Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/c61b830c7630e920803ee3c0b6fa524739c16d07.roa
File:                     c61b830c7630e920803ee3c0b6fa524739c16d07.roa (raw, json)
Hash identifier:          85R6HHL38IJ5OwBY7SfX3SwiKyTTlvGHf6jNEBgNZ2w=
Subject key identifier:   BD:F6:07:C9:C1:D5:AB:7B:25:62:51:5C:C1:46:8A:8E:40:D3:61:01
Certificate issuer:       /CN=c02c00d9cd0064a040f39e140974a987585ff12e
Certificate serial:       02FF
Authority key identifier: 6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/c61b830c7630e920803ee3c0b6fa524739c16d07.roa
Signing time:             Mon 25 Oct 2021 19:38:52 +0000
ROA not before:           Mon 25 Oct 2021 02:00:00 +0000
ROA not after:            Wed 25 Oct 2023 02:00:00 +0000
asID:                     3640
IP address blocks:        158.97.0.0/18 maxlen: 18

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 767 (0x2ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c02c00d9cd0064a040f39e140974a987585ff12e
        Validity
            Not Before: Oct 25 02:00:00 2021 GMT
            Not After : Oct 25 02:00:00 2023 GMT
        Subject: CN=c61b830c7630e920803ee3c0b6fa524739c16d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:63:f2:e8:06:08:9e:90:2b:b1:31:eb:e8:64:
                    2e:1e:1a:ca:a4:a4:28:e7:98:2b:90:9c:f2:5d:b0:
                    77:89:b9:76:68:66:5a:f2:bc:e4:b6:9e:47:19:64:
                    7c:0a:5d:ce:20:69:0b:10:c0:1a:c3:15:72:7d:7a:
                    ed:51:74:ac:a1:44:fd:ed:7a:07:47:65:d6:97:2a:
                    2d:ae:8d:db:42:25:fa:5e:33:65:09:d2:8c:f4:bb:
                    ec:85:e0:a9:fc:52:24:45:05:6e:7c:c5:9e:5d:4e:
                    25:73:75:03:b4:c3:c2:93:c0:90:3b:91:3b:c3:8a:
                    5b:2a:47:1e:65:98:89:01:b8:99:8d:78:70:52:60:
                    3e:cc:29:78:fc:aa:83:1d:eb:e4:7e:f4:b8:0c:c6:
                    e1:6d:ad:34:94:ac:e7:40:ef:eb:69:9a:5f:3a:f2:
                    e4:b0:27:6d:4d:c7:e7:db:57:ac:4e:ea:e1:f1:08:
                    42:20:b7:0c:1f:5d:2f:9c:70:33:7d:83:05:73:b0:
                    87:51:dd:8e:21:22:20:3e:73:e1:b7:47:3d:0b:4d:
                    88:1f:5b:f4:bd:d0:14:d5:54:0a:db:46:df:03:e2:
                    d9:a4:86:f4:9c:59:14:8e:07:ed:bb:b8:b7:9d:d9:
                    15:e7:4e:f6:1f:95:30:bc:62:eb:9c:32:7f:7c:b4:
                    0e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F6:07:C9:C1:D5:AB:7B:25:62:51:5C:C1:46:8A:8E:40:D3:61:01
            X509v3 Authority Key Identifier:
                keyid:6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/c61b830c7630e920803ee3c0b6fa524739c16d07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/c02c00d9cd0064a040f39e140974a987585ff12e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.97.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         96:3e:e7:35:9b:07:2a:87:ac:ff:33:cd:2d:e4:cf:ed:da:1b:
         e6:50:69:f4:a9:68:ba:b9:b2:68:0d:17:e0:19:be:0e:60:27:
         cd:64:de:bb:c0:97:ee:0c:6f:cf:d4:2a:a8:33:ee:1f:6e:f4:
         80:65:9f:ef:7a:64:f1:d2:b5:b5:b4:ec:4d:e8:4e:ef:58:d0:
         f8:c1:68:9b:dc:63:28:f1:a4:b1:e9:4e:88:65:5a:3f:d5:d1:
         71:f0:37:43:74:7b:46:34:11:f3:17:82:03:cb:ff:fe:22:14:
         38:ec:7e:41:03:9f:68:df:d2:f5:97:99:1c:eb:fe:69:28:45:
         68:ec:d1:f9:3f:6a:47:2d:c2:86:c0:fb:4b:2d:82:57:b0:4b:
         16:83:57:1b:98:97:b5:05:b3:4f:69:c4:59:0c:3b:82:44:11:
         49:7e:e9:99:b6:f3:4c:5b:b8:43:a7:1e:d2:e8:4f:d9:f3:36:
         83:1d:f1:b5:dd:67:04:85:a0:31:85:7a:c1:a5:b0:84:b8:04:
         72:5a:d8:a2:c2:96:88:f5:b9:fd:a0:f4:68:9b:ff:cd:b7:4e:
         6c:53:86:98:7c:e3:5d:9f:19:b0:e0:cc:89:6a:80:f9:fc:5c:
         d0:99:71:2a:60:ac:ef:0d:b0:7e:d8:8b:3f:86:29:40:2b:f6:
         25:7d:7d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----