Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/39b7c084a9e4f374b6ab2e8472e8594fbe547e86.roa
File:                     39b7c084a9e4f374b6ab2e8472e8594fbe547e86.roa (raw, json)
Hash identifier:          raypyqecGJLmtIlstFOS5NUBqVHJNypylmoVqjaDV34=
Subject key identifier:   15:50:08:DE:90:2D:E1:25:C2:D2:6D:50:26:BF:6A:EA:AE:6C:23:6D
Certificate issuer:       /CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
Certificate serial:       0E61F6
Authority key identifier: 61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/39b7c084a9e4f374b6ab2e8472e8594fbe547e86.roa
Signing time:             Wed 24 Mar 2021 14:36:23 +0000
ROA not before:           Wed 24 Mar 2021 14:36:23 +0000
ROA not after:            Tue 24 Mar 2026 14:36:23 +0000
asID:                     3816
IP address blocks:        190.96.240.0/21 maxlen: 22
                          190.96.248.0/21 maxlen: 22
                          190.96.152.0/21 maxlen: 22
                          190.96.136.0/21 maxlen: 22
                          190.96.144.0/21 maxlen: 22
                          190.96.200.0/21 maxlen: 22
                          190.13.16.0/21 maxlen: 23
                          190.13.48.0/21 maxlen: 22
                          190.13.56.0/21 maxlen: 22
                          190.96.224.0/20 maxlen: 22
                          190.96.184.0/21 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 942582 (0xe61f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
        Validity
            Not Before: Mar 24 14:36:23 2021 GMT
            Not After : Mar 24 14:36:23 2026 GMT
        Subject: CN=39b7c084a9e4f374b6ab2e8472e8594fbe547e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d8:46:52:b5:8e:af:7b:c2:58:ea:05:e4:74:
                    77:39:5d:2b:67:3c:80:3c:f3:bc:b5:b4:1b:d7:1c:
                    1c:b9:0c:30:ff:66:b6:b1:3c:4f:57:dd:30:d1:d8:
                    7b:3a:d8:a1:5c:d8:03:af:1e:32:6d:35:2c:a1:0c:
                    fe:6e:28:7b:81:51:fb:1f:6e:c1:51:7a:e8:5d:ee:
                    17:75:80:7d:d9:09:6f:8e:36:5f:a1:62:69:a3:ac:
                    c8:fa:92:3b:84:6c:76:0f:ed:2e:1f:09:b3:13:ed:
                    00:83:29:85:d5:5e:2b:cc:21:e5:df:79:10:b2:d4:
                    94:da:1c:e9:03:5c:cf:10:02:4f:0a:07:32:24:e5:
                    4f:1e:88:4d:41:37:26:70:c5:43:6f:1a:d3:0b:b6:
                    ed:4c:1d:94:5f:c0:f9:d7:55:1c:45:e0:48:6a:3d:
                    ab:5b:ac:f1:94:f9:c6:b6:48:14:00:bc:c0:fd:62:
                    a9:46:2d:76:ae:fa:ea:ad:76:e8:95:87:e3:87:dc:
                    24:47:b1:b8:a7:af:04:51:af:92:9f:12:84:65:9f:
                    d1:7e:af:81:6d:b4:e5:b4:f1:1c:18:51:1d:05:2f:
                    c0:fc:98:c2:14:24:ac:80:b1:6b:bb:81:39:f3:f4:
                    b7:ae:18:9b:fe:96:e1:cb:50:ce:a7:85:b3:b6:26:
                    5a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:50:08:DE:90:2D:E1:25:C2:D2:6D:50:26:BF:6A:EA:AE:6C:23:6D
            X509v3 Authority Key Identifier:
                keyid:61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/39b7c084a9e4f374b6ab2e8472e8594fbe547e86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/337d330947d264c81b4503df3b1ef67d45cc2dc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.16.0/21
                  190.13.48.0/20
                  190.96.136.0-190.96.159.255
                  190.96.184.0/21
                  190.96.200.0/21
                  190.96.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         82:40:86:9c:0b:1d:94:db:f4:51:22:4a:27:a4:b1:52:d6:26:
         85:68:54:d0:5f:3e:b9:80:57:01:6b:e5:e6:0a:62:a5:b9:7f:
         11:32:1d:f6:79:ff:e8:6e:ee:44:2f:21:43:74:b2:15:ac:10:
         ac:cc:da:b8:64:a8:95:9a:e2:e9:4c:3a:cb:83:35:6e:cf:8c:
         d0:b1:e2:63:ec:07:1e:4f:4d:ba:b4:ac:b1:3f:68:a5:71:fc:
         f7:b5:a5:8c:34:c4:52:18:9a:89:df:5c:6f:8f:a3:94:f7:19:
         35:23:1a:31:00:f1:17:82:66:06:5c:6f:c8:6e:f3:b3:ac:d3:
         4e:17:cb:3d:c7:f0:4f:ec:6e:e3:4d:aa:ca:43:6c:11:ae:8f:
         6e:3c:f8:3d:d8:c2:61:a6:13:de:e9:cd:c0:5f:5d:4a:cc:f3:
         1b:5d:97:e7:26:0b:57:cc:20:c4:4d:82:ad:bd:15:08:e5:59:
         82:4b:6c:ac:75:be:79:17:7f:61:14:2d:fb:e0:16:3f:e0:91:
         f7:9f:33:7c:e9:4e:ee:0e:84:08:ee:b1:6c:1c:48:c3:16:07:
         ea:2c:fe:dd:c0:af:04:ac:19:df:77:29:40:6e:f2:1d:cc:d5:
         0c:bc:35:e0:39:01:f0:bd:c8:2e:4e:4b:9d:00:82:e7:4f:f8:
         95:fb:cd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----