Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/662d5bfd8766a291096ef5b9e788947d19d9c91c.roa
File:                     662d5bfd8766a291096ef5b9e788947d19d9c91c.roa (raw, json)
Hash identifier:          BSPZ1VGw4Y8src8Ei1hypMrX7NjnEvjQcPvub1X7FpU=
Subject key identifier:   29:E3:39:10:1F:F6:74:B6:EE:32:96:D2:9A:EA:7F:84:58:25:C4:B9
Certificate issuer:       /CN=3c8bc735a993962fcbd639234bae2ac1d5a1f158
Certificate serial:       0CF1B2
Authority key identifier: DB:E4:59:72:55:05:B3:41:FB:F5:DD:98:92:70:00:46:1C:A0:70:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3c8bc735a993962fcbd639234bae2ac1d5a1f158.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/662d5bfd8766a291096ef5b9e788947d19d9c91c.roa
Signing time:             Wed 24 Mar 2021 14:45:16 +0000
ROA not before:           Wed 24 Mar 2021 14:45:16 +0000
ROA not after:            Tue 24 Mar 2026 14:45:16 +0000
asID:                     28005
IP address blocks:        138.118.124.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 848306 (0xcf1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c8bc735a993962fcbd639234bae2ac1d5a1f158
        Validity
            Not Before: Mar 24 14:45:16 2021 GMT
            Not After : Mar 24 14:45:16 2026 GMT
        Subject: CN=662d5bfd8766a291096ef5b9e788947d19d9c91c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fc:51:67:04:ec:99:e8:27:52:33:d7:51:3d:
                    c9:2f:18:8c:90:05:b8:a5:5f:e1:82:d4:44:17:39:
                    6a:48:f0:29:e8:31:7c:e9:70:70:d6:7b:22:71:d2:
                    cb:d3:c1:1c:8c:42:86:c7:15:6e:69:b0:3d:e8:df:
                    2f:87:d7:8a:df:d8:ae:2e:ed:82:f4:72:d5:ae:0a:
                    ee:01:9b:9c:5f:91:d1:94:1d:fa:d9:b4:a4:df:69:
                    62:a4:5d:41:8f:c2:f6:57:55:20:8c:b6:37:19:ab:
                    9f:b2:14:d3:66:aa:a8:ec:f2:1b:e2:8e:4d:3b:12:
                    77:78:e3:19:a5:77:60:02:51:66:29:6d:c0:03:91:
                    e6:12:82:71:a1:59:21:ed:7a:36:cb:28:65:9b:22:
                    63:ca:08:c0:8b:9b:09:28:22:58:0c:ff:3d:03:43:
                    a5:99:97:8f:67:2e:15:e6:95:fc:33:4f:6b:15:65:
                    74:04:e7:f5:f3:c8:be:50:3a:8b:4a:26:dd:82:a3:
                    c8:c3:b5:d3:01:a7:fd:66:08:f1:01:f6:0e:06:fb:
                    cf:29:d7:e4:48:0c:b6:0c:93:31:8a:c0:cf:7c:18:
                    ed:86:7f:58:7a:e7:c0:b3:e9:95:e5:1f:6b:70:fd:
                    77:31:6c:e8:0d:37:85:9e:dc:ff:23:fc:c1:43:ef:
                    eb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E3:39:10:1F:F6:74:B6:EE:32:96:D2:9A:EA:7F:84:58:25:C4:B9
            X509v3 Authority Key Identifier:
                keyid:DB:E4:59:72:55:05:B3:41:FB:F5:DD:98:92:70:00:46:1C:A0:70:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3c8bc735a993962fcbd639234bae2ac1d5a1f158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/662d5bfd8766a291096ef5b9e788947d19d9c91c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/3c8bc735a993962fcbd639234bae2ac1d5a1f158.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:2b:f9:14:76:92:c8:ff:cb:5d:dc:8b:eb:a2:62:47:0e:c5:
         5a:37:e6:13:a0:55:8b:d2:1d:0c:3a:bb:3e:28:6a:3a:b3:46:
         6f:fb:3d:60:ea:ad:02:05:9b:fa:2f:b5:27:91:c3:52:83:a9:
         38:87:03:4c:8d:42:a0:61:19:13:9f:00:9b:22:98:80:06:dc:
         52:1d:b4:2a:bf:8f:1d:ea:63:88:4a:5d:78:3a:dd:80:e9:c5:
         e9:d7:e7:66:c8:78:5b:85:4f:d0:6f:87:3f:6a:1c:fb:e3:8a:
         07:9d:00:85:cf:08:70:33:84:b9:2e:18:1c:6e:f5:04:47:06:
         55:4d:f8:c3:14:0a:5c:1a:42:f1:c1:00:a6:b4:f0:1a:a7:2e:
         88:b9:bd:05:3f:b6:71:be:56:46:8b:07:46:9e:72:95:7b:29:
         90:1c:61:4a:8a:36:32:5f:ae:6e:3f:d0:b4:cb:fe:f1:3c:09:
         90:a3:26:21:f5:dc:6b:63:2a:cc:a3:58:48:97:32:6f:03:db:
         cb:91:10:af:1c:bc:54:2f:b5:01:1f:67:d6:91:57:21:84:fa:
         2c:13:74:02:dc:55:b2:05:39:53:74:45:47:ec:20:af:ed:a2:
         8e:fc:13:02:ab:cd:7f:a1:f8:22:96:9f:38:8a:b8:24:25:14:
         df:1f:34:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----