Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0269a6a4-877f-439e-ac3e-8766c178f941/ab550951567cdca1765f53a37fe53cfd31a8497b.roa
File:                     ab550951567cdca1765f53a37fe53cfd31a8497b.roa (raw, json)
Hash identifier:          k1m/uNJRd+2vmnNxdibLCBNcl9KW3sbEehYro+bITj4=
Subject key identifier:   0B:9B:E5:D1:35:9E:2F:EF:6E:06:71:19:9F:C0:BB:49:B4:23:FB:30
Certificate issuer:       /CN=7eee271396be12d91db16eae558df87246f5bda1
Certificate serial:       0DB715
Authority key identifier: 91:72:48:99:ED:4D:B4:8B:0F:1B:E0:08:66:A4:53:15:F6:66:4B:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7eee271396be12d91db16eae558df87246f5bda1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0269a6a4-877f-439e-ac3e-8766c178f941/ab550951567cdca1765f53a37fe53cfd31a8497b.roa
Signing time:             Wed 07 Apr 2021 07:12:18 +0000
ROA not before:           Tue 06 Apr 2021 03:00:00 +0000
ROA not after:            Thu 06 Apr 2023 03:00:00 +0000
asID:                     52250
IP address blocks:        200.9.165.0/24 maxlen: 24
                          200.9.166.0/24 maxlen: 24
                          200.9.167.0/24 maxlen: 24
                          200.9.168.0/24 maxlen: 24
                          166.114.1.0/24 maxlen: 24
                          2001:1378::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898837 (0xdb715)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eee271396be12d91db16eae558df87246f5bda1
        Validity
            Not Before: Apr  6 03:00:00 2021 GMT
            Not After : Apr  6 03:00:00 2023 GMT
        Subject: CN=ab550951567cdca1765f53a37fe53cfd31a8497b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:49:c9:f1:98:9c:77:21:e3:e1:35:65:32:0b:
                    35:8e:a6:44:b5:57:5c:9f:bf:a4:15:1d:55:ba:86:
                    f5:51:64:23:f5:af:f0:69:81:48:6f:31:6a:1d:f8:
                    0a:1d:9b:4a:ea:fc:1c:d1:f4:38:bf:cf:84:c2:b8:
                    67:26:ba:69:af:4d:71:a0:5f:4d:d7:ac:72:73:38:
                    0f:44:05:cb:f1:41:4c:ef:b9:d1:47:d4:6b:62:28:
                    96:f9:4e:fd:b2:93:cb:d0:2b:d1:a2:40:be:a5:e2:
                    cc:01:fd:fc:fb:bf:60:06:50:00:4f:c4:e0:14:46:
                    99:c2:97:ef:65:2e:42:c1:31:af:5c:86:bd:f0:58:
                    64:a2:7f:1f:4b:9a:59:87:13:90:db:2c:d9:3a:fd:
                    bb:16:a7:d7:df:90:f4:b7:77:80:61:24:7f:0c:bf:
                    f1:37:9e:dd:07:88:be:f2:f4:de:da:74:d6:33:9d:
                    22:3a:65:68:80:4c:05:30:65:32:6b:da:6b:0d:43:
                    70:23:f8:7f:4c:69:1f:de:df:69:16:d1:4b:0e:b2:
                    db:75:9a:21:62:45:bb:50:51:1f:d7:e0:d7:91:d6:
                    b8:30:cb:1b:11:ee:ff:1d:b0:06:95:5d:75:56:a0:
                    e0:6f:9b:85:8b:a4:4a:95:af:17:00:5f:0a:32:a0:
                    02:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9B:E5:D1:35:9E:2F:EF:6E:06:71:19:9F:C0:BB:49:B4:23:FB:30
            X509v3 Authority Key Identifier:
                keyid:91:72:48:99:ED:4D:B4:8B:0F:1B:E0:08:66:A4:53:15:F6:66:4B:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7eee271396be12d91db16eae558df87246f5bda1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0269a6a4-877f-439e-ac3e-8766c178f941/ab550951567cdca1765f53a37fe53cfd31a8497b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0269a6a4-877f-439e-ac3e-8766c178f941/7eee271396be12d91db16eae558df87246f5bda1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.114.1.0/24
                  200.9.165.0-200.9.168.255
                IPv6:
                  2001:1378::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:6e:4b:8c:66:19:8a:52:4e:e3:5a:70:3f:5e:21:ea:76:f3:
         be:c9:b4:b8:09:48:fc:cf:5c:4a:a9:6e:5c:f0:4a:4a:3d:05:
         5e:33:c5:f4:ea:48:0a:f5:4f:21:38:a2:ff:02:0a:71:19:fe:
         ec:87:07:d8:20:97:bd:34:7e:1c:e3:11:b5:51:39:38:12:89:
         bc:15:33:d2:60:6d:cd:0f:10:eb:df:bc:49:9e:13:64:f5:65:
         59:a7:6b:38:2e:23:bc:8c:11:e5:99:2c:5d:70:38:3b:27:6e:
         13:55:1b:d1:a3:f4:27:7a:7d:9a:3a:c5:44:42:42:85:5c:f6:
         1d:03:f2:b9:cd:cb:17:9b:f8:d8:dc:4d:6e:3b:15:ec:d3:ea:
         2e:b5:d7:78:c5:c7:2e:d2:2f:c6:54:48:b8:38:98:90:74:72:
         27:04:9d:42:11:d0:b3:85:36:e9:55:84:56:da:8d:06:9b:5e:
         8e:6e:12:43:71:f7:07:df:6f:7a:39:ca:26:e7:e6:97:44:bb:
         12:da:08:ad:5e:01:2a:50:50:35:21:ae:75:23:4b:64:06:d5:
         fa:f7:06:2d:f5:e1:af:af:aa:46:54:6e:1e:79:21:95:41:26:
         55:70:c0:57:4f:e7:b8:17:05:cc:f9:d1:7a:9d:f2:4e:36:9c:
         21:ae:3b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----