Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1c50a542-8fb8-4588-84ea-93f140223e89/c2fcd540df4d5866acd164a75f177355cff71788.roa
File:                     c2fcd540df4d5866acd164a75f177355cff71788.roa (raw, json)
Hash identifier:          vR5YWZfWHE0aiUi/dF4YuDwj/bBLBVomR6Pi4hqwRIc=
Subject key identifier:   04:C3:1A:DB:01:01:FB:12:BF:16:A5:D0:30:21:56:5D:A8:86:03:E4
Certificate issuer:       /CN=41fdade6fa28cbe8bc8b37b44f50fb9818152d49
Certificate serial:       0D57CA
Authority key identifier: 58:3D:38:CA:36:4B:D5:E2:1D:6A:DB:7D:93:B4:6F:37:00:B0:74:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41fdade6fa28cbe8bc8b37b44f50fb9818152d49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1c50a542-8fb8-4588-84ea-93f140223e89/c2fcd540df4d5866acd164a75f177355cff71788.roa
Signing time:             Wed 24 Mar 2021 14:36:09 +0000
ROA not before:           Wed 24 Mar 2021 14:36:09 +0000
ROA not after:            Tue 24 Mar 2026 14:36:09 +0000
asID:                     269980
IP address blocks:        138.117.40.0/22 maxlen: 24
                          170.254.0.0/22 maxlen: 24
                          2803:f840::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 874442 (0xd57ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41fdade6fa28cbe8bc8b37b44f50fb9818152d49
        Validity
            Not Before: Mar 24 14:36:09 2021 GMT
            Not After : Mar 24 14:36:09 2026 GMT
        Subject: CN=c2fcd540df4d5866acd164a75f177355cff71788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:48:9f:74:bf:54:b0:af:9f:9a:de:81:80:53:
                    61:51:07:cb:d2:7a:de:ff:ac:98:d8:cd:61:3a:95:
                    95:7a:eb:d1:da:13:b9:8a:44:6f:f4:50:cc:24:d8:
                    af:dd:f4:97:54:f7:7c:43:8f:9e:19:4c:8a:e8:d1:
                    9b:a4:fb:0a:01:1c:9e:3a:0e:ed:52:bf:f9:22:8b:
                    54:83:8d:c6:cf:46:a8:6a:6a:60:b6:fd:11:ed:64:
                    18:cd:82:3e:b6:e1:42:f0:91:59:ac:b4:e4:20:7f:
                    a7:af:56:05:5a:51:be:29:e6:d1:c4:f9:d1:25:ec:
                    3a:ba:3c:9c:18:fd:88:ee:63:7d:44:0d:fe:11:70:
                    7e:6e:f8:21:f9:ee:48:29:b4:d7:f6:c9:fb:d0:17:
                    bb:91:f4:0e:f6:49:b3:c6:38:51:92:e2:29:41:bd:
                    3e:8c:b6:6f:56:66:e8:9e:16:0c:2d:b7:41:f0:9f:
                    64:77:f3:6f:a0:21:07:ab:65:52:46:4b:ad:04:bb:
                    d9:68:6c:a8:a7:cf:33:bb:0b:39:fb:52:25:34:5a:
                    65:c2:33:ba:f5:39:c5:1b:54:95:bb:81:f3:b1:af:
                    e7:06:54:30:5d:68:5d:76:e4:99:6d:33:ce:4e:e1:
                    33:1f:f0:94:4c:eb:d3:bd:85:a3:ce:13:72:c2:d5:
                    7d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C3:1A:DB:01:01:FB:12:BF:16:A5:D0:30:21:56:5D:A8:86:03:E4
            X509v3 Authority Key Identifier:
                keyid:58:3D:38:CA:36:4B:D5:E2:1D:6A:DB:7D:93:B4:6F:37:00:B0:74:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41fdade6fa28cbe8bc8b37b44f50fb9818152d49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1c50a542-8fb8-4588-84ea-93f140223e89/c2fcd540df4d5866acd164a75f177355cff71788.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1c50a542-8fb8-4588-84ea-93f140223e89/41fdade6fa28cbe8bc8b37b44f50fb9818152d49.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.40.0/22
                  170.254.0.0/22
                IPv6:
                  2803:f840::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:ca:21:2f:a0:4f:f4:c9:b3:6b:af:8f:4a:c5:4a:36:87:5f:
         1b:54:2b:12:3a:b2:b8:d9:1f:3d:18:46:e2:84:bb:14:f8:22:
         78:e3:60:06:61:03:bd:48:88:27:d2:79:ef:97:17:c4:43:cb:
         03:e1:6a:d8:a7:51:cd:26:b3:ea:28:c8:ee:23:1b:9e:44:a9:
         0e:82:b6:be:7a:f1:14:c9:22:52:2c:86:77:64:a1:a1:4b:dc:
         13:13:5c:98:0d:f6:85:74:06:ae:02:01:b7:cd:6e:d6:e4:2a:
         0e:f1:10:20:28:f4:6a:93:0d:df:b5:7e:37:10:30:7c:55:7d:
         51:01:fa:73:27:53:51:e2:31:a7:88:4c:af:ed:72:92:c1:c3:
         92:23:39:d3:94:5e:9b:cb:0a:1f:24:60:7b:a3:12:d3:d6:75:
         fe:76:ff:a3:0e:9b:6a:bf:b1:01:6c:db:d3:15:19:04:a5:67:
         cb:85:2c:c4:d9:2a:86:71:9b:05:a0:41:37:b3:c6:1f:0f:1e:
         ac:06:3d:fd:cc:7c:7c:af:ea:cb:af:66:db:55:ce:2c:2e:c9:
         93:26:15:62:98:0d:78:33:b1:51:d4:8f:04:3c:63:08:91:94:
         4b:43:ae:b5:28:85:05:a3:42:3f:b4:c2:1f:36:30:0e:b5:c2:
         14:21:2f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----