Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1e998e7d-3bbb-4428-829a-e5d6196b07a0/51388ae6542acc532c60303953a3cd7081b1e9b1.roa
File:                     51388ae6542acc532c60303953a3cd7081b1e9b1.roa (raw, json)
Hash identifier:          +bIof70xPNA8zFxiWk5P+EhWKxaJFClcdHPD7jFhAIs=
Subject key identifier:   98:88:83:2E:6A:2A:9D:8B:92:24:3E:D4:6D:F4:AA:3D:59:3C:0F:26
Certificate issuer:       /CN=e8b0cd1e4a0d525f74d4cc86b3474f9867ca63ed
Certificate serial:       0D12D4
Authority key identifier: 9E:3D:EA:02:F3:CA:3F:DF:F6:23:91:72:D2:FB:E8:B3:D2:7C:F2:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8b0cd1e4a0d525f74d4cc86b3474f9867ca63ed.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1e998e7d-3bbb-4428-829a-e5d6196b07a0/51388ae6542acc532c60303953a3cd7081b1e9b1.roa
Signing time:             Mon 27 Nov 2023 16:51:44 +0000
ROA not before:           Mon 27 Nov 2023 16:51:44 +0000
ROA not after:            Thu 27 Nov 2025 16:51:44 +0000
asID:                     269814
IP address blocks:        45.186.24.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 856788 (0xd12d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b0cd1e4a0d525f74d4cc86b3474f9867ca63ed
        Validity
            Not Before: Nov 27 16:51:44 2023 GMT
            Not After : Nov 27 16:51:44 2025 GMT
        Subject: CN=51388ae6542acc532c60303953a3cd7081b1e9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:75:c2:4b:f6:98:f0:b2:97:ae:d1:5a:f7:61:
                    8e:d4:b7:88:4b:c7:94:86:75:30:c0:90:4a:c6:16:
                    59:0e:3b:ca:d2:21:22:7f:8b:a0:82:8f:42:d2:94:
                    ce:2c:21:88:75:92:5e:a9:f2:0a:29:33:2d:3a:f4:
                    7f:05:dc:78:9f:00:97:60:54:85:cd:cc:20:8d:04:
                    c5:12:ab:fe:cf:fd:37:e5:4a:b9:74:16:9a:c1:34:
                    50:98:f2:32:e5:f1:a9:2a:d6:fb:3f:79:72:2d:42:
                    1f:0b:e9:81:68:41:68:37:02:84:14:9a:71:06:1d:
                    67:06:a7:f9:99:bc:e4:50:7d:8f:26:a7:ef:27:5c:
                    86:db:1d:4f:05:7f:b3:8f:f7:f5:10:d2:88:8a:ba:
                    5b:ea:f1:95:53:50:19:08:e6:67:ad:74:e2:17:b3:
                    c7:8c:bf:32:e2:c6:8b:48:98:f5:e4:ea:55:29:45:
                    55:84:c2:05:3c:67:95:d7:c5:22:1c:09:ef:7b:d2:
                    4b:64:b2:ee:9e:72:12:42:19:d6:89:15:1b:6c:03:
                    d2:9a:20:02:33:75:1c:57:ed:23:8f:9d:c5:bb:1f:
                    dd:a1:df:81:cf:64:79:9b:2c:db:2e:48:da:ff:34:
                    0a:2d:34:8d:60:8e:45:e9:b9:7a:9d:72:83:84:c6:
                    a2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:88:83:2E:6A:2A:9D:8B:92:24:3E:D4:6D:F4:AA:3D:59:3C:0F:26
            X509v3 Authority Key Identifier:
                keyid:9E:3D:EA:02:F3:CA:3F:DF:F6:23:91:72:D2:FB:E8:B3:D2:7C:F2:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8b0cd1e4a0d525f74d4cc86b3474f9867ca63ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1e998e7d-3bbb-4428-829a-e5d6196b07a0/51388ae6542acc532c60303953a3cd7081b1e9b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1e998e7d-3bbb-4428-829a-e5d6196b07a0/e8b0cd1e4a0d525f74d4cc86b3474f9867ca63ed.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:1f:dd:e1:c7:2f:2a:ee:cc:02:ea:28:ee:54:8c:f7:00:07:
         4b:c9:aa:96:fb:93:c9:75:39:31:1a:d4:81:4e:9c:bd:86:e6:
         b8:bf:24:be:25:86:ef:09:a0:5f:6b:8f:10:b1:93:0b:0a:21:
         37:23:9c:0b:4e:10:54:07:08:60:72:8c:0b:09:9b:c3:11:42:
         95:3c:3f:5d:52:0c:0b:22:0c:cb:dd:20:f4:54:00:0c:fc:b2:
         00:96:c8:f4:df:6f:c5:1f:b9:1d:d3:91:58:6c:39:c1:50:7e:
         ee:c5:5e:1a:40:40:3a:93:c9:74:1d:27:db:d8:62:30:dc:03:
         e6:04:57:d6:8e:77:14:2a:33:6f:87:e5:e6:f2:e4:72:3e:1b:
         2f:9c:e6:1c:b7:c5:3d:5a:b4:b7:b4:52:71:1f:fc:40:47:9a:
         9c:55:a9:46:f5:e7:dd:d4:99:14:b0:bb:fc:7c:8a:d1:e9:7f:
         b5:78:62:30:b2:5b:40:e0:50:2e:27:a0:b0:a4:31:89:5f:fc:
         d9:0d:7d:70:d1:e4:b5:3f:ff:46:4d:ed:76:ac:5b:77:2a:2e:
         e7:b6:77:92:4a:f8:1f:7f:78:1e:ef:43:d8:45:49:59:f8:2b:
         5c:0d:69:65:0b:e4:b6:ac:22:59:28:22:af:a5:8f:47:f2:cf:
         55:11:1e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----