Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/908c71571eb738b8882d33aaaea0e45d7c0998ce.roa
File:                     908c71571eb738b8882d33aaaea0e45d7c0998ce.roa (raw, json)
Hash identifier:          npNUDA1S/r09ooXTXTA48PTdK0HKE1MqXjg7DQ1Pzpk=
Subject key identifier:   05:1E:7F:98:56:70:FD:44:C5:45:E7:5A:81:DF:2F:D8:0F:17:68:B2
Certificate issuer:       /CN=ce64e257eae04ee26d8eb339f148791b31cc0875
Certificate serial:       19C3FB
Authority key identifier: 67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/908c71571eb738b8882d33aaaea0e45d7c0998ce.roa
Signing time:             Mon 15 Aug 2022 19:42:29 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     23031
IP address blocks:        66.231.64.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1688571 (0x19c3fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce64e257eae04ee26d8eb339f148791b31cc0875
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=908c71571eb738b8882d33aaaea0e45d7c0998ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d2:74:2d:22:20:39:73:a0:ad:e6:39:8e:ad:
                    57:56:28:5d:50:9e:de:2d:9d:77:7e:1b:0a:29:b4:
                    e5:03:4f:62:2f:99:cc:7e:75:41:d0:61:05:ac:7a:
                    24:7f:25:d1:eb:4a:65:83:62:d1:0b:95:41:ff:a8:
                    b2:04:15:f6:81:cc:a4:1e:48:ae:39:e6:03:0e:80:
                    1c:e3:74:59:ab:99:d9:82:c0:9e:df:72:32:56:89:
                    1f:25:2d:02:0d:db:20:83:8a:33:4f:53:8f:ee:9f:
                    ea:26:63:c3:4a:0c:1c:f0:e8:68:9e:9c:66:96:fe:
                    89:bc:5f:a4:fa:4f:81:21:b9:15:a1:8f:98:84:42:
                    84:7f:09:7d:1c:5b:26:fc:74:a2:cb:15:63:4a:5e:
                    e8:9e:9f:f1:f4:a5:19:ee:dd:6b:59:14:83:b2:dc:
                    a4:7a:aa:72:2e:da:75:17:53:cb:8c:42:9f:e0:f4:
                    3b:0c:ef:80:43:c9:4d:bf:34:e9:28:82:40:63:70:
                    a5:50:fe:bd:62:12:20:5f:b1:74:2f:e0:04:23:62:
                    6d:e7:19:0f:04:b3:41:91:9d:06:e3:f9:54:1c:9f:
                    fe:87:8d:2d:dc:9d:b6:8a:3a:98:08:f2:0c:88:62:
                    52:bb:97:51:8c:f5:14:b6:41:2c:c7:b2:11:2b:ba:
                    45:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1E:7F:98:56:70:FD:44:C5:45:E7:5A:81:DF:2F:D8:0F:17:68:B2
            X509v3 Authority Key Identifier:
                keyid:67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/908c71571eb738b8882d33aaaea0e45d7c0998ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/ce64e257eae04ee26d8eb339f148791b31cc0875.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         80:4a:f9:f7:42:0a:c6:96:38:96:13:f2:bf:71:8c:89:19:b8:
         6c:10:23:be:0a:bd:35:4b:96:21:fd:e3:30:66:47:9a:ec:0a:
         50:38:06:bc:2e:74:6f:5d:18:3d:56:ac:25:fa:95:3e:8d:8e:
         91:84:ce:a3:87:fc:f5:ac:7f:4e:6f:02:8d:74:93:46:89:80:
         65:bd:4a:ff:66:01:83:97:08:d6:5d:02:64:82:b6:a7:f6:9d:
         88:0e:28:f7:83:d4:71:b1:0e:b9:a5:d2:30:7e:60:4f:bd:85:
         2d:9a:bd:bc:a5:b6:09:19:15:65:c6:ae:e9:3c:09:ff:94:ff:
         1e:62:86:60:9e:9a:22:f9:62:86:33:d5:68:ae:a0:6b:27:3c:
         f9:ae:b9:93:0a:ab:e9:a9:4c:5f:18:b2:70:81:97:fe:04:6a:
         b6:4b:2e:6d:45:4c:ce:71:32:be:ee:7a:14:2f:06:ff:03:3a:
         2a:43:e6:b9:1b:52:c8:7d:69:2e:a0:85:bc:88:df:a3:05:3b:
         65:82:ce:ff:b2:39:b6:19:e8:8b:31:ba:eb:3e:df:e3:e5:d7:
         bb:86:75:ba:18:92:93:67:d0:85:81:f0:8d:c8:b1:4a:0d:67:
         93:a4:22:7a:ce:47:05:12:8b:94:87:99:10:03:db:8e:04:94:
         5b:33:b4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----