Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/94f721782f3a7308116cd8b54ebd5b486e41ea21.roa
File:                     94f721782f3a7308116cd8b54ebd5b486e41ea21.roa (raw, json)
Hash identifier:          5CCXr3VYcOAdGLIblN8IIl1uEOU4LW9c0NuPfohmTJU=
Subject key identifier:   62:6E:79:F5:7E:40:D4:62:91:30:FF:61:F2:F3:0E:D0:E9:44:05:82
Certificate issuer:       /CN=42b08b0342f4f7f7c4e44054026d23d7568373f6
Certificate serial:       0731
Authority key identifier: 1F:47:29:D2:C3:62:FF:76:5B:8A:D4:B8:F1:D9:B7:18:24:A4:F4:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42b08b0342f4f7f7c4e44054026d23d7568373f6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/94f721782f3a7308116cd8b54ebd5b486e41ea21.roa
Signing time:             Mon 29 Mar 2021 20:21:47 +0000
ROA not before:           Mon 29 Mar 2021 03:00:00 +0000
ROA not after:            Wed 29 Mar 2023 03:00:00 +0000
asID:                     270110
IP address blocks:        189.85.100.0/22 maxlen: 24
                          2806:3b1::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1841 (0x731)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42b08b0342f4f7f7c4e44054026d23d7568373f6
        Validity
            Not Before: Mar 29 03:00:00 2021 GMT
            Not After : Mar 29 03:00:00 2023 GMT
        Subject: CN=94f721782f3a7308116cd8b54ebd5b486e41ea21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6b:7a:6e:1c:a5:61:d8:cd:69:cc:75:8c:5e:
                    fc:96:34:85:8a:06:63:fb:27:4d:f4:24:fb:51:0e:
                    c6:1a:7d:1f:f3:b2:86:58:5c:e0:a2:9e:bd:f3:60:
                    f4:c9:7f:bd:7b:70:76:f2:54:aa:3a:77:15:90:54:
                    97:d1:93:18:ea:d2:7e:11:82:4f:e1:7e:26:49:13:
                    da:aa:39:0f:de:5b:aa:1d:e8:80:f3:be:66:a9:7c:
                    a4:b9:b4:97:ff:ac:bd:0d:45:47:b0:2f:08:b8:5e:
                    9b:3a:a3:5f:10:ae:fb:58:dd:53:32:45:8f:78:df:
                    aa:bf:6d:30:e7:b3:e6:36:e7:7b:ad:b0:8f:f0:24:
                    9b:fc:e3:e7:80:8c:a1:bb:b9:00:61:0e:51:51:12:
                    a3:65:9a:1c:c8:b6:24:a5:a3:36:26:0a:8d:78:2d:
                    02:43:eb:c9:fa:6f:4c:1d:83:49:cf:64:f6:19:98:
                    cb:f1:9a:a3:97:ce:85:59:c8:40:a9:15:67:f4:58:
                    7d:2c:22:6d:3c:90:0f:42:ed:54:bd:fb:b4:88:93:
                    99:47:6d:cd:8d:13:ae:6e:df:d1:b3:31:bd:54:06:
                    87:a7:05:91:e3:e4:c8:16:24:e3:e0:09:2f:54:52:
                    48:76:10:61:fc:0c:c8:fe:07:1d:1c:ab:44:04:00:
                    72:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6E:79:F5:7E:40:D4:62:91:30:FF:61:F2:F3:0E:D0:E9:44:05:82
            X509v3 Authority Key Identifier:
                keyid:1F:47:29:D2:C3:62:FF:76:5B:8A:D4:B8:F1:D9:B7:18:24:A4:F4:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42b08b0342f4f7f7c4e44054026d23d7568373f6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/94f721782f3a7308116cd8b54ebd5b486e41ea21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/42b08b0342f4f7f7c4e44054026d23d7568373f6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.100.0/22
                IPv6:
                  2806:3b1::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:7f:04:35:68:fb:8a:ed:57:3a:94:0b:8c:ba:1a:97:de:92:
         15:e2:30:04:92:cc:dd:9e:e8:9d:3b:8f:55:f9:15:08:54:2c:
         f9:8c:7c:66:21:b3:e3:0f:b1:0f:0b:1a:6c:ac:dc:38:4c:50:
         2f:5a:0c:31:01:bc:83:25:e3:b6:24:2b:6e:85:ba:2f:69:51:
         f5:e4:bb:b7:bb:4b:63:90:a6:fa:78:f7:f8:49:45:04:33:7f:
         3b:fa:1e:be:16:31:ee:3f:c3:b2:59:40:68:7f:1a:a3:61:ce:
         90:08:da:5e:af:ef:4e:1a:19:53:d5:b2:30:2a:3b:54:aa:53:
         7b:1f:a8:c7:e9:a9:e7:32:20:2e:2a:83:25:5d:c3:1d:a4:a5:
         7d:dc:35:4b:4f:68:67:4d:58:d9:5f:a4:4b:f2:ac:6d:96:d0:
         43:eb:5d:3f:1d:93:81:5a:88:72:73:fe:17:dc:9b:d4:34:6d:
         9e:84:90:8d:d3:10:82:77:c5:e2:2f:34:18:93:90:43:4f:49:
         f3:f3:10:ad:16:b6:3b:1e:88:7a:c4:5d:de:a7:d3:df:f0:b7:
         6b:2f:85:a9:5b:37:d0:3e:1e:11:c2:bd:5b:c7:33:c9:1a:2b:
         1d:9f:02:8b:a4:1e:bb:15:bd:93:41:80:cc:bb:f7:82:88:35:
         53:c6:68:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----