Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/218bba34-18f9-4eed-922b-5fc5f6ebcf7e/1e73ad3f0dde4607fdabd1662a86442af2a28994.roa
File:                     1e73ad3f0dde4607fdabd1662a86442af2a28994.roa (raw, json)
Hash identifier:          jKvoX2qffHyvqu+IeAwVNWTRAk2iCp6MQ6yE5vx+H/0=
Subject key identifier:   84:00:EE:EA:D1:A0:EA:9B:C0:EA:DB:82:DF:D4:44:45:24:DA:D6:2C
Certificate issuer:       /CN=6073bb1fe384abff375ad4e17bea5b9cd8716010
Certificate serial:       0AF0F8
Authority key identifier: 56:71:39:C9:0F:11:51:6C:17:56:B0:90:4C:EE:4F:50:45:6A:A9:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6073bb1fe384abff375ad4e17bea5b9cd8716010.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/218bba34-18f9-4eed-922b-5fc5f6ebcf7e/1e73ad3f0dde4607fdabd1662a86442af2a28994.roa
Signing time:             Thu 30 Sep 2021 15:36:42 +0000
ROA not before:           Thu 30 Sep 2021 03:00:00 +0000
ROA not after:            Sat 30 Sep 2023 03:00:00 +0000
asID:                     28509
IP address blocks:        201.139.144.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 717048 (0xaf0f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6073bb1fe384abff375ad4e17bea5b9cd8716010
        Validity
            Not Before: Sep 30 03:00:00 2021 GMT
            Not After : Sep 30 03:00:00 2023 GMT
        Subject: CN=1e73ad3f0dde4607fdabd1662a86442af2a28994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f1:d3:56:90:c1:79:4f:e2:aa:d3:f4:cf:92:
                    50:2b:55:ac:ea:26:a8:7d:d0:8a:72:18:7e:85:00:
                    ca:64:79:f9:d4:b6:b3:af:cf:81:5b:17:e6:c1:42:
                    2e:fa:31:42:98:51:ae:b5:00:d1:1f:a1:4f:02:b4:
                    54:63:98:21:3c:33:c8:6a:84:cf:e9:c7:ae:ed:b9:
                    4e:c0:81:6f:3b:5e:67:89:3a:74:da:e0:e8:09:b1:
                    e9:c2:b0:ba:7b:21:3c:11:07:09:b9:f8:e4:4c:30:
                    d0:43:5d:e0:99:e8:8f:74:0a:71:b5:90:c9:b1:84:
                    7a:f3:54:27:4e:03:c8:76:92:fb:65:3b:16:ed:70:
                    4e:b5:d5:0f:e5:37:37:ab:0e:bd:6f:1d:f3:dc:19:
                    e5:1d:69:93:ab:94:6a:86:19:8b:e9:2a:ed:35:a8:
                    f8:22:f4:6b:f8:5b:3c:8d:14:f9:27:ab:77:c1:10:
                    8e:ed:98:37:4c:81:3d:04:5a:6a:c6:f5:39:8a:99:
                    7b:ad:c0:26:bd:63:db:d2:b5:0c:8c:e1:d3:a7:62:
                    ac:c0:e3:7d:bd:46:2b:26:81:74:e3:36:d8:89:a9:
                    2c:f8:76:4b:63:99:7c:fc:a2:be:14:3d:79:99:48:
                    1f:60:4a:e4:fe:4b:3f:fe:e5:4d:32:5f:f7:95:71:
                    fe:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:00:EE:EA:D1:A0:EA:9B:C0:EA:DB:82:DF:D4:44:45:24:DA:D6:2C
            X509v3 Authority Key Identifier:
                keyid:56:71:39:C9:0F:11:51:6C:17:56:B0:90:4C:EE:4F:50:45:6A:A9:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6073bb1fe384abff375ad4e17bea5b9cd8716010.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/218bba34-18f9-4eed-922b-5fc5f6ebcf7e/1e73ad3f0dde4607fdabd1662a86442af2a28994.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/218bba34-18f9-4eed-922b-5fc5f6ebcf7e/6073bb1fe384abff375ad4e17bea5b9cd8716010.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         da:27:d4:5e:82:dc:b2:b9:05:54:0d:68:be:2b:94:09:57:8c:
         78:17:63:e1:17:00:c3:8b:63:2b:c8:c9:05:64:8b:b6:e2:ea:
         bd:4d:01:60:5d:d5:d4:37:13:56:3a:bb:e8:db:71:8d:25:7d:
         07:c2:fe:24:dc:21:d2:03:86:bb:b6:e8:f7:61:0f:d9:4e:bf:
         2c:96:63:34:26:23:36:45:f8:91:e9:20:d1:f8:8e:fc:03:be:
         16:e1:fc:04:56:5b:42:7c:e4:2c:c4:bc:e7:a2:fb:2c:13:25:
         a4:11:05:d6:cf:dc:71:bf:52:98:29:1b:39:8e:e4:51:64:58:
         37:9d:38:92:81:dd:1c:e5:0a:f1:5e:98:39:77:d9:50:d9:ab:
         ed:f0:2b:1d:b4:e2:0f:b7:d7:55:b4:dd:26:09:94:08:9c:d8:
         5d:c4:2c:5e:51:87:ac:cc:45:11:53:aa:35:a6:3c:eb:34:9c:
         88:86:a7:c7:29:dd:88:bc:5f:56:32:ba:93:cf:61:5e:03:bc:
         17:fa:13:f1:0f:76:cd:5d:49:3f:8e:24:bb:56:d2:17:e0:b6:
         4b:0d:eb:6d:1b:f1:d1:78:f5:e9:3b:96:1c:53:7a:af:94:d7:
         e7:35:e6:98:a2:9d:75:b0:ab:af:98:30:a5:ce:59:49:ec:f6:
         3c:37:bf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----