Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3d57f1aa-745c-42d3-bb45-9d78df0fda93/34071816e0e2f0eb61ea1f3183bcee0afc284afc.roa
File:                     34071816e0e2f0eb61ea1f3183bcee0afc284afc.roa (raw, json)
Hash identifier:          Vl2oGfyDblQ/jMYZkAMMK+X7xNFIm3gOg1XBIzH3/Ic=
Subject key identifier:   4B:EB:02:67:61:AA:6F:C6:EA:5C:51:79:6D:12:00:1A:F2:51:38:E5
Certificate issuer:       /CN=27d771563476f84472c0c6773e18250f9923ed00
Certificate serial:       0DA90E
Authority key identifier: 21:12:3A:78:DA:A4:40:DB:ED:91:44:30:46:52:86:0C:B5:7F:82:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27d771563476f84472c0c6773e18250f9923ed00.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3d57f1aa-745c-42d3-bb45-9d78df0fda93/34071816e0e2f0eb61ea1f3183bcee0afc284afc.roa
Signing time:             Wed 24 Mar 2021 14:31:30 +0000
ROA not before:           Wed 24 Mar 2021 14:31:30 +0000
ROA not after:            Tue 24 Mar 2026 14:31:30 +0000
asID:                     265694
IP address blocks:        170.78.136.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895246 (0xda90e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d771563476f84472c0c6773e18250f9923ed00
        Validity
            Not Before: Mar 24 14:31:30 2021 GMT
            Not After : Mar 24 14:31:30 2026 GMT
        Subject: CN=34071816e0e2f0eb61ea1f3183bcee0afc284afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:07:dc:8d:4c:31:13:70:c1:3c:e2:49:4b:d5:
                    43:0e:01:68:f1:6d:c6:99:8a:b0:d1:46:39:e7:29:
                    74:83:b2:6c:7b:58:f6:64:3c:b0:f1:07:3f:ff:c6:
                    8f:3c:b0:a0:8f:ba:7f:e6:34:bf:e1:99:e5:b0:5d:
                    e5:77:ad:51:98:67:46:12:c5:86:93:76:7e:3f:bd:
                    f2:7e:3f:f4:66:54:94:fe:0b:c1:a9:49:a2:ea:23:
                    4f:86:e1:9d:2d:77:0e:fc:63:07:c8:aa:82:ff:43:
                    3f:3b:94:3a:33:60:71:99:7c:8a:01:42:9e:4d:ee:
                    5c:7f:29:4b:5a:9e:c4:ff:7a:1c:1d:18:3e:e2:f1:
                    e4:50:3c:3c:8d:6a:2e:f0:e4:f6:b4:68:79:be:be:
                    c9:3f:56:02:83:be:71:86:b1:7f:8a:2b:c3:05:24:
                    83:43:a9:25:8a:4c:01:35:35:ff:c5:ae:ba:d8:14:
                    c5:d2:ee:52:9a:af:62:cd:af:bf:d4:0e:ba:97:b2:
                    f6:1d:b1:26:f3:35:96:bb:d1:94:2a:15:29:c9:08:
                    c8:fd:ba:57:1b:64:43:78:12:b5:7d:43:12:37:ca:
                    84:84:0e:ee:e9:8d:2e:3a:0b:7a:f0:0c:5d:8f:27:
                    a1:c4:86:4b:97:70:c0:1a:25:7b:20:ba:09:1d:89:
                    07:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EB:02:67:61:AA:6F:C6:EA:5C:51:79:6D:12:00:1A:F2:51:38:E5
            X509v3 Authority Key Identifier:
                keyid:21:12:3A:78:DA:A4:40:DB:ED:91:44:30:46:52:86:0C:B5:7F:82:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27d771563476f84472c0c6773e18250f9923ed00.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3d57f1aa-745c-42d3-bb45-9d78df0fda93/34071816e0e2f0eb61ea1f3183bcee0afc284afc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3d57f1aa-745c-42d3-bb45-9d78df0fda93/27d771563476f84472c0c6773e18250f9923ed00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:f8:a6:2c:7f:b8:28:61:27:cb:21:dc:9b:8f:54:b5:9b:9e:
         dc:35:36:9f:69:97:da:bf:10:bf:04:9f:46:1d:2c:49:a5:19:
         79:a6:14:13:60:78:01:a4:fc:f9:b0:78:0b:60:21:62:ac:e9:
         0b:52:1a:ab:03:4b:61:52:44:09:c1:8d:94:fa:95:f2:89:51:
         f8:ba:02:52:9c:2b:06:45:9f:db:2f:d7:ac:a3:6b:fc:f3:a7:
         cd:38:49:9a:a4:74:02:b0:2a:ee:bb:37:fb:11:06:b8:23:e2:
         8f:3f:e3:f7:78:1f:8b:3b:11:87:16:8f:fe:8b:7a:d4:00:ba:
         ad:3b:61:a5:63:83:b7:36:ee:6c:d2:82:ef:0e:02:d3:1a:b7:
         69:cb:07:25:9f:82:97:32:9b:2b:90:56:a6:21:4a:23:e4:9c:
         4d:01:6f:c2:c5:00:79:08:58:46:6d:4c:09:e3:60:52:7d:9e:
         a7:2b:3e:ba:30:70:f2:21:29:e6:4a:b7:a2:4d:12:57:bf:02:
         36:49:1a:ee:8e:d2:6c:35:41:fd:b7:d9:6d:b3:50:d7:f3:8b:
         20:ab:8f:21:18:d8:6a:13:e9:38:16:ed:8a:7c:9a:fe:1c:8d:
         67:b4:7a:d6:db:9b:00:33:4b:7b:2f:1c:3e:7d:45:8c:c4:f1:
         d6:a3:fd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----