Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/ccbb0474996f8dc0fd386335a8e47c969c2b8a6d.roa
File:                     ccbb0474996f8dc0fd386335a8e47c969c2b8a6d.roa (raw, json)
Hash identifier:          nI6c4DAijLlUTwCT8kQIXibycrQjoDeaS5KZO/0cz6M=
Subject key identifier:   79:B4:53:2C:CD:DA:97:A9:12:6C:DC:D0:1B:4D:FC:92:AD:25:20:13
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0EF3FE
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/ccbb0474996f8dc0fd386335a8e47c969c2b8a6d.roa
Signing time:             Wed 24 Mar 2021 14:29:32 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.205.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 979966 (0xef3fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=ccbb0474996f8dc0fd386335a8e47c969c2b8a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:41:11:ba:b7:73:d8:74:f6:96:7f:78:0c:0b:
                    9a:7e:6b:16:be:6d:ab:e4:70:e9:d0:d5:cc:c2:4d:
                    d0:00:a2:30:8c:62:94:55:38:e8:e4:86:61:e1:db:
                    57:f6:12:81:57:c1:a6:bb:20:8c:f0:ba:96:4d:b4:
                    8b:8c:64:2a:48:ba:9a:9e:2b:f4:74:60:14:f4:b7:
                    a7:b6:a7:ef:47:a2:8b:51:ca:5b:e9:c1:58:c8:39:
                    cb:85:92:45:6c:6b:2e:1f:33:3e:a9:b3:85:64:3d:
                    17:d5:43:1e:3a:63:c1:eb:a9:74:0d:c8:42:63:aa:
                    b0:83:8e:d1:b0:33:3c:04:74:39:16:a8:1e:a4:49:
                    0b:a0:f0:90:d0:05:77:ff:ab:39:dd:7f:41:4e:fe:
                    c5:bf:6b:55:03:e2:9b:64:e5:38:55:df:c9:7c:e8:
                    37:02:12:96:06:30:cd:2d:1c:27:dd:0b:bb:db:10:
                    e9:95:87:08:cf:c2:42:84:24:a0:6b:3f:c7:3f:46:
                    8c:1f:57:c5:3d:87:7f:e3:e6:a0:bf:e2:5b:a6:d9:
                    e8:b7:7c:d1:51:0c:d4:8c:21:b7:f4:97:4d:ee:2d:
                    70:0e:f4:87:55:49:f3:19:4b:b4:50:28:cd:65:25:
                    79:28:f7:b1:bd:96:38:e3:0b:3d:1b:7c:22:ae:51:
                    c3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B4:53:2C:CD:DA:97:A9:12:6C:DC:D0:1B:4D:FC:92:AD:25:20:13
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/ccbb0474996f8dc0fd386335a8e47c969c2b8a6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:1f:28:f6:08:07:f3:38:79:45:39:2f:21:a6:ce:ac:7d:bf:
         2b:fb:64:73:45:4e:6a:c4:ff:5e:74:46:a5:1b:19:9e:1f:12:
         96:84:5f:bf:a3:c2:cd:14:d8:97:4f:4f:de:b4:cc:75:7d:c5:
         64:80:cf:27:67:1a:52:be:f0:1a:50:2a:2b:7f:80:72:3e:a2:
         f0:72:c6:65:2a:6f:87:ba:17:ff:c9:11:86:81:49:5b:21:eb:
         68:7c:d3:5b:19:45:e4:8f:5c:cd:ad:a1:f0:59:91:f4:a2:4f:
         42:8c:45:c7:d3:38:81:d7:a0:1a:fa:a8:31:86:43:9e:5f:e6:
         d7:c3:af:50:ee:13:90:e2:02:12:86:72:d2:7f:a6:73:0c:24:
         36:e0:da:7b:51:82:80:20:2f:a2:d5:0d:b8:27:90:83:4e:fd:
         69:4b:38:ea:d1:d0:b3:2f:24:58:16:2d:ff:e4:1b:58:08:a0:
         14:ac:e6:36:70:10:9c:22:ba:ea:b0:67:ed:af:d9:23:96:1d:
         fc:02:89:ef:8b:ba:46:52:52:d3:c1:03:91:65:09:20:85:b4:
         99:c8:d6:4c:8a:b3:e5:d7:3e:87:89:59:49:d4:ee:ee:d3:52:
         eb:7f:07:7a:ab:9a:2a:a2:42:4a:02:b5:1c:ff:ad:d4:d5:7f:
         a7:30:18:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----