Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/033092e5-540a-4839-8e9a-c41afdb67e58/9f67d9b7296c0694fb7f79b3cbb2b7311a412b76.roa
File:                     9f67d9b7296c0694fb7f79b3cbb2b7311a412b76.roa (raw, json)
Hash identifier:          Prv+xvy64CbnAuGk/tG0Wfc1Dpix0Zc1KuKnqcX6o1g=
Subject key identifier:   40:0A:60:83:F5:A9:FD:3B:59:70:A9:55:93:23:BC:1C:47:E3:E9:3C
Certificate issuer:       /CN=a9822324130ff130f6e927415dc987319696bc18
Certificate serial:       0BFDEA
Authority key identifier: D9:44:AF:05:55:5F:96:75:F1:82:C9:85:AA:38:02:41:02:AC:97:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9822324130ff130f6e927415dc987319696bc18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/033092e5-540a-4839-8e9a-c41afdb67e58/9f67d9b7296c0694fb7f79b3cbb2b7311a412b76.roa
Signing time:             Thu 10 Jun 2021 14:59:33 +0000
ROA not before:           Thu 10 Jun 2021 03:00:00 +0000
ROA not after:            Sat 10 Jun 2023 03:00:00 +0000
asID:                     60458
IP address blocks:        181.174.184.0/21 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785898 (0xbfdea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9822324130ff130f6e927415dc987319696bc18
        Validity
            Not Before: Jun 10 03:00:00 2021 GMT
            Not After : Jun 10 03:00:00 2023 GMT
        Subject: CN=9f67d9b7296c0694fb7f79b3cbb2b7311a412b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fb:81:07:15:05:16:9d:e6:4d:72:8e:a2:ed:
                    0e:d4:a1:03:50:4a:03:8c:e9:1d:0e:aa:98:8a:4b:
                    5a:93:30:56:e2:30:11:5d:57:c0:83:f9:c8:65:57:
                    c3:4c:59:da:fe:3d:08:16:48:6f:bb:f0:d0:a3:a5:
                    e6:e5:e3:64:d4:9a:fe:fb:b8:56:e1:9e:ef:8b:60:
                    da:3d:6c:ac:d7:77:ab:31:c4:0f:b9:92:a7:17:73:
                    93:95:1d:fd:5b:6c:a2:78:10:b9:42:8a:cc:3b:d0:
                    4d:36:1f:bd:0a:23:21:63:52:86:39:35:44:8d:a1:
                    8f:88:49:f4:d5:de:70:51:44:fd:44:31:6c:27:4f:
                    85:c4:d0:07:c1:f0:f0:af:23:d6:57:b3:c0:2c:2a:
                    b8:4f:13:53:d1:ac:cd:5c:b8:ce:44:26:65:7a:3b:
                    6c:42:d9:1b:fc:3f:29:7a:4c:25:d0:3f:1e:5e:cf:
                    2e:b5:fc:af:e2:3e:3d:f1:63:94:5f:4d:a6:4d:59:
                    83:64:6e:c0:44:f7:7e:52:52:78:4f:f1:2a:4f:ac:
                    f2:95:17:9e:12:bc:dd:f0:0d:a2:59:98:d2:b8:06:
                    15:80:4c:4a:5e:54:fc:ce:75:59:9a:7f:6b:b3:40:
                    43:db:e1:e0:65:f8:28:6a:e1:50:0b:39:05:40:9b:
                    01:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0A:60:83:F5:A9:FD:3B:59:70:A9:55:93:23:BC:1C:47:E3:E9:3C
            X509v3 Authority Key Identifier:
                keyid:D9:44:AF:05:55:5F:96:75:F1:82:C9:85:AA:38:02:41:02:AC:97:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9822324130ff130f6e927415dc987319696bc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/033092e5-540a-4839-8e9a-c41afdb67e58/9f67d9b7296c0694fb7f79b3cbb2b7311a412b76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/033092e5-540a-4839-8e9a-c41afdb67e58/a9822324130ff130f6e927415dc987319696bc18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:30:de:4b:fb:b0:d3:62:e7:88:36:21:c5:e2:5e:ef:37:4e:
         a0:36:02:70:ba:b6:f0:ac:0a:4b:fb:ae:f4:37:8d:65:18:6c:
         38:48:c2:6b:ef:95:41:15:25:98:0b:b5:a4:b6:be:e2:ab:95:
         38:d4:ae:1f:21:0e:92:6c:b6:47:00:61:55:ad:d4:23:4a:25:
         4b:ff:20:68:a6:9b:d4:2c:e6:0a:e8:68:cb:c8:13:90:80:31:
         10:9b:44:7e:3c:4f:53:c6:4d:0e:97:f4:45:93:ee:40:70:9f:
         95:88:03:cc:85:95:5e:88:88:a9:73:34:73:a5:5e:50:a0:f7:
         ae:1d:83:a8:6f:b7:4b:77:82:68:47:c6:17:28:ba:9b:ff:91:
         d2:b7:12:bf:2c:9c:24:43:99:eb:e2:64:b5:9c:18:07:a1:88:
         a0:40:b0:40:e3:db:b1:88:9c:5e:05:43:35:ce:51:50:db:70:
         ce:36:df:ba:82:4f:3d:aa:95:56:ea:b3:98:d5:6d:57:22:c6:
         ab:6e:fd:56:39:22:46:cc:a5:1d:e0:e3:b5:0b:5b:77:f2:58:
         93:72:e6:b4:14:53:9f:2c:b1:65:be:69:a2:0f:87:ca:c4:1f:
         1e:32:9e:e4:c6:96:96:92:ba:8e:dd:bb:82:fa:2b:8b:76:c2:
         47:79:9a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----