Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/93d9f454d9ac98894e2a159a03f9b19138df5332.roa
File:                     93d9f454d9ac98894e2a159a03f9b19138df5332.roa (raw, json)
Hash identifier:          HgkosJ/bbAQHWqDSNV+ZpWltPPr4cMse0qhIEBhFQls=
Subject key identifier:   7C:7D:DD:32:10:16:A0:3B:03:39:3C:9D:9D:72:CF:10:62:07:A3:CD
Certificate issuer:       /CN=6a875539d46b4f7b023fe742a5b4cf5fe47838f3
Certificate serial:       11BE21
Authority key identifier: 09:91:F7:01:7A:3C:82:12:AE:ED:7C:67:10:C9:C6:E7:F0:89:F9:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/93d9f454d9ac98894e2a159a03f9b19138df5332.roa
Signing time:             Mon 02 Aug 2021 22:34:18 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     61449
IP address blocks:        138.186.160.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1162785 (0x11be21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a875539d46b4f7b023fe742a5b4cf5fe47838f3
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=93d9f454d9ac98894e2a159a03f9b19138df5332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5a:e3:6f:25:eb:71:bf:bb:8d:4c:89:6f:8e:
                    48:fb:1a:17:85:01:d7:e8:a0:44:e2:35:ab:5d:af:
                    ab:b4:ae:2f:14:d1:2f:63:3d:c1:d4:2d:05:2c:1e:
                    97:3b:27:44:ee:03:3e:23:dd:14:a8:bb:e5:85:29:
                    2e:3d:9a:f1:b9:c5:05:4e:07:87:09:dc:d2:cb:d7:
                    f5:6c:85:db:cd:97:0e:c9:aa:fc:b7:8d:a0:83:dd:
                    38:a4:9e:49:94:fe:fa:c1:f8:ae:45:be:b7:2c:e8:
                    b6:e7:b5:3e:9d:1e:10:5a:d3:dc:36:a6:aa:af:c7:
                    a4:c4:89:0d:77:17:29:ad:37:27:f5:ac:c5:b6:49:
                    cd:19:17:93:26:36:52:0f:ae:6e:ce:40:bc:4e:2e:
                    2b:06:6f:a1:93:d9:1d:77:72:4b:14:2d:b5:f3:87:
                    39:37:c7:32:9e:13:1c:63:ae:fd:13:b8:0d:9c:54:
                    f2:8d:4f:95:9c:83:88:b8:ab:54:0b:98:e1:64:8e:
                    5d:de:68:b3:0c:92:26:f4:c2:88:79:82:f2:fe:5b:
                    7a:99:a8:97:83:cd:ff:42:c6:b2:cd:01:0c:eb:be:
                    7f:0c:35:9b:d6:21:a3:21:a7:92:f3:29:e8:67:5b:
                    50:90:0f:1c:c8:87:2f:99:89:80:f2:a7:74:f7:e0:
                    f7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7D:DD:32:10:16:A0:3B:03:39:3C:9D:9D:72:CF:10:62:07:A3:CD
            X509v3 Authority Key Identifier:
                keyid:09:91:F7:01:7A:3C:82:12:AE:ED:7C:67:10:C9:C6:E7:F0:89:F9:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/93d9f454d9ac98894e2a159a03f9b19138df5332.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:39:6f:55:e8:22:ee:80:30:d3:24:8c:02:61:fd:73:c7:36:
         1f:9b:c6:4e:f8:51:6d:71:2a:c7:cd:83:00:82:39:23:8a:51:
         ea:4c:42:41:f9:48:97:7f:11:05:38:f6:af:a2:c9:f7:97:20:
         0a:b9:7d:4d:f1:0d:a3:d5:94:51:22:43:64:ee:7f:b9:59:36:
         1a:74:b7:84:55:68:13:52:55:16:9e:4e:d5:17:54:75:52:74:
         67:3a:c8:1d:73:f0:ba:37:15:4e:4c:4b:70:3f:fd:2b:c5:a9:
         25:97:b6:01:18:fd:09:1d:56:eb:ac:88:03:79:4f:04:bf:25:
         14:f5:00:75:cc:38:78:86:69:ca:4e:6a:e9:4c:99:05:c2:e3:
         26:66:cc:97:69:87:64:a3:e9:49:ab:f8:b4:bf:67:63:2b:c3:
         f8:2b:ee:23:aa:6f:21:3a:34:7d:e3:db:a3:05:a9:e5:b1:c9:
         3a:7e:f8:d8:99:48:75:9d:9a:cf:c5:34:a3:83:07:e2:72:3b:
         66:69:95:65:05:c0:2e:73:52:c5:59:0c:bb:86:38:a1:70:f6:
         5f:76:5b:1e:a7:02:b3:5c:fe:68:c4:43:5a:38:a2:12:6e:60:
         59:78:b6:ab:6d:e7:2b:85:06:08:4f:76:0c:e8:67:f2:2b:77:
         ae:42:d1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----