Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/feef9e8f-705c-4481-871a-46a975913737/97918d0c21884cbe37da9ecd6d9055c74f257bcf.roa
File:                     97918d0c21884cbe37da9ecd6d9055c74f257bcf.roa (raw, json)
Hash identifier:          rZIx+vcPxGnrnaPtuYcOl5KzrwGYkQWlmRli8/XrVgM=
Subject key identifier:   97:FD:92:65:47:94:C0:FA:B9:D4:B1:6C:E3:B9:08:A5:D1:CB:29:28
Certificate issuer:       /CN=3065f6a5a133325f3e525bfe0703a202498f6a21
Certificate serial:       03B360
Authority key identifier: 4E:69:B9:74:58:23:F1:B9:D6:1F:0A:FB:8D:CB:8B:86:88:70:BA:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3065f6a5a133325f3e525bfe0703a202498f6a21.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/feef9e8f-705c-4481-871a-46a975913737/97918d0c21884cbe37da9ecd6d9055c74f257bcf.roa
Signing time:             Fri 17 Sep 2021 16:15:51 +0000
ROA not before:           Thu 15 Apr 2021 03:00:00 +0000
ROA not after:            Sat 15 Apr 2023 03:00:00 +0000
asID:                     267857
IP address blocks:        45.7.132.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242528 (0x3b360)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3065f6a5a133325f3e525bfe0703a202498f6a21
        Validity
            Not Before: Apr 15 03:00:00 2021 GMT
            Not After : Apr 15 03:00:00 2023 GMT
        Subject: CN=97918d0c21884cbe37da9ecd6d9055c74f257bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:54:b0:68:9f:86:e5:aa:1d:8d:45:ea:54:0c:
                    a2:ec:92:c3:2a:90:bc:12:0a:07:c6:28:d6:2e:a6:
                    19:f3:39:ef:f1:3c:93:87:e0:83:95:a9:64:5c:c8:
                    c9:d8:e0:47:40:43:ac:88:84:70:3d:26:4f:06:23:
                    cf:ea:b5:f4:f4:7b:24:58:a2:46:51:ec:a8:d1:df:
                    0d:96:9e:02:6d:a9:32:93:86:fd:83:d1:ac:12:f2:
                    c8:d0:11:a9:4e:05:9d:b5:f4:44:ef:a3:89:46:82:
                    01:ad:9e:db:b7:26:b7:79:d1:a9:49:0c:a4:3e:bf:
                    54:59:b2:b5:c2:eb:9a:ad:c4:67:49:62:9b:bc:b3:
                    4d:ed:5e:00:6b:9f:b4:ae:0f:bc:29:55:cb:0b:b6:
                    ce:9a:48:bb:8a:23:a1:38:77:bd:82:f9:71:c6:30:
                    54:97:cc:96:30:18:f1:8e:e2:9f:89:14:7f:3e:44:
                    d4:27:b9:4e:e2:d7:ce:89:4b:54:36:91:32:7e:31:
                    1b:2c:86:da:05:ba:11:98:c1:5f:68:c8:0a:84:71:
                    64:58:e2:12:f3:23:01:2b:83:ff:8a:5a:06:08:36:
                    f7:5d:a1:12:47:93:34:96:20:d4:c0:f7:62:02:7c:
                    7f:7c:97:83:42:7c:fa:81:36:2a:47:ad:95:fe:95:
                    ca:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FD:92:65:47:94:C0:FA:B9:D4:B1:6C:E3:B9:08:A5:D1:CB:29:28
            X509v3 Authority Key Identifier:
                keyid:4E:69:B9:74:58:23:F1:B9:D6:1F:0A:FB:8D:CB:8B:86:88:70:BA:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3065f6a5a133325f3e525bfe0703a202498f6a21.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/feef9e8f-705c-4481-871a-46a975913737/97918d0c21884cbe37da9ecd6d9055c74f257bcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/feef9e8f-705c-4481-871a-46a975913737/3065f6a5a133325f3e525bfe0703a202498f6a21.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:c5:73:f5:8f:1d:a9:89:14:0a:8c:2a:19:e6:03:01:71:80:
         d7:88:ac:d6:01:e5:13:24:7e:13:f3:b3:90:4a:1f:35:ee:df:
         fe:db:3d:75:c1:b1:f6:e7:0a:57:c5:b2:fd:38:53:bc:70:5e:
         e2:e1:31:50:3e:00:03:19:01:cf:c6:29:43:b1:2a:da:80:f7:
         3b:2e:0b:4d:39:67:1e:f1:7c:af:f4:4a:ce:dc:25:ba:7a:82:
         1e:7b:7e:45:5f:58:ee:14:34:31:a2:a1:aa:76:ff:14:ef:ef:
         f5:cf:dc:df:8d:e4:ed:46:cb:80:2d:a1:2c:8c:bd:98:ff:fe:
         f9:27:2f:47:5a:72:a7:63:0c:87:57:8c:39:2f:ca:26:14:75:
         38:98:8f:39:0f:07:a8:cf:4a:66:6e:b4:3e:2f:bd:ce:36:26:
         d8:18:a5:0e:c1:d0:88:7e:3b:99:3c:51:58:2d:be:b4:ea:e8:
         1b:3c:ff:ef:4d:73:a9:4b:ac:8b:ed:6b:5a:43:d8:a1:9b:88:
         7e:18:79:ba:d7:d5:b8:28:81:34:6a:fa:92:21:df:11:ab:1d:
         8a:01:54:13:95:71:1a:b7:be:07:db:f8:1f:0e:5c:8d:cb:3e:
         ee:49:db:1f:68:3d:28:26:dc:c3:c4:9f:8b:f2:aa:f0:a9:02:
         30:b9:f6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----