Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/1ed16ab20c7a4d49caaea04f58260f28a60f57db.roa
File:                     1ed16ab20c7a4d49caaea04f58260f28a60f57db.roa (raw, json)
Hash identifier:          dNTdU6PjybPr81FQGNV+qa405B1H1H1sd57Eb/TEYWw=
Subject key identifier:   A4:CF:4F:E7:8B:56:54:C7:D9:21:32:96:FB:5E:70:0D:6F:6B:2E:30
Certificate issuer:       /CN=c02c00d9cd0064a040f39e140974a987585ff12e
Certificate serial:       13CE
Authority key identifier: 6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/1ed16ab20c7a4d49caaea04f58260f28a60f57db.roa
Signing time:             Mon 25 Oct 2021 19:48:11 +0000
ROA not before:           Mon 25 Oct 2021 02:00:00 +0000
ROA not after:            Wed 25 Oct 2023 02:00:00 +0000
asID:                     3640
IP address blocks:        158.97.96.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5070 (0x13ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c02c00d9cd0064a040f39e140974a987585ff12e
        Validity
            Not Before: Oct 25 02:00:00 2021 GMT
            Not After : Oct 25 02:00:00 2023 GMT
        Subject: CN=1ed16ab20c7a4d49caaea04f58260f28a60f57db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c8:20:0b:f0:68:5a:23:37:8a:0f:94:fb:d3:
                    cb:5d:92:4c:9f:16:d4:11:e6:01:04:a4:78:09:77:
                    d4:12:27:05:ac:e6:7e:13:a4:8b:10:ec:0a:8b:7f:
                    fc:4b:57:d7:47:26:54:92:72:ae:5b:97:6f:14:ca:
                    52:86:0c:43:0a:b8:33:ed:8c:eb:30:c6:e5:8b:21:
                    c9:9b:ea:8c:d2:30:ed:84:f1:e7:d2:79:07:4f:c9:
                    bb:97:7f:92:26:f1:85:0d:70:88:94:32:86:1b:00:
                    7f:ba:53:ca:85:c7:3b:2e:9a:3a:29:66:1f:16:d5:
                    2e:93:d2:24:72:b3:74:1d:fc:84:70:84:14:82:88:
                    7d:68:ec:72:77:c8:12:46:d5:36:b0:c0:1b:c7:bc:
                    39:f4:8d:35:8c:b9:73:2a:99:8f:81:7b:d1:0f:0f:
                    9b:ee:d7:cf:6c:a7:fc:24:bc:29:14:8c:dd:3a:27:
                    c5:2d:52:48:0e:22:cf:56:e2:d1:07:66:6c:41:de:
                    c5:be:65:e6:ba:b4:4d:5d:3d:f6:f5:c4:ad:91:87:
                    a4:fc:3c:0b:4a:de:a7:63:37:3e:90:ef:4d:c9:32:
                    c8:72:16:54:c3:93:dd:cc:32:b5:8e:9f:a3:16:2c:
                    19:2e:0a:f2:9d:cf:0d:50:f2:66:ef:58:07:01:97:
                    63:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CF:4F:E7:8B:56:54:C7:D9:21:32:96:FB:5E:70:0D:6F:6B:2E:30
            X509v3 Authority Key Identifier:
                keyid:6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/1ed16ab20c7a4d49caaea04f58260f28a60f57db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/c02c00d9cd0064a040f39e140974a987585ff12e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.97.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:e6:29:c9:43:ff:ea:59:1e:66:9f:f6:59:fe:a8:9a:94:8e:
         0f:1f:ef:34:2e:aa:88:ae:e3:82:7a:af:f7:1b:6a:17:ec:cb:
         ed:df:86:2e:40:8c:1f:51:a3:6e:07:bb:29:6e:62:3c:42:6d:
         01:eb:75:55:5c:0e:07:5a:e8:a4:66:12:1e:ba:d6:cf:e8:89:
         71:dd:8f:0c:59:dc:fa:c2:7d:72:ee:11:74:95:0b:16:98:7c:
         82:2f:09:84:b7:ea:e7:c4:c2:4d:da:f0:9b:a9:c7:e5:f6:6b:
         59:7b:b1:7c:c2:27:25:6f:50:b3:b8:4e:9d:17:26:b7:20:8b:
         8e:20:ba:45:a2:4e:b7:75:15:2e:b8:08:22:4e:01:06:12:01:
         6b:1d:3a:85:0f:99:5c:31:f9:e9:ff:d2:0d:a5:a3:d6:d5:33:
         a4:6e:1c:69:6c:0e:07:8a:d6:14:98:9c:aa:2d:85:ef:9f:aa:
         dc:11:92:80:d1:34:eb:7f:2f:49:10:2e:a9:ed:79:7a:45:7d:
         0a:93:e3:de:01:d9:bb:8c:d2:97:25:9e:f0:c1:1f:db:8c:30:
         79:17:20:48:4b:34:d2:33:af:66:f7:93:7d:77:98:20:92:d1:
         23:4a:28:56:a1:1c:ac:22:8a:51:19:e6:08:f3:d2:41:68:59:
         11:ab:a5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----