Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/5d031ec5d0b71cb51c5dacc48a8b70e23d3e8a6b.roa
File:                     5d031ec5d0b71cb51c5dacc48a8b70e23d3e8a6b.roa (raw, json)
Hash identifier:          GjiOLfVdWee5bU+Ryu/IpQHXp6AvU6cGkfmUoKKq8Rg=
Subject key identifier:   1A:E1:6C:C6:C2:E6:D7:B2:56:66:83:63:A0:68:09:EC:5C:D0:EF:E3
Certificate issuer:       /CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
Certificate serial:       13C3A0
Authority key identifier: 34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/5d031ec5d0b71cb51c5dacc48a8b70e23d3e8a6b.roa
Signing time:             Fri 26 Nov 2021 22:28:53 +0000
ROA not before:           Fri 26 Nov 2021 03:00:00 +0000
ROA not after:            Sun 26 Nov 2023 03:00:00 +0000
asID:                     262202
IP address blocks:        186.15.184.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1295264 (0x13c3a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
        Validity
            Not Before: Nov 26 03:00:00 2021 GMT
            Not After : Nov 26 03:00:00 2023 GMT
        Subject: CN=5d031ec5d0b71cb51c5dacc48a8b70e23d3e8a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:10:ab:0d:e9:3c:5e:0a:f4:51:3e:6a:8b:93:
                    f3:3a:df:3f:62:03:64:8a:cf:86:b4:e2:68:e7:0b:
                    59:51:aa:35:d6:5f:57:dc:9f:2f:d9:34:ae:85:09:
                    88:dc:85:a9:ad:e7:8a:1a:25:36:83:03:3f:22:2e:
                    39:de:87:66:b9:16:a7:c8:e3:17:ae:03:bd:4b:bb:
                    6b:15:a6:9e:c6:a9:eb:1b:0e:d5:c2:21:cf:9e:0a:
                    15:65:4f:72:92:93:32:55:da:80:b7:2e:76:25:d3:
                    03:35:18:7a:28:08:95:a7:f0:e4:a2:80:96:e1:35:
                    db:98:2a:72:fc:29:bf:5b:14:7d:2b:1f:78:8e:f0:
                    2b:3d:ba:0b:2d:e6:1a:6d:12:af:28:f6:94:9c:3a:
                    1c:07:4b:e2:d3:f5:d9:61:17:56:96:96:7e:4b:ec:
                    f7:00:b5:01:31:53:59:65:31:e2:c6:82:93:b3:6a:
                    51:1c:d2:85:42:d0:56:90:0a:a2:c1:f6:cb:a5:7c:
                    c3:23:5e:03:44:48:d0:dc:63:91:8e:f5:d1:51:a1:
                    42:6b:b2:85:b5:ad:9e:f7:68:19:4a:4a:5c:b5:ed:
                    be:d0:d2:00:81:e7:f1:7d:89:63:eb:b2:2c:cc:be:
                    7b:2c:9a:7b:a0:c9:9c:e7:2f:1f:6b:0c:54:71:05:
                    65:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E1:6C:C6:C2:E6:D7:B2:56:66:83:63:A0:68:09:EC:5C:D0:EF:E3
            X509v3 Authority Key Identifier:
                keyid:34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/5d031ec5d0b71cb51c5dacc48a8b70e23d3e8a6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.15.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3e:f6:fb:63:67:05:27:25:81:a9:12:f9:76:80:34:e6:0b:91:
         25:cb:2d:d0:96:4e:80:6f:4c:de:5c:51:ad:4e:07:5f:82:24:
         d1:81:8b:7e:17:3e:bc:33:84:d9:9b:cf:b0:6c:94:3a:41:87:
         11:46:a8:93:2f:20:79:97:a6:20:60:e1:91:a8:09:3e:6b:85:
         f8:5d:d1:a1:9c:64:47:f2:3e:cc:6c:7a:b8:1c:7e:ce:e9:b2:
         bb:69:3a:f4:24:1b:9e:8e:9d:bc:96:75:8d:ab:54:2f:e0:d0:
         5b:7d:0b:7f:c3:4a:67:cf:f7:d8:1e:6b:1e:5e:c4:5b:b2:eb:
         6e:c0:d4:ed:c6:4b:e9:a7:ff:81:dc:62:9c:67:b0:d4:b3:bb:
         e2:c4:03:0c:f3:da:6d:86:7f:4f:86:ac:d0:49:47:96:91:7c:
         d6:5a:99:4f:a1:d1:20:1d:4b:a7:7a:1d:4e:ec:2e:70:b3:5a:
         e1:ad:13:ac:6d:c1:e6:d1:d8:7c:ce:78:24:1b:73:28:e2:a9:
         15:39:fd:c7:fc:72:65:fe:67:68:bf:7b:2e:c5:6a:f2:bd:2b:
         ec:80:b9:22:e5:a5:c5:4e:86:8c:91:78:a1:9b:85:e5:50:01:
         44:3b:00:c8:a2:2c:2c:56:52:8e:a0:88:45:cd:3e:56:f7:17:
         0e:ab:b4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----