Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1b0bb939-fc7f-4653-91cc-033691f7717e/ae120aad73c476e574fa9df6c5226c0cc1b1312e.roa
File:                     ae120aad73c476e574fa9df6c5226c0cc1b1312e.roa (raw, json)
Hash identifier:          +6cgcCD1dO1v37OPoxIkZGBkMp0cexAvFziWL4fuUU0=
Subject key identifier:   C9:5E:7E:BF:00:00:E4:19:F5:DA:4E:E3:01:F0:8A:08:80:BA:6E:2E
Certificate issuer:       /CN=c0336e51f59b3eb4c8fdcd66973da9eaefcef446
Certificate serial:       0D686C
Authority key identifier: 81:A2:5A:1C:E5:AB:54:EE:7D:9E:62:06:92:CC:C7:B9:8A:4F:EA:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c0336e51f59b3eb4c8fdcd66973da9eaefcef446.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1b0bb939-fc7f-4653-91cc-033691f7717e/ae120aad73c476e574fa9df6c5226c0cc1b1312e.roa
Signing time:             Wed 24 Mar 2021 14:48:13 +0000
ROA not before:           Wed 24 Mar 2021 14:48:13 +0000
ROA not after:            Tue 24 Mar 2026 14:48:13 +0000
asID:                     265641
IP address blocks:        170.254.172.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878700 (0xd686c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0336e51f59b3eb4c8fdcd66973da9eaefcef446
        Validity
            Not Before: Mar 24 14:48:13 2021 GMT
            Not After : Mar 24 14:48:13 2026 GMT
        Subject: CN=ae120aad73c476e574fa9df6c5226c0cc1b1312e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:80:64:fe:b0:30:2d:60:d1:0e:2f:96:99:9a:
                    15:4d:3e:42:c4:52:91:50:28:2b:03:36:c1:ce:05:
                    71:24:1f:77:57:c8:cd:df:82:9e:3a:b5:17:38:41:
                    b9:65:02:5f:3f:4e:38:13:8c:e3:b2:a9:2c:54:95:
                    bc:d2:49:7d:77:f1:ee:1a:3e:c1:1c:de:14:91:a6:
                    f9:36:0d:20:b6:63:ca:f8:65:c5:13:19:58:0a:35:
                    c9:a4:0d:f5:fb:0d:13:bc:ef:33:ca:6c:2d:72:74:
                    a6:35:33:0f:f3:9f:45:e8:ea:d5:b6:1a:da:46:bf:
                    e8:8b:aa:00:0a:b5:0b:4e:0f:51:e4:f9:7d:52:07:
                    cd:60:7a:a6:eb:13:5a:95:94:47:95:9a:28:b1:23:
                    b9:18:78:36:ac:ee:ed:a0:d2:55:fd:58:96:f0:54:
                    d9:89:2a:65:b8:be:10:2e:ea:0e:b3:98:47:4d:cd:
                    b8:f6:45:8b:c1:a4:cd:8b:40:e4:6a:fb:da:06:32:
                    e0:6e:35:4c:70:95:0f:0a:bd:2d:c8:37:3a:dc:04:
                    e1:66:e1:18:9a:9f:53:98:a4:02:8b:91:a7:99:d0:
                    b4:d2:ea:45:47:fa:67:57:ec:9a:6a:bd:0c:cb:61:
                    e7:7d:b3:b5:dc:d9:bc:71:ce:55:79:e7:cb:1e:0a:
                    5b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5E:7E:BF:00:00:E4:19:F5:DA:4E:E3:01:F0:8A:08:80:BA:6E:2E
            X509v3 Authority Key Identifier:
                keyid:81:A2:5A:1C:E5:AB:54:EE:7D:9E:62:06:92:CC:C7:B9:8A:4F:EA:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c0336e51f59b3eb4c8fdcd66973da9eaefcef446.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1b0bb939-fc7f-4653-91cc-033691f7717e/ae120aad73c476e574fa9df6c5226c0cc1b1312e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1b0bb939-fc7f-4653-91cc-033691f7717e/c0336e51f59b3eb4c8fdcd66973da9eaefcef446.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:ee:6d:58:39:60:2c:60:84:aa:99:33:9b:c3:15:78:61:46:
         4b:45:7b:aa:69:0c:a6:33:cf:4e:02:1b:df:54:bd:e1:f2:39:
         27:66:78:22:ce:b7:4e:ee:ad:55:23:24:cd:2a:e5:44:77:de:
         ca:6a:28:48:17:4f:d3:3a:af:e1:1a:92:81:d9:57:b6:88:8e:
         2a:45:af:0f:72:ae:4f:7a:53:09:2d:05:51:55:f1:52:ed:e2:
         94:0d:58:bf:07:7c:38:74:80:42:e3:3e:3d:a8:e2:8a:03:8a:
         24:c5:1c:42:bf:d6:c3:5d:20:81:99:16:d4:ab:3b:40:41:c4:
         14:5f:25:44:1c:8e:75:64:00:c8:cb:fb:52:5d:3b:e8:24:51:
         18:fe:ba:e4:18:50:4e:84:d5:38:3a:a3:2d:58:2f:be:2f:cc:
         3d:54:20:44:d7:d9:c4:ec:e6:a0:2b:c6:f8:66:43:ba:17:9a:
         74:65:ad:8c:79:23:78:ba:79:1c:6c:d7:67:6e:28:95:ce:2a:
         ee:a9:59:a5:8a:b4:f9:84:f7:53:84:ca:53:fd:e8:27:98:2d:
         24:cf:2b:52:11:c7:c7:05:8c:bd:03:fc:c1:e8:a8:c5:c4:58:
         b5:1a:f0:ab:8e:ea:60:0c:63:d6:1a:a2:54:9c:a3:10:99:e3:
         54:c1:ac:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----