Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/0914e574a4dd96c5dae5e22063848a24f1cff486.roa
File:                     0914e574a4dd96c5dae5e22063848a24f1cff486.roa (raw, json)
Hash identifier:          dDJ6Pf0dd9UGJEF3ufT40mCXGuiEhkRFV/e0AacWsWs=
Subject key identifier:   74:99:85:05:1B:8A:95:BF:CC:A9:15:BF:4A:E7:C7:AB:8D:64:13:85
Certificate issuer:       /CN=b5a387f4a9acf838009dd751d84c60b7ecb56ec8
Certificate serial:       093B85
Authority key identifier: F9:F5:C8:A1:2F:E2:07:DD:F5:13:CA:8A:D5:F8:4E:66:4A:EA:8B:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5a387f4a9acf838009dd751d84c60b7ecb56ec8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/0914e574a4dd96c5dae5e22063848a24f1cff486.roa
Signing time:             Tue 24 May 2022 00:55:18 +0000
ROA not before:           Wed 26 May 2021 03:00:00 +0000
ROA not after:            Fri 26 May 2023 03:00:00 +0000
asID:                     53856
IP address blocks:        45.170.12.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605061 (0x93b85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5a387f4a9acf838009dd751d84c60b7ecb56ec8
        Validity
            Not Before: May 26 03:00:00 2021 GMT
            Not After : May 26 03:00:00 2023 GMT
        Subject: CN=0914e574a4dd96c5dae5e22063848a24f1cff486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:99:fc:5d:a7:f8:89:ae:a2:7b:20:13:38:fb:
                    be:27:ab:41:ad:cc:99:7b:01:fe:e5:06:43:ce:b0:
                    53:ff:43:40:6d:45:1a:ed:2c:ca:eb:98:14:b8:02:
                    92:3c:60:b7:fc:eb:12:18:7b:f8:28:37:88:bf:41:
                    6b:fc:d2:6b:1e:f4:73:e0:eb:be:7c:46:36:9a:9c:
                    76:c6:95:b3:43:89:08:af:28:3e:bc:02:5a:5f:65:
                    15:e2:58:9e:13:da:d8:fd:98:65:e2:21:ce:80:50:
                    24:32:6a:ca:9c:40:51:be:6c:ff:7c:80:42:20:f2:
                    d8:eb:8f:83:b9:39:41:a5:35:1c:53:11:d5:d0:a8:
                    42:43:68:4b:2f:19:04:f3:a3:2c:ec:34:2a:80:8e:
                    a8:98:8a:b4:bc:e6:d4:e0:bc:b1:bb:b7:96:7e:6c:
                    b4:f2:50:db:0b:cb:c2:ac:63:f7:bc:bf:89:2f:d8:
                    3f:9b:25:25:62:50:f6:13:f4:d0:8b:4f:a7:6b:cf:
                    f7:f6:ff:49:07:32:88:cc:4d:da:ad:2e:aa:82:c2:
                    a9:73:f1:8b:9e:f9:f6:0f:1b:e5:27:76:70:f8:e8:
                    c4:d3:4e:5a:d8:38:03:f9:93:ec:dc:82:fa:2b:29:
                    14:6a:87:94:04:c6:99:65:bd:46:22:ef:20:37:3c:
                    42:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:99:85:05:1B:8A:95:BF:CC:A9:15:BF:4A:E7:C7:AB:8D:64:13:85
            X509v3 Authority Key Identifier:
                keyid:F9:F5:C8:A1:2F:E2:07:DD:F5:13:CA:8A:D5:F8:4E:66:4A:EA:8B:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5a387f4a9acf838009dd751d84c60b7ecb56ec8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/0914e574a4dd96c5dae5e22063848a24f1cff486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/b5a387f4a9acf838009dd751d84c60b7ecb56ec8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:c7:3e:27:6c:83:7c:97:75:45:26:2c:10:29:95:29:7e:b5:
         ef:4e:78:9d:1f:d9:81:7a:f2:89:d7:d8:6a:97:6a:9c:18:9f:
         dc:21:bb:c0:ce:19:a5:cb:1d:ce:52:b5:fe:54:99:85:9f:38:
         96:ff:c2:56:c9:3d:f6:af:3b:35:24:a9:7d:9f:a4:95:6e:1a:
         e2:94:0f:29:f0:f2:64:6c:fb:8d:a9:e9:5a:d0:5f:d8:b1:b1:
         fb:12:a7:0c:a3:fd:8f:e0:e7:70:b8:56:91:62:20:ed:25:5f:
         d6:4e:38:5f:3e:45:82:55:33:e6:4c:53:36:f8:4a:75:8d:40:
         a2:c5:93:2c:ec:f4:98:44:c8:b8:83:5d:dd:3c:dd:0a:b8:f1:
         d4:c5:e9:56:cb:2c:13:5c:2a:0d:e5:b4:7a:b7:1c:e5:b0:c6:
         9e:2a:71:09:50:56:18:f4:9f:b8:31:76:6d:a7:bc:e9:dd:ab:
         74:2f:62:11:02:36:06:1d:f8:8f:48:cd:3c:bd:73:a7:a8:be:
         06:be:db:29:d6:08:37:f9:c2:1c:ec:4b:d9:5d:68:7d:a7:55:
         b1:aa:cb:95:de:79:d3:4e:a3:be:50:83:66:56:3f:91:68:d2:
         bf:59:43:b0:df:23:a6:c1:eb:15:7c:b1:1d:fe:c5:90:79:7d:
         bc:9f:1b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----