Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fa4daae8-1319-4fb6-ad27-4facb48948f4/b3b03c6812a30a8c8a00c3d56f95622cdcab5000.roa
File:                     b3b03c6812a30a8c8a00c3d56f95622cdcab5000.roa (raw, json)
Hash identifier:          ktNMMAm6ePqaRuH5uaPGgO2gQeAUVOL3L4cEJvyLcPM=
Subject key identifier:   40:0C:5B:3E:88:F1:59:AB:7A:70:38:2A:E0:84:0F:6B:92:FF:7C:31
Certificate issuer:       /CN=83e071b73134e99e61c3db9163fa966ff3118e3c
Certificate serial:       0B95C0
Authority key identifier: 45:C1:1C:A7:41:D2:75:06:49:E2:8A:86:A8:F8:A6:B0:D0:DA:F3:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83e071b73134e99e61c3db9163fa966ff3118e3c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fa4daae8-1319-4fb6-ad27-4facb48948f4/b3b03c6812a30a8c8a00c3d56f95622cdcab5000.roa
Signing time:             Wed 24 Mar 2021 22:49:40 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     263686
IP address blocks:        45.175.64.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 759232 (0xb95c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83e071b73134e99e61c3db9163fa966ff3118e3c
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=b3b03c6812a30a8c8a00c3d56f95622cdcab5000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6c:6f:61:61:7a:55:8f:94:6c:7e:67:49:56:
                    66:94:ae:45:41:4c:e2:d1:00:7c:97:3c:f1:91:c0:
                    71:62:7e:78:e1:35:0f:f8:07:6b:3a:84:bd:d2:2c:
                    bd:41:be:e1:fa:0d:90:34:86:00:d6:c1:1c:db:22:
                    21:7a:8d:5a:26:14:3c:25:9c:3e:4a:a3:78:09:3a:
                    b8:2e:64:fb:c0:f1:9a:53:9f:51:1e:c9:98:65:01:
                    40:b7:40:9d:9e:45:45:1a:ca:d2:02:f2:df:63:33:
                    01:f7:4f:3b:cb:34:24:2d:10:5f:81:36:50:f0:a9:
                    b1:63:d5:ea:91:d8:cc:ad:b3:ba:2b:cd:de:2a:19:
                    67:c9:c0:53:bd:fb:a7:55:a2:c3:9b:fa:99:a1:2b:
                    7b:7b:cf:a8:79:c1:2d:02:97:d9:ca:89:98:bc:fd:
                    e0:f2:5e:bd:ce:77:4a:c8:e7:5e:b3:44:5b:7c:4a:
                    21:9c:b7:47:1b:fc:44:24:64:73:61:5d:74:87:ac:
                    c3:5d:27:35:a2:91:21:d0:42:37:01:d0:8d:b2:0c:
                    01:e1:cc:3d:9e:0e:17:92:ed:5a:49:f9:69:0c:ba:
                    5e:b7:2a:e8:44:ee:e2:7d:76:51:3f:1e:e1:6e:75:
                    70:08:f7:5f:e8:99:e4:79:46:2e:4b:4d:98:d9:32:
                    e1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0C:5B:3E:88:F1:59:AB:7A:70:38:2A:E0:84:0F:6B:92:FF:7C:31
            X509v3 Authority Key Identifier:
                keyid:45:C1:1C:A7:41:D2:75:06:49:E2:8A:86:A8:F8:A6:B0:D0:DA:F3:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83e071b73134e99e61c3db9163fa966ff3118e3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fa4daae8-1319-4fb6-ad27-4facb48948f4/b3b03c6812a30a8c8a00c3d56f95622cdcab5000.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fa4daae8-1319-4fb6-ad27-4facb48948f4/83e071b73134e99e61c3db9163fa966ff3118e3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:39:1c:29:f6:11:37:3a:0e:05:67:84:15:58:5b:06:07:af:
         d1:4e:70:3a:88:6f:89:34:a7:a0:ef:ee:1f:e6:9e:da:73:3b:
         de:84:6e:4a:59:8c:85:d1:9c:47:4e:bb:1f:9d:98:b8:71:e1:
         d6:d3:59:2e:be:f8:2a:66:43:0a:62:a5:85:5b:5b:c0:4e:ec:
         c7:87:18:02:cc:81:6d:92:6b:8d:64:23:27:0b:5b:4a:a4:93:
         b1:4c:88:70:a6:fb:65:5f:8c:96:85:15:5a:2e:4b:80:e6:ad:
         12:42:d3:1c:d2:ab:21:3f:d4:82:94:e6:c5:7f:1c:69:95:1c:
         5c:fb:7f:79:81:91:7e:c8:d8:65:a5:33:28:d3:2e:24:5f:3e:
         ef:50:0e:c8:cd:76:6b:07:1f:b6:7b:80:ac:2b:7a:74:49:e3:
         cf:a3:af:94:93:32:ac:d2:70:c7:47:a6:7d:98:3b:e7:90:c0:
         00:46:04:9e:8b:67:82:e3:4d:68:85:e6:de:c6:21:b2:a4:c1:
         d5:29:13:90:60:52:bf:e6:e5:0c:c1:0f:7e:93:4f:f9:94:54:
         94:af:8d:ac:46:23:6a:50:08:75:1b:b3:68:9b:95:d7:26:3b:
         d6:e1:95:80:bf:51:f8:43:29:71:e4:bd:77:c4:b2:e4:68:e9:
         b9:3c:bc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----