Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35f70a2b-28b6-4ed8-9590-dd8645ed7efd/97f13129bdefa9afda022069e23efc2659473a08.roa
File:                     97f13129bdefa9afda022069e23efc2659473a08.roa (raw, json)
Hash identifier:          +H9m1DEnkUbgoVE+YE7tNpL6Ak/7yFx03CBbZNcLslk=
Subject key identifier:   74:1D:E9:83:F0:4E:12:93:B6:3D:25:A7:CF:B3:CA:72:DF:D7:6C:44
Certificate issuer:       /CN=eb390b28179c24ec9435f9593f78cfa52f75f119
Certificate serial:       0DDA
Authority key identifier: 04:9A:57:F3:D8:48:B1:46:E4:9B:DF:0B:DE:84:DE:9E:13:91:B8:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb390b28179c24ec9435f9593f78cfa52f75f119.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35f70a2b-28b6-4ed8-9590-dd8645ed7efd/97f13129bdefa9afda022069e23efc2659473a08.roa
Signing time:             Wed 27 Oct 2021 12:56:22 +0000
ROA not before:           Tue 26 Oct 2021 03:00:00 +0000
ROA not after:            Thu 26 Oct 2023 03:00:00 +0000
asID:                     27747
IP address blocks:        181.44.0.0/14 maxlen: 24
                          168.194.180.0/22 maxlen: 24
                          186.18.0.0/15 maxlen: 24
                          186.22.0.0/15 maxlen: 24
                          190.55.0.0/16 maxlen: 24
                          200.115.192.0/18 maxlen: 24
                          200.125.64.0/18 maxlen: 24
                          2800:810::/28 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3546 (0xdda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb390b28179c24ec9435f9593f78cfa52f75f119
        Validity
            Not Before: Oct 26 03:00:00 2021 GMT
            Not After : Oct 26 03:00:00 2023 GMT
        Subject: CN=97f13129bdefa9afda022069e23efc2659473a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:35:75:60:9d:b6:c8:0c:4f:31:36:c5:3d:ef:
                    b0:d2:34:29:53:38:29:b9:4f:da:c4:f0:05:d1:62:
                    61:a3:7f:84:31:7c:f7:f3:c5:14:16:b3:d9:43:2d:
                    e6:ed:9d:3b:1d:96:cc:a7:be:1b:e8:14:b2:44:fc:
                    e5:07:06:59:60:84:e2:85:85:bd:0b:06:c6:aa:18:
                    02:8c:12:37:84:20:a4:bc:54:73:b2:10:12:28:8f:
                    5b:48:77:a8:51:54:4f:aa:f3:79:47:23:7f:c6:23:
                    e9:8d:7e:81:35:e0:39:8a:07:93:ab:c9:8d:46:6b:
                    d4:9f:ae:75:06:ee:0e:36:4c:40:b5:38:f5:a6:84:
                    6d:e5:9e:0a:1e:0d:02:9d:6b:89:f7:bd:a8:00:27:
                    ac:eb:fc:cc:a5:1e:bf:8d:87:e7:7d:16:ff:0f:e8:
                    d5:b0:ae:da:8b:a3:ec:37:00:08:06:0f:05:94:a1:
                    f4:68:09:b5:2d:e2:58:45:cd:c6:8b:65:f2:93:a8:
                    ee:c8:f7:7c:a0:c8:ee:dc:21:72:75:ef:9a:9c:d4:
                    75:c3:38:b9:cb:0e:03:f2:2f:1e:f8:70:81:3d:2b:
                    b9:ef:17:45:3e:6c:33:49:07:bf:2b:50:49:19:70:
                    50:a7:91:ec:0e:d4:5b:d9:41:49:62:a3:86:9f:30:
                    01:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1D:E9:83:F0:4E:12:93:B6:3D:25:A7:CF:B3:CA:72:DF:D7:6C:44
            X509v3 Authority Key Identifier:
                keyid:04:9A:57:F3:D8:48:B1:46:E4:9B:DF:0B:DE:84:DE:9E:13:91:B8:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb390b28179c24ec9435f9593f78cfa52f75f119.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35f70a2b-28b6-4ed8-9590-dd8645ed7efd/97f13129bdefa9afda022069e23efc2659473a08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35f70a2b-28b6-4ed8-9590-dd8645ed7efd/eb390b28179c24ec9435f9593f78cfa52f75f119.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.180.0/22
                  181.44.0.0/14
                  186.18.0.0/15
                  186.22.0.0/15
                  190.55.0.0/16
                  200.115.192.0/18
                  200.125.64.0/18
                IPv6:
                  2800:810::/28

    Signature Algorithm: sha256WithRSAEncryption
         6c:2e:bb:96:14:50:4c:0f:b7:d6:f2:e3:8c:1c:8c:4a:18:7f:
         32:34:7b:8c:5a:4a:f9:0c:e9:a2:4d:fd:81:41:a6:a4:0f:a9:
         08:bc:f5:a8:5e:70:8e:5a:20:09:8a:99:21:65:69:1f:da:37:
         0c:04:59:11:a1:84:f4:46:c9:18:61:bd:ec:af:40:a5:5c:77:
         22:4b:1f:f2:4c:dc:26:08:c7:4f:f2:3f:d1:72:58:ff:08:39:
         01:25:6b:f6:5d:90:82:14:a7:e8:2f:47:89:e5:6b:1f:c6:3b:
         9b:07:db:fc:51:09:e7:ea:9e:6a:5d:af:dc:12:b7:28:18:3a:
         14:76:4f:2d:dd:aa:df:5d:cc:4b:3f:39:33:f9:1b:6d:b7:79:
         dd:44:bd:ed:84:60:5c:ec:02:6e:8f:06:56:24:b3:68:95:21:
         9b:f3:c0:c4:db:13:be:74:9c:73:31:51:ac:a4:c9:64:44:5b:
         7f:22:d4:3c:e4:64:26:71:c2:66:8a:cd:7a:88:ba:ea:09:ce:
         c9:6c:71:12:87:d4:45:28:20:88:0b:09:ce:ab:c8:af:63:2c:
         fa:65:e3:8e:72:34:f0:c9:aa:23:a7:e4:8a:a2:49:cd:95:02:
         21:c6:de:a0:d8:14:b6:36:32:cd:bf:96:9b:a4:a5:7d:9d:44:
         e2:04:2b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----