Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20bfb98c-4b5d-490d-9342-b7421a481939/6e3f39bca937d1485063963babbf5b49e097b4fe.roa
File:                     6e3f39bca937d1485063963babbf5b49e097b4fe.roa (raw, json)
Hash identifier:          uSx5b3BmzRWhRQvt9bdStQMwWB2fiTuDYJ9z0Q3+TOE=
Subject key identifier:   36:63:7B:CB:EE:30:68:F2:D8:74:82:A4:42:F9:48:D9:E8:40:B0:BF
Certificate issuer:       /CN=8f74f3635561538d1905f0fa0258d3d5fa209b59
Certificate serial:       0C006F
Authority key identifier: BA:AC:1D:D6:8B:CE:41:55:3B:31:5D:E7:C4:E8:D4:28:8E:D2:52:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f74f3635561538d1905f0fa0258d3d5fa209b59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20bfb98c-4b5d-490d-9342-b7421a481939/6e3f39bca937d1485063963babbf5b49e097b4fe.roa
Signing time:             Wed 24 Mar 2021 14:31:04 +0000
ROA not before:           Wed 24 Mar 2021 14:31:04 +0000
ROA not after:            Tue 24 Mar 2026 14:31:04 +0000
asID:                     263236
IP address blocks:        66.128.32.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786543 (0xc006f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f74f3635561538d1905f0fa0258d3d5fa209b59
        Validity
            Not Before: Mar 24 14:31:04 2021 GMT
            Not After : Mar 24 14:31:04 2026 GMT
        Subject: CN=6e3f39bca937d1485063963babbf5b49e097b4fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:f7:07:f8:cf:df:1d:d3:10:67:2b:cb:2b:
                    a3:8e:5d:d9:82:65:95:0b:2f:41:29:01:92:82:b0:
                    99:46:92:9f:89:68:80:c1:24:9c:b3:99:83:35:a0:
                    65:6c:77:8c:4e:7f:ad:d9:ac:59:22:1f:87:25:f4:
                    b7:87:41:7e:86:0e:e7:c9:d5:e1:05:cb:fc:a8:85:
                    ff:46:5b:db:77:89:77:57:8d:f2:1a:46:bb:f0:94:
                    48:a8:ba:f3:af:fa:a4:72:2f:6d:1c:72:6a:c8:8f:
                    5f:2c:64:98:43:77:6e:fd:c5:48:f4:a7:99:0d:2c:
                    52:7b:cc:72:61:7e:bf:56:a8:95:47:07:58:92:25:
                    bc:ee:fd:66:f6:cb:f4:7b:25:51:4a:5b:31:fc:c3:
                    0b:9c:07:81:29:29:df:c5:91:bf:10:59:e4:42:70:
                    8b:4f:a4:92:4b:86:fa:f5:8a:f3:e2:10:16:07:5f:
                    b7:d0:33:f2:48:8b:8a:41:e0:86:21:46:a9:c3:b8:
                    58:b3:a6:7e:b4:2f:ea:96:9b:e9:65:4e:ee:e5:b1:
                    51:46:b4:74:63:7e:93:bc:8d:88:20:a0:d1:84:f0:
                    23:0b:75:b0:c6:67:1e:ae:8f:ca:c9:eb:93:01:af:
                    30:70:d7:18:8e:8b:a4:fa:37:58:c1:bd:44:34:a5:
                    4a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:63:7B:CB:EE:30:68:F2:D8:74:82:A4:42:F9:48:D9:E8:40:B0:BF
            X509v3 Authority Key Identifier:
                keyid:BA:AC:1D:D6:8B:CE:41:55:3B:31:5D:E7:C4:E8:D4:28:8E:D2:52:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f74f3635561538d1905f0fa0258d3d5fa209b59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20bfb98c-4b5d-490d-9342-b7421a481939/6e3f39bca937d1485063963babbf5b49e097b4fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20bfb98c-4b5d-490d-9342-b7421a481939/8f74f3635561538d1905f0fa0258d3d5fa209b59.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c0:c6:e5:a4:c3:64:0f:54:9b:49:5c:99:92:30:9f:e2:f1:aa:
         67:a1:8a:95:08:f9:18:bd:cd:a7:bd:16:ac:6d:aa:1b:c1:5c:
         a8:35:ab:82:bc:ab:5c:0e:a0:4d:c7:39:87:2d:d7:99:7e:70:
         be:e4:7d:d8:72:c9:7c:8e:45:96:3d:c5:87:46:0f:6c:0b:22:
         f0:94:d5:8d:04:8e:66:fb:e0:f7:91:31:9a:3d:79:f5:8a:f0:
         fb:0a:c7:94:ba:0b:c2:5a:10:3c:69:7c:23:b6:1f:b9:0f:70:
         aa:2c:91:9b:ee:c8:60:17:08:85:27:bc:3a:12:52:28:fd:2c:
         ac:32:b3:d5:bb:59:3a:aa:b5:e3:07:db:8c:8b:26:d6:06:85:
         a4:07:7e:f8:80:bd:50:4a:37:fd:e4:3a:de:43:8b:2e:a5:1c:
         f4:9b:25:55:ae:49:16:c9:d7:c6:df:72:7b:4b:27:12:22:a5:
         55:b4:9e:48:54:7a:b4:72:1d:b8:14:a9:22:8d:2d:36:7b:e1:
         38:80:92:d0:d9:73:e2:61:9b:c9:b7:94:0c:68:5a:91:0c:03:
         d0:b5:82:f1:b9:fe:b7:a9:bb:34:1e:21:c7:84:d3:25:5d:21:
         14:2d:d6:8e:41:21:fd:41:93:cd:ad:34:bd:32:cd:84:b7:d3:
         03:d4:20:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----