Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/da6b282a07f4afb61a4184219a2c3809e5c3be7d.roa
File:                     da6b282a07f4afb61a4184219a2c3809e5c3be7d.roa (raw, json)
Hash identifier:          JWlUh9LcxRRdVLmoxh0Gf3HU8rdkEJY1g39SVek2BfY=
Subject key identifier:   DD:93:A9:BD:1A:F5:F6:03:F2:96:F6:DD:AB:F4:EC:9D:9D:A1:5D:1C
Certificate issuer:       /CN=36e192b55cb56ddb327e18a090fa757000686249
Certificate serial:       0D03A4
Authority key identifier: 75:D0:7D:9E:91:AC:51:2C:49:38:1A:C8:8E:68:5A:9E:77:AB:C3:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36e192b55cb56ddb327e18a090fa757000686249.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/da6b282a07f4afb61a4184219a2c3809e5c3be7d.roa
Signing time:             Wed 24 Mar 2021 14:35:05 +0000
ROA not before:           Wed 24 Mar 2021 14:35:05 +0000
ROA not after:            Tue 24 Mar 2026 14:35:05 +0000
asID:                     270057
IP address blocks:        191.102.238.0/24 maxlen: 24
                          191.102.239.0/24 maxlen: 24
                          2803:2a80:802::/48 maxlen: 64
                          2803:2a80:806::/48 maxlen: 64
                          2803:2a80:807::/48 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852900 (0xd03a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36e192b55cb56ddb327e18a090fa757000686249
        Validity
            Not Before: Mar 24 14:35:05 2021 GMT
            Not After : Mar 24 14:35:05 2026 GMT
        Subject: CN=da6b282a07f4afb61a4184219a2c3809e5c3be7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:39:e6:d6:04:6b:fd:02:7e:bd:68:2d:9c:aa:
                    8b:08:83:5a:9c:fa:d1:4d:65:cb:29:2d:18:0f:73:
                    44:d2:c5:55:64:2f:10:17:51:41:f0:eb:9e:95:bd:
                    9d:b2:e8:c9:f5:79:69:d2:a1:bd:00:99:90:1f:50:
                    dc:2b:6f:6a:7c:f3:45:1b:d4:41:55:a7:84:32:cb:
                    6b:28:b4:57:53:3b:a5:e8:0d:a3:de:f6:9b:b2:df:
                    31:e4:ec:10:30:14:e9:e8:01:a1:73:0d:a2:60:3a:
                    76:f3:4f:de:dc:08:74:f2:34:68:c5:3b:2a:be:2c:
                    89:42:f5:e3:55:a2:5c:4e:46:ad:a1:c7:72:e9:18:
                    78:b4:95:bf:3b:5a:ff:78:91:c2:21:b0:89:6b:d3:
                    cf:f3:7b:e7:09:45:de:f2:a5:5d:b8:43:a5:18:81:
                    a7:e8:bb:2f:61:2b:55:e6:ca:7b:c1:3e:53:1b:0b:
                    5c:bc:2e:dc:20:0b:3a:48:fc:7e:73:f1:05:7f:a7:
                    1c:03:92:d1:81:ff:33:cb:d8:2e:6f:98:d1:94:f6:
                    c8:30:b9:fd:8f:d4:a0:93:17:6c:b1:17:4e:a9:73:
                    f3:05:38:fc:47:08:35:39:48:da:d9:ba:d0:cf:6c:
                    81:96:7f:89:fb:48:92:8e:64:c7:a5:3f:4e:c7:d6:
                    54:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:93:A9:BD:1A:F5:F6:03:F2:96:F6:DD:AB:F4:EC:9D:9D:A1:5D:1C
            X509v3 Authority Key Identifier:
                keyid:75:D0:7D:9E:91:AC:51:2C:49:38:1A:C8:8E:68:5A:9E:77:AB:C3:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36e192b55cb56ddb327e18a090fa757000686249.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/da6b282a07f4afb61a4184219a2c3809e5c3be7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/36e192b55cb56ddb327e18a090fa757000686249.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.238.0/23
                IPv6:
                  2803:2a80:802::/48
                  2803:2a80:806::/47

    Signature Algorithm: sha256WithRSAEncryption
         29:34:ed:c7:b3:96:5d:bb:47:85:95:d9:1a:d0:e3:74:ef:2e:
         e5:62:42:33:2e:ec:dd:80:fc:74:a0:46:8d:9f:b4:2e:a5:a7:
         e6:d6:6b:f6:79:33:39:fc:ff:08:44:8f:c1:6e:bb:f1:7e:27:
         6c:d6:28:a3:22:4d:9d:af:f2:c4:de:bb:db:cb:fb:e5:e1:70:
         fc:4e:52:6c:d3:bb:6d:9f:25:2b:96:37:4d:01:dd:c4:9b:77:
         c9:cb:51:db:7b:4e:c8:cd:5e:43:bd:e5:fd:23:0c:ba:59:13:
         2e:49:fe:d8:2b:8f:0e:a2:74:2b:05:bf:35:34:cd:b5:5b:f3:
         73:c5:b7:53:9e:54:04:b8:aa:f5:cc:20:ce:f2:3f:4f:20:b5:
         2c:b0:58:64:a6:2c:01:31:7c:b6:e8:a2:b2:af:03:8d:a6:61:
         66:a9:b5:5b:96:1c:83:86:7c:0b:23:69:1f:c4:45:95:9f:7a:
         ea:d0:e2:78:cb:22:3d:31:03:d2:56:d8:69:32:f6:e2:71:78:
         c5:62:52:fa:4b:69:e0:66:c6:5d:ff:1c:a2:62:13:52:e0:3f:
         a5:2c:aa:58:5b:b4:ad:f5:fd:d5:8b:1e:2c:68:04:24:4e:39:
         3d:86:97:53:f0:70:46:09:13:88:17:42:f1:48:ff:55:40:8f:
         37:e8:82:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----