Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/e30d75ea296f3c112184b6ca0d1ffad256b52e64.roa
File:                     e30d75ea296f3c112184b6ca0d1ffad256b52e64.roa (raw, json)
Hash identifier:          VV7VT5nFJ+2wLaYf82IF6kFyhi3xIC78nkEqxH6GfXc=
Subject key identifier:   63:31:69:08:AC:7A:25:83:AB:13:16:26:73:C4:2C:DD:8F:DA:F4:FD
Certificate issuer:       /CN=53fe257dcf8bca4ea5c613680400a9cf495caccb
Certificate serial:       0D4660
Authority key identifier: C8:65:04:76:5F:5B:06:AB:B5:EC:85:2C:4C:F1:85:76:5A:88:98:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53fe257dcf8bca4ea5c613680400a9cf495caccb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/e30d75ea296f3c112184b6ca0d1ffad256b52e64.roa
Signing time:             Wed 24 Mar 2021 14:45:34 +0000
ROA not before:           Wed 24 Mar 2021 14:45:34 +0000
ROA not after:            Tue 24 Mar 2026 14:45:34 +0000
asID:                     262168
IP address blocks:        138.117.160.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 869984 (0xd4660)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53fe257dcf8bca4ea5c613680400a9cf495caccb
        Validity
            Not Before: Mar 24 14:45:34 2021 GMT
            Not After : Mar 24 14:45:34 2026 GMT
        Subject: CN=e30d75ea296f3c112184b6ca0d1ffad256b52e64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ef:43:e5:54:d3:e1:49:73:2d:ed:de:02:b6:
                    c6:f0:d0:5b:35:06:ee:9f:04:9b:89:0c:c0:6b:9e:
                    be:e6:57:bb:ed:60:54:50:b7:fd:be:08:92:18:d7:
                    1c:f7:77:74:65:92:b4:6c:ed:e3:34:11:2b:b9:5e:
                    1c:40:a6:75:c6:e0:9a:ec:18:2a:ce:71:a9:fb:e0:
                    a1:f1:3d:73:2c:a5:b7:9e:65:32:96:c7:43:39:2f:
                    2e:31:7e:91:93:cf:f5:75:21:41:72:76:75:49:fc:
                    79:b4:9c:7e:7e:6f:e0:fc:25:99:cc:b8:e6:6d:92:
                    b0:ab:b2:fb:53:5a:2b:6e:42:23:dd:58:92:87:c8:
                    5f:a4:13:e7:29:a3:cf:1c:6f:e6:fb:03:53:07:31:
                    c4:de:64:a6:5d:f4:da:73:a0:7d:b7:2e:d6:f7:cc:
                    7f:df:31:cd:a4:17:b9:ca:1e:1c:d9:4d:02:1a:17:
                    b3:a7:91:e3:8e:77:0b:30:26:76:b2:44:62:ba:a6:
                    4f:18:dc:32:a9:e3:20:ec:ce:72:b6:bc:c6:67:0b:
                    d1:bd:ca:0d:83:37:6c:30:86:11:2e:e5:87:9e:ed:
                    4d:3f:66:05:83:dc:7b:cf:50:1a:a8:c5:e8:23:a5:
                    73:29:8c:73:7a:97:9a:ed:2f:e6:49:fd:42:f0:0e:
                    89:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:31:69:08:AC:7A:25:83:AB:13:16:26:73:C4:2C:DD:8F:DA:F4:FD
            X509v3 Authority Key Identifier:
                keyid:C8:65:04:76:5F:5B:06:AB:B5:EC:85:2C:4C:F1:85:76:5A:88:98:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53fe257dcf8bca4ea5c613680400a9cf495caccb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/e30d75ea296f3c112184b6ca0d1ffad256b52e64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/53fe257dcf8bca4ea5c613680400a9cf495caccb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:f6:24:62:a5:64:8e:b5:2b:8d:4e:c7:a6:5b:ed:7f:21:2b:
         a8:d4:dc:ff:a2:da:61:00:64:09:9d:92:87:54:52:1e:6b:44:
         d5:63:a5:e4:dc:d3:e1:ce:07:0b:cd:bb:1f:8f:e3:9a:37:a0:
         d0:19:8d:12:e6:de:c8:9e:6e:dd:fe:8a:e8:71:8f:59:cc:d4:
         76:f9:a6:10:f1:6c:2f:28:a0:60:9e:e2:d6:75:cd:39:f1:83:
         97:74:b5:05:52:78:c5:9e:7f:19:19:53:66:d4:41:ff:cc:0d:
         2f:af:94:06:a5:22:b2:66:a5:67:6a:04:fb:dd:f7:8c:91:c9:
         2a:3d:54:db:b8:7f:77:c8:32:00:ad:a5:fe:2c:c1:f1:68:ee:
         2c:a6:1d:2e:5c:33:22:70:44:d0:2d:e4:cd:de:9d:2b:41:c6:
         db:67:e9:ee:e0:d1:81:8f:cc:30:03:8b:88:a0:1d:b1:41:3c:
         be:12:73:dc:e1:c2:16:b9:1a:c8:5f:b8:22:16:2d:1a:83:0e:
         a1:31:74:f5:51:63:74:ef:55:1e:3b:c4:4b:49:67:58:57:45:
         61:0f:f3:d8:1e:84:02:21:22:43:51:3a:c6:02:02:dc:4c:48:
         c0:7f:3a:81:60:68:03:d0:ef:11:43:65:be:77:49:a3:02:30:
         d8:93:57:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----