Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/d9d72aa1726d3cd4e98d191ade3e81397f7b3d3f.roa
File:                     d9d72aa1726d3cd4e98d191ade3e81397f7b3d3f.roa (raw, json)
Hash identifier:          ypuWBQgVkb1sKetyZkyiTVUI6k51kkwBvACnuy+gegY=
Subject key identifier:   06:F0:E6:B9:EE:40:42:11:45:1F:53:79:44:77:BA:84:64:76:2E:ED
Certificate issuer:       /CN=96fbc1b8c542f9384f9a2004e66a61080248cdc6
Certificate serial:       0D4BDF
Authority key identifier: 08:13:39:09:AC:82:C2:8D:B1:37:8F:72:53:42:C9:9F:9F:8D:53:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96fbc1b8c542f9384f9a2004e66a61080248cdc6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/d9d72aa1726d3cd4e98d191ade3e81397f7b3d3f.roa
Signing time:             Wed 24 Mar 2021 14:47:21 +0000
ROA not before:           Wed 24 Mar 2021 14:47:21 +0000
ROA not after:            Tue 24 Mar 2026 14:47:21 +0000
asID:                     264731
IP address blocks:        186.167.240.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871391 (0xd4bdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96fbc1b8c542f9384f9a2004e66a61080248cdc6
        Validity
            Not Before: Mar 24 14:47:21 2021 GMT
            Not After : Mar 24 14:47:21 2026 GMT
        Subject: CN=d9d72aa1726d3cd4e98d191ade3e81397f7b3d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2f:e7:a4:ba:6f:46:01:70:5a:c3:75:34:8b:
                    76:99:87:9a:1c:bd:da:10:dc:91:f8:28:5d:81:3d:
                    64:11:78:13:69:91:32:30:c9:30:02:a5:c4:31:dc:
                    8e:1f:bb:85:36:19:10:97:c6:5a:26:a7:08:be:72:
                    07:db:53:fd:02:23:a7:04:06:91:75:39:94:26:52:
                    1a:2e:b9:1e:da:f0:b4:32:32:ed:79:b5:ad:3e:bd:
                    49:d3:8d:af:8c:d8:f7:8d:12:f3:92:96:d3:9d:32:
                    e0:39:d6:4c:11:ea:8c:70:2f:dc:a1:8e:07:f1:e8:
                    2a:b0:64:7e:f9:c3:26:ad:e1:7f:1b:cb:55:20:d3:
                    d5:11:b8:8a:77:9a:63:3f:f8:8e:11:cc:27:aa:e2:
                    38:0f:fa:8f:ed:1d:1b:ad:48:3e:43:28:3f:f5:19:
                    e1:52:41:3b:a6:cb:4f:1d:3f:5a:e1:da:4a:43:6c:
                    99:7f:db:ac:55:c4:41:b7:36:17:7f:97:bb:6f:ea:
                    ff:e9:3f:96:ab:70:8c:7c:90:01:79:06:63:7e:8e:
                    51:1b:e8:79:23:25:3d:c8:65:7c:fb:aa:f5:1b:2f:
                    69:89:6d:e3:9f:fc:f3:e9:df:17:26:d5:b3:33:9a:
                    8c:a5:0a:17:1f:4d:37:e1:81:5f:9f:30:17:40:f1:
                    8e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F0:E6:B9:EE:40:42:11:45:1F:53:79:44:77:BA:84:64:76:2E:ED
            X509v3 Authority Key Identifier:
                keyid:08:13:39:09:AC:82:C2:8D:B1:37:8F:72:53:42:C9:9F:9F:8D:53:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96fbc1b8c542f9384f9a2004e66a61080248cdc6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/d9d72aa1726d3cd4e98d191ade3e81397f7b3d3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/96fbc1b8c542f9384f9a2004e66a61080248cdc6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.167.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         29:6d:af:fc:62:f8:de:7c:4b:d4:4b:18:84:9c:f3:65:8e:8a:
         00:6a:c2:b6:99:25:88:e0:30:a9:6f:82:8d:c6:8a:a1:52:d3:
         f5:f7:2e:d4:f0:d1:ec:64:a1:df:0b:06:74:22:44:23:51:9d:
         9b:63:d3:35:48:5a:15:ad:60:c8:ff:1a:e7:f1:6c:1a:fd:de:
         70:95:ca:ea:e7:ae:b2:3f:e8:f8:9c:9f:cc:86:3a:4c:b3:ba:
         1e:e6:2a:f3:4d:4a:73:40:fd:e0:3b:b8:4e:a0:e4:29:6b:9d:
         7b:c3:3d:4b:bd:b3:36:8e:92:5e:f3:a4:ff:0f:a8:54:57:06:
         6d:f3:b4:c6:cb:5e:2b:6c:bf:6e:ee:9e:b7:ea:93:18:9c:82:
         d4:48:ed:48:db:df:fc:36:b4:a7:92:e5:3c:b0:b1:6e:36:4f:
         3f:89:be:5a:a7:8a:72:2f:d8:52:0c:df:a7:9e:cb:63:94:8d:
         a0:26:e7:6a:20:ad:27:7a:e5:39:61:24:83:2e:e2:5c:57:25:
         7e:27:30:a7:df:4b:60:26:81:b7:ac:fa:4f:99:c0:08:30:42:
         f8:32:f8:cb:ab:25:57:80:32:bc:e8:a2:39:12:44:f6:e4:51:
         7a:4c:66:ad:dc:61:25:4c:a3:e7:da:a6:3e:90:b5:8d:75:00:
         b2:06:ea:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----