Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/15316d56294ed43850f7ad638622fefc59da16fe.roa
File:                     15316d56294ed43850f7ad638622fefc59da16fe.roa (raw, json)
Hash identifier:          JDSQPYlE6kY7P70igiTdO93USUsWj+e77/HGjxiUAfQ=
Subject key identifier:   13:B4:40:BE:C9:17:3D:85:5E:51:A6:15:F4:BB:2F:B5:77:49:E8:0F
Certificate issuer:       /CN=81e576eb875ef79c3d8f08ea0fa9a6fec82696ef
Certificate serial:       0D6DCE
Authority key identifier: AA:DF:88:7C:B8:65:CD:BC:FC:4D:9D:03:B6:85:C8:B3:21:3D:7E:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/81e576eb875ef79c3d8f08ea0fa9a6fec82696ef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/15316d56294ed43850f7ad638622fefc59da16fe.roa
Signing time:             Wed 24 Mar 2021 14:46:02 +0000
ROA not before:           Wed 24 Mar 2021 14:46:02 +0000
ROA not after:            Tue 24 Mar 2026 14:46:02 +0000
asID:                     263185
IP address blocks:        179.43.90.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880078 (0xd6dce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81e576eb875ef79c3d8f08ea0fa9a6fec82696ef
        Validity
            Not Before: Mar 24 14:46:02 2021 GMT
            Not After : Mar 24 14:46:02 2026 GMT
        Subject: CN=15316d56294ed43850f7ad638622fefc59da16fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9b:c6:2f:09:ca:9c:e6:99:e1:3b:92:c0:37:
                    9f:b4:2d:48:b3:bb:97:17:46:da:06:22:ad:7d:6d:
                    6a:9c:56:05:a5:78:ae:cf:30:75:ba:c0:2a:63:f0:
                    63:9f:62:ce:02:47:fb:27:d5:75:63:aa:53:e8:08:
                    e7:ca:37:d3:1d:04:7e:25:87:38:c9:ec:24:14:05:
                    ce:82:b1:ca:4c:a4:2b:0b:6b:17:19:0e:31:94:9c:
                    6a:02:65:e8:8d:82:8b:c5:57:67:15:bb:f2:ad:34:
                    fa:cf:ab:e8:93:0d:9a:fa:0a:9e:ef:17:c2:28:63:
                    5d:cc:e0:82:38:07:6a:b4:01:b7:40:26:f7:42:20:
                    db:64:95:c3:77:6c:c9:b8:5f:6e:47:0c:ee:5e:df:
                    26:f4:d7:6c:f9:90:09:86:e3:13:bb:92:a8:80:dd:
                    fd:a7:7f:fd:56:af:9f:49:87:ca:06:f8:b7:f0:14:
                    df:f3:ef:6a:5f:42:de:34:06:89:03:a0:b2:08:b6:
                    27:42:8e:cb:31:65:b9:c2:e7:f7:be:a6:04:d3:8c:
                    74:57:da:a3:ad:0d:1c:20:a2:19:dd:86:fc:1a:29:
                    dc:a7:28:39:5e:33:5f:e7:66:67:be:93:62:d5:a0:
                    67:9a:91:f7:4d:51:43:bd:a1:7b:31:07:af:37:de:
                    db:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B4:40:BE:C9:17:3D:85:5E:51:A6:15:F4:BB:2F:B5:77:49:E8:0F
            X509v3 Authority Key Identifier:
                keyid:AA:DF:88:7C:B8:65:CD:BC:FC:4D:9D:03:B6:85:C8:B3:21:3D:7E:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/81e576eb875ef79c3d8f08ea0fa9a6fec82696ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/15316d56294ed43850f7ad638622fefc59da16fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/81e576eb875ef79c3d8f08ea0fa9a6fec82696ef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:54:c8:0b:f9:f3:fd:8f:9e:f7:60:19:86:21:20:6d:3b:13:
         05:02:63:4d:07:0f:b6:e1:8c:5b:10:3c:78:73:dd:37:93:be:
         f2:1e:b3:b2:d3:1c:e6:86:49:2c:ef:ae:89:c9:5e:f8:b5:0e:
         aa:17:3e:44:29:65:bb:eb:09:4f:c7:3c:4a:21:4f:38:3b:bf:
         96:00:43:02:9c:2e:45:ec:42:8a:b0:04:ce:2c:df:92:30:36:
         74:70:7f:43:23:10:b5:91:c8:6f:c6:3d:3c:5b:d0:b5:fe:80:
         d2:48:e1:78:e2:e1:74:61:f8:f3:49:e9:3f:a8:a1:26:59:ec:
         c3:13:54:e6:a8:0e:d2:4f:c9:7a:34:7b:44:d2:5e:c1:ce:b2:
         90:f7:ec:27:ea:1b:23:c9:c2:d4:be:bd:b1:87:11:20:07:aa:
         26:69:eb:2a:de:fd:38:5c:32:de:b2:da:1c:63:55:2b:bf:57:
         59:b2:a7:22:4f:f2:33:9d:41:fe:2a:95:c3:21:ce:ed:2c:b6:
         61:7a:bf:cc:62:44:00:96:2a:d4:e8:13:97:e8:1d:ca:b9:53:
         00:37:12:0c:d6:02:0a:4f:38:6b:d3:46:07:19:4b:e3:9e:38:
         6f:c2:0c:cc:15:1f:68:cd:54:ed:ce:56:6c:0f:2a:d8:ad:c8:
         25:f3:cb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----