Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/637f8dedd3e87e58bb57fbf148faf18f920e53cd.roa
File:                     637f8dedd3e87e58bb57fbf148faf18f920e53cd.roa (raw, json)
Hash identifier:          hLd4vhS9z/D0Un+ZIURQrGFZaBw0psD2nqW7LXSzb/A=
Subject key identifier:   B8:44:91:6A:5F:29:D2:85:8F:F5:47:7A:0F:70:42:1C:67:5E:22:88
Certificate issuer:       /CN=6a875539d46b4f7b023fe742a5b4cf5fe47838f3
Certificate serial:       11A79A
Authority key identifier: 09:91:F7:01:7A:3C:82:12:AE:ED:7C:67:10:C9:C6:E7:F0:89:F9:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/637f8dedd3e87e58bb57fbf148faf18f920e53cd.roa
Signing time:             Mon 02 Aug 2021 22:31:13 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     61449
IP address blocks:        201.139.81.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1157018 (0x11a79a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a875539d46b4f7b023fe742a5b4cf5fe47838f3
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=637f8dedd3e87e58bb57fbf148faf18f920e53cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3f:86:9e:27:e5:fd:e3:d5:47:cd:75:55:ff:
                    53:05:50:f0:d4:8d:67:ef:ac:15:01:1e:d2:37:64:
                    00:4a:31:b9:47:dc:db:15:c9:19:e1:b7:55:d0:e5:
                    98:03:89:06:ab:a3:85:d6:7f:c2:d2:72:4e:40:19:
                    df:35:d7:71:04:b1:95:85:ec:86:9f:dd:99:2a:3b:
                    ed:bc:41:e7:4c:05:a5:45:39:7d:e0:ac:12:17:f7:
                    6b:16:2c:f3:e7:b1:3f:78:3a:5a:3c:6a:4d:1b:d6:
                    47:aa:9a:a2:4b:73:71:39:ad:2b:46:4d:61:b7:bc:
                    64:31:b1:00:8f:4f:9f:74:c2:2b:ec:85:38:46:74:
                    ba:e0:2b:af:27:ca:b3:80:02:25:88:8a:41:e4:4c:
                    e5:e7:6d:89:ca:84:9c:fb:ac:85:ee:63:2c:39:d7:
                    fd:32:d6:e9:ea:58:45:fa:ea:f4:0b:80:bc:d9:a6:
                    46:91:72:cd:dc:19:ea:02:49:9c:f5:38:fa:48:b0:
                    33:09:8f:87:6e:ff:f2:4a:bd:b7:53:0d:24:d2:90:
                    e7:37:60:bf:9e:88:97:62:75:4c:f0:b1:ab:1a:47:
                    b8:c2:c1:6b:74:c2:2a:56:f2:42:cd:03:37:d1:a1:
                    9f:f2:d8:d4:9e:b5:f0:bc:ad:48:6d:86:ce:cb:d3:
                    cc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:44:91:6A:5F:29:D2:85:8F:F5:47:7A:0F:70:42:1C:67:5E:22:88
            X509v3 Authority Key Identifier:
                keyid:09:91:F7:01:7A:3C:82:12:AE:ED:7C:67:10:C9:C6:E7:F0:89:F9:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/637f8dedd3e87e58bb57fbf148faf18f920e53cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:16:db:4b:a6:07:2c:a4:eb:4e:cd:cc:14:69:35:00:ca:c4:
         58:cb:de:85:09:39:bf:fd:85:dc:09:a8:e8:37:3d:38:c3:b1:
         48:42:f0:eb:1d:69:b5:92:9a:f2:76:af:7a:6e:54:09:13:be:
         e4:6e:d6:45:1a:8d:32:4b:a3:77:20:e7:6a:6c:01:4f:69:7c:
         cb:98:fd:74:d9:6c:3c:56:64:46:04:cd:64:fa:76:64:47:62:
         e9:a4:61:c8:cf:6e:da:80:df:0f:c8:21:e0:a7:05:51:5e:32:
         a0:bb:fe:68:11:d5:8f:e5:e7:53:53:e2:2a:2a:83:41:d4:11:
         0f:2b:29:62:b0:4c:9c:c4:59:bf:06:35:d1:6f:74:43:94:ad:
         fd:0a:bf:84:a4:63:e8:18:37:5f:d9:da:e5:8e:29:ad:08:63:
         9d:bb:da:58:84:01:00:a7:87:97:74:07:7a:e6:fd:ac:26:18:
         18:6a:59:34:d0:74:58:da:72:aa:6a:87:1c:ab:37:7f:f8:2e:
         f5:5c:ce:7a:fd:20:c4:9e:a0:09:ab:ee:b0:d1:3d:f5:70:ae:
         6b:60:91:2b:78:f0:c5:db:03:f5:fb:8a:31:8e:6e:59:35:d1:
         a5:2a:26:da:bd:60:c6:ea:7e:c5:30:5f:0f:e0:b6:70:22:7e:
         79:8e:4d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----