496/a17251c690c3e4f1c71e5c08c9a0a87e7af46111.roa
Signing time:             Wed 24 Mar 2021 22:51:47 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     266783
IP address blocks:        45.189.112.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 760707 (0xb9b83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96b6385dac5d112ac08ad68e528602afddcc7d04
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=a17251c690c3e4f1c71e5c08c9a0a87e7af46111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:61:82:f6:c8:37:2b:eb:7f:ea:13:41:f5:7a:
                    65:ac:01:8f:4e:57:63:7c:be:11:d9:bd:92:ae:63:
                    0b:20:f9:7c:4a:dd:ee:ce:c7:31:d5:3b:6e:52:eb:
                    1c:41:d6:5e:8c:32:0d:71:53:76:72:d3:13:2d:6c:
                    d3:67:1b:86:0e:03:94:92:ea:c6:e9:c6:ab:37:c3:
                    12:9d:e9:c0:cc:83:7a:b9:ea:4b:be:ce:68:b8:28:
                    e6:a8:0f:e2:48:8f:bc:9b:0c:dc:cd:7f:c6:52:7c:
                    67:0e:eb:86:27:b7:c6:32:8c:70:f7:22:34:36:45:
                    31:f0:b9:f7:15:be:95:e7:e7:5f:a4:9c:ed:62:66:
                    ea:52:92:24:81:ba:6f:ae:97:56:ce:e5:d6:8f:ed:
                    57:1b:40:ac:36:b5:42:a9:d0:75:ce:c2:10:f7:b9:
                    5c:ed:23:97:16:ef:82:39:cd:7a:ff:2c:e1:39:b0:
                    ff:3c:27:1d:48:a1:07:b0:af:80:c0:08:cb:86:a4:
                    d4:b7:fa:e6:15:85:71:9e:b4:78:de:88:26:cc:6c:
                    91:d8:a3:ac:d1:0d:fc:1e:5c:8d:95:19:5c:1b:90:
                    1b:a3:fb:a4:56:55:1f:36:3d:fb:10:fe:f0:a5:83:
                    07:99:59:23:16:4d:1b:39:fe:85:e9:cb:96:41:d8:
                    28:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:78:47:B4:32:46:E1:73:B4:E6:1F:FB:A4:5E:70:93:5E:64:66:64
            X509v3 Authority Key Identifier:
                keyid:05:0C:07:7C:9B:CC:2C:E2:AF:AB:41:60:26:63:87:F7:AE:CC:01:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96b6385dac5d112ac08ad68e528602afddcc7d04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f7cbb791-0118-44a2-942e-8264f6f91496/a17251c690c3e4f1c71e5c08c9a0a87e7af46111.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f7cbb791-0118-44a2-942e-8264f6f91496/96b6385dac5d112ac08ad68e528602afddcc7d04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:3b:7a:91:1c:12:0d:6c:32:a1:a7:fc:9d:ba:9f:2f:78:15:
         f9:3e:e4:db:75:b9:47:7f:da:5f:db:bf:ba:8f:cc:bf:38:6c:
         4b:5c:ea:1a:43:32:e7:cc:06:e9:62:2e:e2:fc:c5:54:8c:41:
         e0:89:58:e0:c7:fb:6c:71:2f:9d:ee:ce:36:70:5a:6f:24:cc:
         07:e4:f7:d2:bc:80:f7:05:52:e4:14:d1:ac:d3:ab:b3:f5:45:
         12:9f:44:0e:aa:7a:a5:8a:72:60:cf:de:d5:7d:ba:43:a0:d8:
         a4:90:8a:56:a6:a3:18:27:b8:f0:38:70:60:02:3a:c0:f4:ed:
         1f:0c:71:a2:e5:e9:a0:e4:bf:69:55:65:b8:8c:d2:e9:31:60:
         8f:af:68:82:e1:92:4a:fd:56:43:f5:f1:22:7c:df:08:11:d7:
         7e:4c:23:d9:fc:bb:0a:7d:be:93:62:66:1d:cb:c3:9b:17:8f:
         84:76:8d:2f:5d:d9:97:61:a1:d0:38:d3:30:bf:02:13:d4:6d:
         54:b5:b8:d3:6c:4b:16:a8:e8:f9:25:b0:21:22:fc:da:d1:6f:
         8e:e8:1c:26:30:f9:8b:ba:8d:71:1d:c3:97:73:49:c9:20:32:
         37:50:38:82:ae:7a:bc:c1:c5:bf:d5:8e:ef:d8:f2:03:6f:0e:
         4c:6b:b9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----