Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/eddd3455adc99875ef8726ebfd0491f622c7e1f1.roa
File:                     eddd3455adc99875ef8726ebfd0491f622c7e1f1.roa (raw, json)
Hash identifier:          d630AciX72lembelHPAjPDR/4D7oveXQlXxcevPy8B4=
Subject key identifier:   1F:2F:84:55:35:D6:A3:B9:EC:BA:62:76:EB:F6:AD:1A:4E:BA:86:91
Certificate issuer:       /CN=c02c00d9cd0064a040f39e140974a987585ff12e
Certificate serial:       059E51
Authority key identifier: 6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/eddd3455adc99875ef8726ebfd0491f622c7e1f1.roa
Signing time:             Tue 07 Jun 2022 21:14:20 +0000
ROA not before:           Tue 07 Jun 2022 03:00:00 +0000
ROA not after:            Fri 07 Jun 2024 03:00:00 +0000
asID:                     3640
IP address blocks:        158.97.120.0/21 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368209 (0x59e51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c02c00d9cd0064a040f39e140974a987585ff12e
        Validity
            Not Before: Jun  7 03:00:00 2022 GMT
            Not After : Jun  7 03:00:00 2024 GMT
        Subject: CN=eddd3455adc99875ef8726ebfd0491f622c7e1f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8b:e9:fc:a6:ed:67:de:02:14:0f:bc:0a:1f:
                    6e:a9:8f:af:77:00:aa:d2:3a:88:fd:65:fd:d6:f8:
                    cb:8e:cc:47:2a:29:31:7f:38:70:e1:57:86:d2:84:
                    93:e5:ca:26:d0:14:44:af:48:5e:35:83:69:60:cf:
                    f0:d6:c6:c2:3b:e0:2a:6d:65:15:37:d0:e7:74:ab:
                    39:70:94:c6:30:78:90:01:11:88:71:bb:4d:a8:7d:
                    4e:85:c2:bd:f3:c2:ea:0f:19:13:8b:8e:0c:9b:bb:
                    52:e8:0f:12:88:f2:60:8d:f6:de:0a:c6:f7:ea:b6:
                    b7:0e:44:ae:ef:27:ca:c8:74:cd:65:9b:e2:42:77:
                    d4:c8:ae:c2:d6:42:8b:8b:ba:58:f1:1c:08:dd:f2:
                    f9:c9:bd:f0:e4:c3:f5:b9:13:25:aa:9c:d4:18:67:
                    a4:00:03:5e:6f:a3:9b:30:60:70:47:6f:53:24:09:
                    4c:f4:85:0f:06:46:68:e0:64:11:64:14:ae:35:0c:
                    e9:34:fc:42:6a:fd:93:d6:16:fe:88:2f:c6:95:d7:
                    dd:be:c4:a0:e6:40:ff:1e:ea:8c:1e:09:82:1a:5d:
                    ea:eb:15:30:83:12:26:91:8e:c0:7d:99:15:1d:de:
                    a4:c9:bb:c2:5c:52:be:4f:2b:3f:79:e3:a0:75:eb:
                    ec:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2F:84:55:35:D6:A3:B9:EC:BA:62:76:EB:F6:AD:1A:4E:BA:86:91
            X509v3 Authority Key Identifier:
                keyid:6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/eddd3455adc99875ef8726ebfd0491f622c7e1f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/c02c00d9cd0064a040f39e140974a987585ff12e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.97.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3c:79:20:96:6e:1f:ff:fd:f8:bb:cb:42:c0:a1:de:8a:85:a8:
         e7:cc:6a:9f:c3:b8:a2:fe:bf:24:b9:48:81:38:53:58:02:7e:
         f2:27:55:78:6e:77:39:74:53:d5:30:21:09:6c:df:af:6c:bf:
         30:e7:8e:9a:e8:b2:2f:a6:bf:f5:1d:2d:cb:b1:e8:cb:21:42:
         f4:16:3d:39:a7:63:a8:aa:54:21:db:a2:c0:71:90:36:87:58:
         c9:39:46:14:77:d0:3e:ff:eb:50:19:c9:05:d7:be:f6:f8:08:
         d7:26:e3:91:7c:c6:a2:23:21:60:e4:2b:2f:6b:cd:f0:5d:ea:
         06:e2:49:03:b0:3e:b6:6f:43:85:42:3d:c5:b7:a3:53:b1:58:
         62:05:60:64:6a:66:ac:e0:7f:a2:29:27:32:be:ab:81:35:51:
         e4:aa:76:0c:24:5e:9d:54:f2:f4:30:bb:c7:cc:99:c8:bd:c6:
         a8:79:e8:3f:e3:f4:86:18:9c:24:0b:d3:50:59:a5:2a:42:18:
         74:e1:c9:d8:8f:fa:b6:aa:0b:ef:81:ff:da:13:34:83:08:24:
         b2:7b:c9:f8:35:d0:4a:6e:0b:78:32:75:81:91:29:d4:4e:70:
         ab:c1:50:87:46:b0:18:eb:1d:2f:11:ba:0f:27:fc:97:29:09:
         34:ba:56:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----