Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/36cbff07a566677769965507f126f34f9113f289.roa
File:                     36cbff07a566677769965507f126f34f9113f289.roa (raw, json)
Hash identifier:          FOzcjeIMVlTHOJCq9M2B/YqvHduC03uB54KioKAHCoM=
Subject key identifier:   76:53:19:58:B8:75:4C:4D:DB:59:50:61:50:58:8B:4B:39:86:29:07
Certificate issuer:       /CN=c02c00d9cd0064a040f39e140974a987585ff12e
Certificate serial:       1995
Authority key identifier: 6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/36cbff07a566677769965507f126f34f9113f289.roa
Signing time:             Mon 25 Oct 2021 19:49:12 +0000
ROA not before:           Mon 25 Oct 2021 02:00:00 +0000
ROA not after:            Wed 25 Oct 2023 02:00:00 +0000
asID:                     3640
IP address blocks:        158.97.120.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6549 (0x1995)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c02c00d9cd0064a040f39e140974a987585ff12e
        Validity
            Not Before: Oct 25 02:00:00 2021 GMT
            Not After : Oct 25 02:00:00 2023 GMT
        Subject: CN=36cbff07a566677769965507f126f34f9113f289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:17:84:69:80:25:b8:b7:77:7a:f9:78:32:d0:
                    67:45:d4:34:fa:d5:d0:95:16:bb:79:b6:ea:53:04:
                    f1:28:3c:fc:dc:7e:7a:c5:1c:f3:af:d9:af:fc:2f:
                    34:bb:fe:c7:09:7b:05:9e:5e:62:93:d3:b2:44:38:
                    f3:22:f2:12:9c:9c:eb:57:0f:ac:50:83:d7:ac:0d:
                    6f:9a:b2:96:47:5c:ae:64:47:52:87:8c:05:52:14:
                    93:f3:01:35:bf:63:f1:c3:d6:21:97:9e:1d:34:45:
                    3b:68:96:cc:26:cf:97:31:f0:24:f4:6a:dd:3d:fa:
                    97:49:45:fc:69:a5:0d:8a:31:78:3b:45:1b:0d:07:
                    0f:5e:2f:24:49:58:71:f0:54:49:1c:63:c9:83:1e:
                    e7:4e:ce:a4:69:a7:5b:15:9e:da:51:25:8d:46:ed:
                    6a:0f:96:32:b8:bd:8c:b7:5a:1d:6a:56:2e:ea:99:
                    8a:4e:f0:25:d8:be:89:fa:fa:b5:e5:3a:5e:9c:d1:
                    d1:c7:c5:a8:15:f2:60:40:1f:c7:7b:36:1a:c0:8e:
                    6e:11:ce:b2:df:19:ef:8d:b8:86:60:58:d5:67:00:
                    79:7e:3e:15:35:58:fb:f2:42:9f:d9:d1:7c:d0:20:
                    7d:4d:c5:86:72:b8:2c:40:52:22:a0:f1:95:03:50:
                    91:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:53:19:58:B8:75:4C:4D:DB:59:50:61:50:58:8B:4B:39:86:29:07
            X509v3 Authority Key Identifier:
                keyid:6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/36cbff07a566677769965507f126f34f9113f289.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/c02c00d9cd0064a040f39e140974a987585ff12e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.97.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:e2:b1:c0:1c:0e:bb:13:9f:92:c0:89:20:d0:7d:9d:17:26:
         36:37:ff:6e:76:97:7e:85:d5:d6:94:3f:52:4b:af:53:05:dc:
         3a:fd:b6:b7:e5:f4:07:17:04:9c:45:09:2d:c4:95:e2:b2:87:
         d2:17:52:16:05:22:91:74:81:68:f6:2c:1a:21:12:f4:1e:b7:
         89:87:94:02:59:e8:10:00:10:d9:a0:71:b4:bb:b4:b1:ce:f4:
         69:11:0f:8b:7c:e0:51:e4:7e:c6:2e:2f:96:61:78:cb:a0:60:
         df:2a:02:c6:f0:87:be:4f:3e:07:98:b3:6f:79:b5:62:67:b3:
         22:d7:21:d5:9e:26:01:14:76:c7:b9:e9:5d:a9:45:48:e5:86:
         ac:98:8c:88:b8:ff:91:58:bf:82:81:1c:23:00:d0:fd:46:c8:
         b3:93:5a:45:c4:70:f2:e9:0a:b7:24:33:7c:22:0d:ac:d9:f0:
         1d:c3:56:5b:4f:7c:59:d2:a6:1a:0c:fb:38:f0:8d:a3:12:1a:
         4d:40:2a:25:e9:f8:53:d4:85:fb:c6:9f:55:1f:3b:d3:c8:fa:
         ac:f5:62:9b:4b:ea:42:58:65:5d:90:5d:9e:78:2b:92:85:86:
         ed:f9:44:72:fd:0b:1e:82:d9:64:05:31:f7:6c:37:61:6d:87:
         76:b0:5d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----