Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f7994442a17cae5df96f69b9b27098c918a14b22.roa
File:                     f7994442a17cae5df96f69b9b27098c918a14b22.roa (raw, json)
Hash identifier:          XNZkLOhrTGvaZ9LVVEMKB5YYDC/TAhMFlG2869Si6CQ=
Subject key identifier:   C1:5A:F9:42:87:DE:82:C6:33:57:CE:D3:EA:D9:88:00:5D:43:7E:B8
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       0E25CA
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f7994442a17cae5df96f69b9b27098c918a14b22.roa
Signing time:             Wed 24 Mar 2021 14:30:55 +0000
ROA not before:           Wed 24 Mar 2021 14:30:53 +0000
ROA not after:            Tue 24 Mar 2026 14:30:53 +0000
asID:                     16528
IP address blocks:        190.216.132.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 927178 (0xe25ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Mar 24 14:30:53 2021 GMT
            Not After : Mar 24 14:30:53 2026 GMT
        Subject: CN=f7994442a17cae5df96f69b9b27098c918a14b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5b:6e:18:2f:80:3c:31:05:1c:3c:3b:de:ec:
                    da:79:fd:74:03:ef:84:b1:2e:11:73:e1:1c:a4:ec:
                    a0:5a:4b:46:cb:56:59:2d:ae:cf:c6:5c:79:fc:9b:
                    76:dc:e8:4e:70:b2:1b:1b:98:0e:bd:9e:0e:f6:cd:
                    1d:e4:28:11:d4:55:d8:da:a4:81:89:af:1b:ba:d7:
                    c4:a5:7f:1d:5f:e6:c5:49:bc:6e:21:06:58:3b:89:
                    61:10:b6:10:7e:88:dc:1d:9c:b6:2d:7a:a3:a1:19:
                    f3:01:8e:bc:f4:69:e6:e7:04:63:b1:aa:2c:bc:6e:
                    da:7c:04:82:aa:73:1e:ec:21:05:70:01:c3:b3:ee:
                    10:4f:84:75:eb:59:f5:bd:78:b2:c0:53:0a:6c:60:
                    5d:45:20:fe:74:b0:d6:fd:54:9f:16:a9:f6:b8:29:
                    1d:2c:fd:1e:01:61:f5:aa:dc:03:fd:e5:af:3d:b8:
                    86:05:26:82:13:a8:0c:3e:85:1b:5f:32:ed:ea:24:
                    74:4c:45:fe:58:ca:ab:b3:76:6c:3c:f0:66:95:69:
                    74:19:09:d7:7a:fd:7a:e7:c1:9e:2c:a0:5a:a3:e8:
                    0f:c3:94:31:4b:3c:4e:2d:b8:2e:25:ce:9c:9a:2b:
                    dd:33:0d:ca:e2:03:73:f8:72:2c:07:e1:94:fe:9c:
                    7f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5A:F9:42:87:DE:82:C6:33:57:CE:D3:EA:D9:88:00:5D:43:7E:B8
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f7994442a17cae5df96f69b9b27098c918a14b22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:08:52:33:66:d5:21:51:53:0f:36:a9:fa:4a:cf:55:c6:5a:
         6d:6d:03:87:40:ec:be:74:52:d0:86:5c:20:7b:2a:ff:48:d0:
         69:8b:c2:d4:b7:6f:2f:7a:bf:8b:2a:c5:b0:4f:55:fd:d5:c6:
         c5:74:f6:97:4d:a4:4d:36:82:f1:91:a5:4e:f4:6a:63:b8:5c:
         2d:0c:16:52:06:26:83:79:2d:b2:7f:bb:74:a9:48:99:f3:86:
         05:8b:fb:f6:9c:c2:8b:0a:cd:5d:fd:a6:15:34:79:23:b5:45:
         73:ef:45:ea:ff:00:81:1a:d7:ac:eb:dd:bb:76:e9:79:18:50:
         80:84:b6:19:0e:4b:7c:cf:3a:44:39:3a:1d:fd:f4:41:68:8d:
         10:04:8f:58:25:bf:89:90:14:ba:5d:6b:1a:81:2d:1f:ae:78:
         76:2a:3a:75:8d:14:f4:dc:e8:13:1a:30:f4:c8:10:f0:ae:99:
         50:87:8c:12:40:ee:0e:77:7d:62:25:54:3c:97:9b:8b:44:31:
         f3:d7:58:a5:04:3f:93:68:9d:ef:0a:7f:92:ab:43:6c:3b:06:
         f5:d8:f7:ae:96:d3:7a:b5:6e:21:03:84:b5:3b:c5:a6:cf:95:
         44:57:29:d8:a7:6a:1c:48:a0:de:24:57:5c:94:19:ac:28:f2:
         37:94:dc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----