Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/4524e181cd1096f49f82411c55cfa37a71c9529e.roa
File:                     4524e181cd1096f49f82411c55cfa37a71c9529e.roa (raw, json)
Hash identifier:          YDRka1YUToyV3+j3mPMzr9/Puxwydyz1OziEkYDh31k=
Subject key identifier:   F2:F7:5F:74:A8:11:68:BB:94:4E:F8:B1:B1:FF:67:AD:D7:A0:74:28
Certificate issuer:       /CN=b5a387f4a9acf838009dd751d84c60b7ecb56ec8
Certificate serial:       0687
Authority key identifier: F9:F5:C8:A1:2F:E2:07:DD:F5:13:CA:8A:D5:F8:4E:66:4A:EA:8B:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5a387f4a9acf838009dd751d84c60b7ecb56ec8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/4524e181cd1096f49f82411c55cfa37a71c9529e.roa
Signing time:             Wed 26 May 2021 17:14:31 +0000
ROA not before:           Wed 26 May 2021 03:00:00 +0000
ROA not after:            Fri 26 May 2023 03:00:00 +0000
asID:                     53856
IP address blocks:        45.170.13.0/24 maxlen: 24
                          45.170.14.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1671 (0x687)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5a387f4a9acf838009dd751d84c60b7ecb56ec8
        Validity
            Not Before: May 26 03:00:00 2021 GMT
            Not After : May 26 03:00:00 2023 GMT
        Subject: CN=4524e181cd1096f49f82411c55cfa37a71c9529e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ef:49:c7:b5:66:5a:9f:76:57:85:e7:41:ef:
                    ce:aa:1c:f8:87:33:26:75:40:b6:94:d0:3b:78:c9:
                    1d:39:6a:6f:b7:9c:a4:27:65:57:9c:d3:be:5d:ca:
                    40:1c:d6:88:45:79:ad:6a:0c:5e:46:14:3d:df:ad:
                    0a:b2:e1:cd:dd:cd:1a:fe:40:f6:7a:98:5d:e6:42:
                    51:30:69:65:1d:bd:0c:11:0f:c7:6a:ef:aa:65:78:
                    26:ac:32:20:99:c4:b5:40:08:b5:ec:94:d9:43:51:
                    a0:48:47:73:ba:2c:33:2f:40:f7:fc:8a:8c:c2:17:
                    3b:ef:75:a2:10:47:13:42:43:a4:5c:69:cc:0f:22:
                    b2:6f:e8:da:07:3f:a2:dc:f1:38:64:42:31:d7:81:
                    cd:f2:37:4c:95:27:da:fb:bb:cf:bc:62:31:e5:9f:
                    be:ad:5c:18:7b:7d:dd:aa:a0:0d:89:db:50:9e:f2:
                    a0:d9:fc:b1:42:3a:fb:27:6a:98:71:23:4d:ed:c7:
                    f3:04:85:c3:91:ce:2c:42:29:8e:d7:51:c3:4a:26:
                    e2:5c:f8:a6:ba:c4:6d:42:ca:0e:99:1e:b7:72:2f:
                    7d:64:f0:8c:32:0a:5a:50:43:d8:d5:ab:64:99:10:
                    44:74:64:76:14:43:1e:8e:40:0e:3b:cd:84:87:b0:
                    82:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F7:5F:74:A8:11:68:BB:94:4E:F8:B1:B1:FF:67:AD:D7:A0:74:28
            X509v3 Authority Key Identifier:
                keyid:F9:F5:C8:A1:2F:E2:07:DD:F5:13:CA:8A:D5:F8:4E:66:4A:EA:8B:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5a387f4a9acf838009dd751d84c60b7ecb56ec8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/4524e181cd1096f49f82411c55cfa37a71c9529e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/b5a387f4a9acf838009dd751d84c60b7ecb56ec8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.13.0-45.170.15.255

    Signature Algorithm: sha256WithRSAEncryption
         15:30:fd:87:68:2c:a7:8d:ea:f4:b1:7c:dc:5a:75:8d:e4:a5:
         ac:89:f1:01:52:63:aa:99:cd:6c:7f:7d:5c:33:fd:63:4f:7e:
         24:49:69:31:ee:27:5b:31:29:4c:ce:10:f6:2c:3e:57:65:8b:
         b0:61:36:cf:49:81:58:d8:7b:b4:28:f2:f9:37:04:0c:80:7d:
         37:8a:32:98:80:58:2b:f5:15:c6:ea:f8:c5:8a:e5:ca:9b:7b:
         4b:bf:59:0f:20:e8:d0:6f:b1:60:a8:9b:c0:d7:ba:7b:b6:3f:
         7f:9b:c9:3b:99:6e:af:d4:2c:d9:4e:be:8a:58:08:1c:80:aa:
         42:a3:23:21:9b:59:19:d4:92:9d:e0:6e:b0:fe:2b:29:fe:5a:
         66:de:23:47:81:83:50:52:14:37:99:81:4b:2e:24:26:18:68:
         d0:ad:32:79:1d:73:00:ec:57:f9:bb:6b:5c:1e:61:f0:07:24:
         ad:5e:5a:a1:c0:71:c7:54:31:f2:b1:b3:60:51:46:0e:29:4c:
         e9:50:92:55:2f:e2:0d:50:a6:2b:60:27:9e:5f:55:ca:da:cb:
         1a:e6:50:b0:29:dc:c6:8f:4e:21:20:13:e1:71:07:36:8b:bf:
         67:cb:92:26:c2:86:bd:dd:ac:f8:e9:95:e8:aa:32:e8:3c:83:
         dd:ed:24:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----