Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2de6dd2b-d012-4df9-938a-34a819e77367/7421e52a90319578c4cf69f0ea6f2985205888ba.roa
File:                     7421e52a90319578c4cf69f0ea6f2985205888ba.roa (raw, json)
Hash identifier:          8XGqIHFpJBSnFPYshv5vFQAqaxv+qr7dPa+G1P3yXkw=
Subject key identifier:   69:38:3B:5B:88:09:17:FE:28:19:84:DB:0A:40:3F:77:6D:4D:15:F3
Certificate issuer:       /CN=adc5c48c0530f6b5d4541934afd8847cacfbe87f
Certificate serial:       0BF3AC
Authority key identifier: B8:B1:1D:26:BA:F7:1F:BA:1C:0D:6E:59:EB:CB:77:D4:BF:8B:8C:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/adc5c48c0530f6b5d4541934afd8847cacfbe87f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2de6dd2b-d012-4df9-938a-34a819e77367/7421e52a90319578c4cf69f0ea6f2985205888ba.roa
Signing time:             Wed 24 Mar 2021 14:33:51 +0000
ROA not before:           Wed 24 Mar 2021 14:33:51 +0000
ROA not after:            Tue 24 Mar 2026 14:33:51 +0000
asID:                     52511
IP address blocks:        138.186.8.0/22 maxlen: 24
                          2803:8240::/32 maxlen: 48

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 05:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783276 (0xbf3ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adc5c48c0530f6b5d4541934afd8847cacfbe87f
        Validity
            Not Before: Mar 24 14:33:51 2021 GMT
            Not After : Mar 24 14:33:51 2026 GMT
        Subject: CN=7421e52a90319578c4cf69f0ea6f2985205888ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ca:41:67:d7:1f:9d:69:95:4c:b2:08:c1:a1:
                    50:5f:fe:a5:d0:eb:ac:57:4f:26:56:6c:f5:c6:53:
                    39:05:63:1d:45:99:47:0c:b7:20:e4:03:c8:d1:d8:
                    0c:8a:7e:63:93:20:6a:13:72:90:b3:92:99:e0:a5:
                    55:e1:a6:5e:5c:58:63:17:33:2c:2a:cd:e9:e3:70:
                    01:a7:ab:6e:c7:24:98:17:3e:17:83:c0:98:94:8f:
                    91:52:c8:d3:bb:60:2e:b0:01:82:ae:5e:42:6a:04:
                    80:e5:7a:d1:b3:1e:b9:6d:90:31:12:f5:87:26:f1:
                    f4:3d:55:7a:ad:c9:05:b0:58:09:0d:f6:c4:78:65:
                    3c:d9:28:62:a2:eb:46:3b:68:07:4b:58:1f:c1:d2:
                    2b:76:a8:43:14:c3:be:74:b3:84:4f:7d:f0:6f:3c:
                    ec:a5:f4:f9:7b:c6:e7:15:e7:8b:d7:1f:7d:29:35:
                    f8:56:19:b9:c2:1e:e3:d7:ac:cf:35:14:27:93:54:
                    3d:d3:0c:0a:1e:19:68:00:d5:83:40:81:1e:0e:5c:
                    c4:1c:8a:dd:c1:a2:3e:eb:02:c3:28:44:b8:04:a8:
                    80:ca:6e:19:a2:7a:ed:2a:7e:43:56:3e:e5:02:5a:
                    55:5f:a6:69:a0:76:0c:a8:ce:da:2e:48:87:6f:77:
                    5b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:38:3B:5B:88:09:17:FE:28:19:84:DB:0A:40:3F:77:6D:4D:15:F3
            X509v3 Authority Key Identifier:
                keyid:B8:B1:1D:26:BA:F7:1F:BA:1C:0D:6E:59:EB:CB:77:D4:BF:8B:8C:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/adc5c48c0530f6b5d4541934afd8847cacfbe87f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2de6dd2b-d012-4df9-938a-34a819e77367/7421e52a90319578c4cf69f0ea6f2985205888ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2de6dd2b-d012-4df9-938a-34a819e77367/adc5c48c0530f6b5d4541934afd8847cacfbe87f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.8.0/22
                IPv6:
                  2803:8240::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:c3:60:40:18:68:e6:dc:56:69:04:59:8d:54:56:86:e7:bf:
         73:11:74:0e:bc:d0:6f:a1:f9:97:7a:04:8c:88:60:a7:82:b8:
         30:85:63:4b:10:b9:62:87:ee:64:24:f5:ab:b0:c9:e2:01:85:
         28:6c:6e:c5:69:c8:bd:7f:ce:ea:f0:fd:74:40:1f:87:0a:7f:
         ea:28:dd:15:db:ce:7c:59:ef:e0:ef:54:8f:bf:9f:52:10:b1:
         db:1b:18:cc:a1:78:45:d3:fd:71:3c:63:d0:d1:94:bf:30:12:
         92:6b:e7:9c:18:53:1d:5c:ad:00:73:6b:c0:dd:92:a3:6b:07:
         a4:b1:81:f4:bf:2e:7c:17:c9:da:48:5f:8b:35:9e:83:9a:bf:
         3d:dd:6c:40:25:8a:b6:46:4d:50:8b:67:f3:59:8b:91:56:0d:
         d5:e5:24:9b:df:60:8c:89:94:87:7c:b3:38:8e:ed:a6:4a:27:
         1f:53:9c:b7:f5:d4:2e:f8:a7:01:e7:ea:c9:17:2d:0c:d4:42:
         b4:3b:14:a4:36:c0:df:87:a7:b4:cd:7c:5a:f9:13:9d:86:61:
         48:cf:75:3b:90:1a:99:68:95:85:78:eb:0c:ed:25:a3:27:f1:
         b5:ed:f9:7b:bf:27:2e:87:86:4f:eb:f0:87:72:4f:c1:64:e9:
         97:fb:b2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----