Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/115a40b7e0d8d7c6618095bd3dbe449266141f12.roa
File:                     115a40b7e0d8d7c6618095bd3dbe449266141f12.roa (raw, json)
Hash identifier:          kwgGU7MCa33jG7DGEqDI14AVMosBs3d+yeMgdDdpFzM=
Subject key identifier:   08:34:61:DC:D7:94:AE:9B:39:52:FA:CF:DE:87:C7:98:82:36:E8:80
Certificate issuer:       /CN=9335683e4b18488db2c2495f3084999892751bfe
Certificate serial:       0B7504
Authority key identifier: F6:70:84:93:7A:11:D9:A6:92:CE:36:2D:A7:8A:AE:3A:9A:4F:12:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9335683e4b18488db2c2495f3084999892751bfe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/115a40b7e0d8d7c6618095bd3dbe449266141f12.roa
Signing time:             Wed 24 Mar 2021 14:32:12 +0000
ROA not before:           Wed 24 Mar 2021 14:32:12 +0000
ROA not after:            Tue 24 Mar 2026 14:32:12 +0000
asID:                     263793
IP address blocks:        167.249.52.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 750852 (0xb7504)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9335683e4b18488db2c2495f3084999892751bfe
        Validity
            Not Before: Mar 24 14:32:12 2021 GMT
            Not After : Mar 24 14:32:12 2026 GMT
        Subject: CN=115a40b7e0d8d7c6618095bd3dbe449266141f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:90:18:a3:5e:d1:8b:08:9d:fa:fb:f7:27:e8:
                    3d:3a:53:51:a6:c1:25:d5:0c:bc:85:13:e9:f3:0a:
                    75:89:f0:36:0b:6c:16:55:ea:04:0f:1d:a2:e7:71:
                    ef:04:5e:5e:17:df:fc:50:13:9d:bb:7e:25:6f:48:
                    18:2a:7f:6d:c0:f3:bc:1d:00:7a:54:58:f4:d0:b8:
                    b6:78:37:3a:2d:e0:f2:e7:0e:2b:77:64:3d:46:c0:
                    cc:17:ba:95:07:86:3f:bb:86:9b:11:cb:fe:78:f8:
                    28:d1:14:03:5e:05:6b:98:90:7b:56:7a:62:04:ad:
                    85:5e:c4:7d:36:e1:82:00:5c:2e:e2:7a:6f:a8:3f:
                    8b:d9:dc:97:a5:da:8b:dc:e4:cf:c8:18:dd:42:13:
                    44:86:7c:f1:f7:37:3f:6e:56:cd:68:8b:4a:d8:64:
                    de:6e:42:f0:8e:5c:79:cf:2b:e5:b1:41:47:8f:4e:
                    3f:2e:99:7e:d8:28:07:72:e8:bd:94:58:78:f6:27:
                    74:16:b3:15:f6:66:8b:e4:f8:88:d5:f1:76:fa:1f:
                    77:f4:88:95:93:40:5d:4e:cf:b4:93:51:bd:cd:9e:
                    ba:42:b2:5e:cc:e5:dd:50:98:01:07:51:3a:b4:19:
                    14:2f:62:70:18:56:af:b3:f8:5a:30:20:59:a3:e2:
                    a6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:34:61:DC:D7:94:AE:9B:39:52:FA:CF:DE:87:C7:98:82:36:E8:80
            X509v3 Authority Key Identifier:
                keyid:F6:70:84:93:7A:11:D9:A6:92:CE:36:2D:A7:8A:AE:3A:9A:4F:12:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9335683e4b18488db2c2495f3084999892751bfe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/115a40b7e0d8d7c6618095bd3dbe449266141f12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/9335683e4b18488db2c2495f3084999892751bfe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:8a:c7:ee:f0:05:7d:8f:e6:cd:d1:10:da:7d:7b:41:ea:ff:
         d6:49:f6:ea:a4:f4:ba:be:e4:ee:5e:fb:50:90:b7:69:77:5a:
         b7:cd:df:86:e1:59:c2:15:1e:f4:3e:45:f2:a1:a1:06:d7:f7:
         3a:7e:83:1a:5d:44:58:a3:59:b0:3c:0e:3e:05:2c:a3:a8:02:
         7e:a5:c2:f5:9d:b9:58:5d:22:25:78:68:a7:09:d1:c6:11:a5:
         93:55:ae:ab:e6:3e:23:6a:56:2a:16:a8:17:e6:bc:6b:18:a9:
         9d:c5:e0:80:a2:61:e8:b2:d3:8f:cd:74:4b:01:3f:98:56:98:
         00:c8:49:bb:f3:c1:19:f0:d6:61:48:79:b9:f7:5a:13:ab:36:
         bd:87:ac:81:c6:2d:50:6a:b7:f8:30:8f:ca:ef:a6:c1:59:33:
         f9:26:44:d5:70:97:3c:0a:5c:b0:76:f6:57:ce:7f:6b:4d:a5:
         02:72:46:23:0e:70:46:7e:cd:82:72:f9:06:6f:11:4c:eb:d4:
         77:66:4e:91:b9:c2:82:8b:1a:38:5b:2e:6e:05:90:7b:9a:3c:
         fe:50:4d:f2:47:5b:9e:0f:fe:6d:7e:20:3a:5a:d4:95:ee:00:
         34:f5:a1:bf:28:ee:2b:27:03:47:1a:d1:73:f4:36:40:10:42:
         37:a9:fb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----