Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/11535973c1e254fa4827eca73da2f875c1ad8f1a.roa
File:                     11535973c1e254fa4827eca73da2f875c1ad8f1a.roa (raw, json)
Hash identifier:          KWYKtv1sM7ryGHlpWJOeHyCnsdhJIkrv4+h0uX0V2/U=
Subject key identifier:   B7:8C:2C:7C:CA:E8:3C:D0:F7:B2:49:C3:44:97:C9:21:AA:15:83:87
Certificate issuer:       /CN=8fd397f8d47b3a369017afd14e695229eb571750
Certificate serial:       07572B
Authority key identifier: 45:DE:A6:A4:AF:83:D7:32:77:E6:5A:49:A7:EC:8A:93:D7:49:ED:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8fd397f8d47b3a369017afd14e695229eb571750.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/11535973c1e254fa4827eca73da2f875c1ad8f1a.roa
Signing time:             Wed 24 Mar 2021 14:31:18 +0000
ROA not before:           Wed 24 Mar 2021 14:31:18 +0000
ROA not after:            Tue 24 Mar 2026 14:31:18 +0000
asID:                     265865
IP address blocks:        138.117.13.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481067 (0x7572b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd397f8d47b3a369017afd14e695229eb571750
        Validity
            Not Before: Mar 24 14:31:18 2021 GMT
            Not After : Mar 24 14:31:18 2026 GMT
        Subject: CN=11535973c1e254fa4827eca73da2f875c1ad8f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a9:18:c4:30:42:25:cf:24:49:cc:67:b9:ca:
                    21:3d:86:8b:70:af:f4:5f:6c:96:17:71:1a:6c:a8:
                    a5:a8:e4:47:b9:09:dd:7d:59:41:81:a4:d4:90:4d:
                    d5:e6:86:3e:e9:af:ee:2b:2e:40:da:17:aa:e4:83:
                    4d:79:ab:ec:9f:19:b1:f2:e3:b3:d3:8b:d6:ea:b8:
                    7c:51:6e:9b:b8:68:02:24:33:c0:48:7f:0b:f5:9a:
                    91:12:c6:57:d7:19:48:90:bd:70:c0:39:45:5f:9d:
                    fd:0e:a8:52:a9:1e:db:a8:7a:e9:3b:ef:d0:fe:4f:
                    1c:c6:0c:06:0f:3f:c9:d6:a8:95:1e:d0:19:fd:f1:
                    29:e3:f8:b8:3b:aa:36:1a:0f:b7:45:e5:a6:f7:b9:
                    f7:62:a6:f5:fb:03:b1:c3:5e:d1:e3:a3:c7:3a:c2:
                    55:8d:e8:85:7c:49:23:cf:1a:80:25:f7:09:ce:54:
                    7e:84:96:9f:03:44:22:8f:14:ec:5f:f9:ef:8a:ac:
                    16:2f:da:04:41:fb:3c:dc:e9:ad:63:38:36:a5:0f:
                    2d:4c:61:52:9e:e2:60:56:d3:c2:39:cf:30:a7:42:
                    6c:e4:3e:fa:16:5a:fb:2f:97:03:ff:0a:4c:b1:30:
                    75:d8:b2:ca:44:34:cb:04:d4:36:c9:13:c8:42:a8:
                    54:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8C:2C:7C:CA:E8:3C:D0:F7:B2:49:C3:44:97:C9:21:AA:15:83:87
            X509v3 Authority Key Identifier:
                keyid:45:DE:A6:A4:AF:83:D7:32:77:E6:5A:49:A7:EC:8A:93:D7:49:ED:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8fd397f8d47b3a369017afd14e695229eb571750.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/11535973c1e254fa4827eca73da2f875c1ad8f1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/8fd397f8d47b3a369017afd14e695229eb571750.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:86:88:74:9e:6b:ca:da:64:81:29:dd:45:49:61:5e:e9:8b:
         38:d7:07:d1:a5:4b:60:d2:47:48:25:3b:d0:56:71:4d:a6:83:
         94:d7:6e:9a:8c:b3:89:99:01:65:d8:ad:1b:6c:73:a9:49:0a:
         66:c2:1b:da:f1:28:4b:53:dd:0a:ac:53:e0:52:a7:c0:52:2d:
         43:5a:a1:ce:f6:d4:32:da:93:30:b0:60:e7:c3:aa:5a:ff:e8:
         f3:02:af:fd:9d:22:21:10:f8:2d:70:21:93:a2:1a:8d:e3:50:
         10:cf:bb:65:10:9c:1a:32:c8:8d:57:95:4c:b4:9c:e1:2a:ae:
         e8:43:39:f4:7e:47:63:4c:19:a8:50:1d:96:cb:13:69:a2:9b:
         c3:05:1c:ed:a8:e6:23:b6:f6:0a:0e:52:4b:21:8d:13:6e:3c:
         e9:20:d0:ab:fa:ac:e0:ad:44:39:9b:4a:c3:5c:b4:24:92:b3:
         09:d3:00:01:ad:7c:b4:ee:97:d3:05:16:7d:56:80:75:6b:0e:
         5a:4f:e3:25:f7:97:0e:ef:d1:4f:90:89:0a:e7:21:47:fa:ab:
         d7:a8:4f:cc:6f:25:03:61:c8:57:18:d6:b6:f2:7f:3a:bd:1c:
         80:7a:9e:8c:eb:d6:8d:78:a8:01:5c:2a:c9:b6:51:34:98:fd:
         db:d9:18:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----