Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/6add965fe1d1ea3442853c49a2b383e89dbf4f32.roa
File:                     6add965fe1d1ea3442853c49a2b383e89dbf4f32.roa (raw, json)
Hash identifier:          VHBE47HNa3ZXHGNQfQ+5WqW3MSTkVo8dgJ1MN0aQRPs=
Subject key identifier:   18:8A:FB:33:1B:B0:27:4A:F4:9C:22:E8:71:9B:DC:C2:04:F4:A7:E5
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       0E2220
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/6add965fe1d1ea3442853c49a2b383e89dbf4f32.roa
Signing time:             Wed 24 Mar 2021 14:30:55 +0000
ROA not before:           Wed 24 Mar 2021 14:30:53 +0000
ROA not after:            Tue 24 Mar 2026 14:30:53 +0000
asID:                     52444
IP address blocks:        190.216.49.128/26 maxlen: 26
                          200.32.122.128/26 maxlen: 26
                          201.234.100.0/25 maxlen: 25
                          201.234.100.128/26 maxlen: 26
                          201.234.152.128/26 maxlen: 26

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 926240 (0xe2220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Mar 24 14:30:53 2021 GMT
            Not After : Mar 24 14:30:53 2026 GMT
        Subject: CN=6add965fe1d1ea3442853c49a2b383e89dbf4f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:58:19:c2:15:0b:13:53:f5:d7:b6:fc:6d:d2:
                    1a:8c:87:3f:a6:04:f3:76:38:34:60:31:c4:51:98:
                    62:78:ab:c4:67:f7:a8:ee:80:ab:31:b6:34:9b:d0:
                    8a:10:bf:2f:bf:47:2f:04:c1:3f:b2:fb:a5:8e:5e:
                    68:38:ef:8e:83:00:f2:55:b6:34:47:c6:a2:f5:06:
                    22:30:2c:8e:28:61:ed:1f:b3:f1:7f:56:3e:c2:cf:
                    32:e7:16:6b:73:5c:97:10:0a:b8:0d:3f:d9:98:0f:
                    1c:2c:98:c7:4a:91:d4:d0:5a:7b:62:88:74:05:b6:
                    91:60:7f:bd:2b:14:71:70:67:2a:a9:5a:c9:d0:13:
                    e5:68:92:bb:65:8b:a5:1b:1b:ac:da:6f:c5:83:ca:
                    0e:92:71:91:d5:39:b5:c9:85:bd:a8:19:36:98:15:
                    bf:3c:f8:11:2d:cb:93:72:40:dd:5e:92:e2:89:27:
                    76:38:42:89:74:ad:65:24:3b:ff:e3:a6:f2:e8:e3:
                    f7:3f:3d:9c:de:bd:67:ce:45:19:be:c6:92:c1:91:
                    e0:b8:0e:12:7c:f0:0a:bc:1d:7f:b3:03:e8:34:56:
                    1d:81:74:89:1e:39:54:75:74:62:49:ca:e7:77:b7:
                    a2:f3:72:b4:8e:64:0c:03:47:b8:eb:c3:7c:03:1b:
                    c8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8A:FB:33:1B:B0:27:4A:F4:9C:22:E8:71:9B:DC:C2:04:F4:A7:E5
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/6add965fe1d1ea3442853c49a2b383e89dbf4f32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.49.128/26
                  200.32.122.128/26
                  201.234.100.0-201.234.100.191
                  201.234.152.128/26

    Signature Algorithm: sha256WithRSAEncryption
         3b:f7:02:77:6a:bd:41:6f:5f:4d:df:de:70:a4:4d:26:1a:65:
         fa:90:23:67:32:21:9b:3a:83:98:26:c5:ca:ce:83:9a:c5:ba:
         d4:9e:c7:ff:94:11:a9:ef:90:2f:be:2a:ed:f1:3f:96:4d:9e:
         f2:48:79:7e:fd:fe:7a:de:65:e1:fa:ac:b3:66:fa:63:dc:24:
         78:fc:22:26:4c:eb:2f:26:23:64:84:6b:4c:38:73:38:e5:b1:
         41:93:d5:dd:41:23:35:43:10:e4:b3:e5:17:0f:41:a5:fb:1f:
         30:41:0d:9e:fe:51:95:75:c6:2a:25:46:b9:3c:fa:8f:ca:3b:
         55:a9:f7:2a:32:62:92:0a:60:7c:66:94:e1:6c:99:70:b0:a4:
         5f:32:d1:b0:e5:49:e7:33:ad:31:61:62:ed:1c:1b:5a:03:74:
         04:d4:c1:b9:b2:cc:8a:88:5a:4a:dd:67:15:c0:07:f4:86:76:
         fb:51:32:87:e6:11:d4:90:e6:3e:91:44:5f:f8:87:4d:a0:f0:
         8b:94:f4:4e:26:57:a1:25:6d:81:63:15:16:35:8b:16:21:2a:
         59:f7:bd:06:81:32:49:d8:69:c0:5a:94:1e:05:09:c4:4a:13:
         c0:dc:a9:8c:c2:0b:1b:10:f8:e2:70:4d:98:02:8d:45:d8:6b:
         3e:07:16:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----