Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/35dfaaf88f2011460dd7ba543cd74ae770105393.roa
File:                     35dfaaf88f2011460dd7ba543cd74ae770105393.roa (raw, json)
Hash identifier:          qFLlADOJpviEwFZ6GOU/hKCcfX6L/bzxR1LA6JzNaCs=
Subject key identifier:   07:EA:8C:66:F2:30:74:C5:96:50:D2:7F:2B:3E:5A:F2:4B:BE:D5:0B
Certificate issuer:       /CN=c02c00d9cd0064a040f39e140974a987585ff12e
Certificate serial:       0605
Authority key identifier: 6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/35dfaaf88f2011460dd7ba543cd74ae770105393.roa
Signing time:             Mon 25 Oct 2021 19:40:36 +0000
ROA not before:           Mon 25 Oct 2021 02:00:00 +0000
ROA not after:            Wed 25 Oct 2023 02:00:00 +0000
asID:                     3640
IP address blocks:        158.97.64.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1541 (0x605)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c02c00d9cd0064a040f39e140974a987585ff12e
        Validity
            Not Before: Oct 25 02:00:00 2021 GMT
            Not After : Oct 25 02:00:00 2023 GMT
        Subject: CN=35dfaaf88f2011460dd7ba543cd74ae770105393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:51:2d:ef:5c:0a:22:e2:a5:e3:82:2d:db:53:
                    d6:19:b2:8b:44:c3:e7:26:47:2c:97:b3:ca:cc:9f:
                    b0:60:86:20:9b:25:8a:27:56:2e:6d:5d:c0:8a:e0:
                    6b:1f:42:bc:9a:e0:41:2e:c6:8e:d7:44:45:ec:e0:
                    69:d9:52:b2:e2:f9:d0:32:0d:ce:7b:91:7d:7a:d0:
                    8a:4a:5e:89:36:70:94:31:c6:10:2f:77:b6:ee:21:
                    59:85:30:6d:bd:74:f8:fb:2d:bd:3b:05:58:da:8e:
                    36:a4:e1:c5:57:25:68:04:13:09:61:ee:dc:c0:f7:
                    69:cb:bf:ce:74:e1:10:4e:a8:9a:83:ac:3a:8a:0e:
                    4f:b6:d9:4b:eb:f1:b4:fa:98:61:2e:bf:8e:a9:02:
                    1e:88:af:73:c6:6c:1d:f0:96:a7:41:0b:13:1b:78:
                    bb:76:66:2d:19:80:2d:55:42:8d:5b:eb:16:eb:47:
                    05:3f:a2:22:b9:96:5f:a9:b3:5d:e9:92:8b:35:90:
                    d5:9f:f7:00:8c:49:fc:fe:45:82:ac:cd:72:22:9b:
                    ea:46:18:90:45:c5:54:fe:47:f5:26:cb:d2:b8:64:
                    51:da:c3:4e:85:94:e8:7b:19:e3:97:28:0c:08:4d:
                    1a:69:b1:b1:76:eb:d0:81:98:f5:d0:5c:42:00:a8:
                    34:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:EA:8C:66:F2:30:74:C5:96:50:D2:7F:2B:3E:5A:F2:4B:BE:D5:0B
            X509v3 Authority Key Identifier:
                keyid:6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/35dfaaf88f2011460dd7ba543cd74ae770105393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/c02c00d9cd0064a040f39e140974a987585ff12e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.97.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9b:67:cc:e5:89:33:76:dd:ec:f6:d9:1c:c6:4e:ba:bd:34:c9:
         64:33:9b:b4:ff:04:f3:15:86:d6:44:d0:00:13:70:af:6d:eb:
         d0:3b:cc:cf:53:e4:9c:97:26:0e:c3:ca:70:72:14:f9:ad:d2:
         29:af:82:63:fb:13:1d:3f:16:37:30:8a:6a:6d:49:f4:f3:32:
         d7:44:d8:ba:87:b7:9c:9d:7d:da:e2:cc:24:23:5d:8d:be:9a:
         32:de:2c:5a:6e:a7:da:bc:f8:79:af:e4:06:ba:6c:9b:a8:28:
         20:c5:02:e8:bd:0f:fc:97:dd:ae:6a:04:8f:fa:52:81:be:7a:
         72:c1:23:06:ea:57:a9:85:48:63:74:82:ed:8b:22:30:60:98:
         bf:a3:88:bd:f5:8f:7e:28:d6:62:6f:fb:0a:01:e6:44:60:6f:
         76:76:c9:06:d9:88:6f:65:b9:2d:bf:be:af:9d:8f:36:e9:27:
         79:0e:47:6e:65:3a:63:bf:cc:ef:3d:2a:96:47:4a:ab:cd:ad:
         11:17:6a:9b:72:ad:52:08:12:56:6e:d5:be:c1:40:53:87:f2:
         56:b1:bc:7a:38:ce:07:b2:ac:a5:ed:fb:00:41:72:7d:3d:8c:
         04:27:d3:3e:5c:b9:5d:e5:ae:4b:3e:f1:49:87:89:c7:c9:6c:
         7d:ad:78:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----