Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4aa08e21-fb2d-48b7-82d9-f4187c4ea7a0/aea1729b3792ad8d8ac8daa60e2f228519594008.roa
File:                     aea1729b3792ad8d8ac8daa60e2f228519594008.roa (raw, json)
Hash identifier:          thfNLs8bAoGP0ByyVuByNx0Nc40mPPFhY8cQF5kcyAU=
Subject key identifier:   FB:E4:6F:32:69:DF:F3:55:76:B5:36:C8:25:CF:E6:3F:56:6F:1E:F3
Certificate issuer:       /CN=6991426f0c0c7ac92da1d5129c9ec711a2a38a3a
Certificate serial:       0CC8EF
Authority key identifier: 55:7C:2D:2E:8D:B1:AA:A7:A7:7D:B1:29:5D:09:4A:92:0C:0D:CD:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6991426f0c0c7ac92da1d5129c9ec711a2a38a3a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4aa08e21-fb2d-48b7-82d9-f4187c4ea7a0/aea1729b3792ad8d8ac8daa60e2f228519594008.roa
Signing time:             Wed 24 Mar 2021 14:45:04 +0000
ROA not before:           Wed 24 Mar 2021 14:45:04 +0000
ROA not after:            Tue 24 Mar 2026 14:45:04 +0000
asID:                     52242
IP address blocks:        190.181.128.0/18 maxlen: 18

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 837871 (0xcc8ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6991426f0c0c7ac92da1d5129c9ec711a2a38a3a
        Validity
            Not Before: Mar 24 14:45:04 2021 GMT
            Not After : Mar 24 14:45:04 2026 GMT
        Subject: CN=aea1729b3792ad8d8ac8daa60e2f228519594008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:20:44:b0:f2:12:8c:69:a2:25:48:c3:95:bc:
                    cc:f2:f8:4e:f7:11:6b:b4:c2:7c:32:01:2a:5c:ee:
                    95:88:a9:ac:99:20:32:b8:c6:e1:a2:1b:c8:29:00:
                    c4:a5:3d:ce:00:16:6b:29:82:e9:95:23:a6:55:b0:
                    25:86:79:b1:3f:51:17:a6:a9:c5:cb:d3:ca:b0:e7:
                    63:a7:08:9c:3a:b5:55:6a:54:2d:38:2b:7f:39:92:
                    8e:86:d4:f1:f4:45:e2:15:55:d2:00:e5:f5:37:fb:
                    30:ad:b7:76:a4:de:8c:da:45:5d:ae:29:49:2d:fc:
                    6a:59:62:ca:d0:30:a6:35:43:7e:97:4f:28:84:ad:
                    19:35:16:a1:5f:ab:20:12:56:cd:85:dd:a3:a7:4f:
                    ec:89:00:31:ed:d2:84:f4:38:1e:0f:ec:77:a5:87:
                    d5:5c:a5:d4:0d:15:e1:7f:3f:b4:36:cf:d8:ac:85:
                    44:81:9f:cb:a6:bd:e9:40:e5:c9:86:ae:fc:ae:6d:
                    9f:a9:33:48:26:90:16:6f:11:55:84:f5:77:88:a1:
                    ed:1a:2a:01:0a:45:cd:49:5e:18:73:01:de:69:6a:
                    b8:0b:d6:6f:1a:83:e3:b5:32:f7:28:10:28:16:97:
                    fb:99:95:80:2d:57:70:8a:50:0e:90:ac:75:16:35:
                    9f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E4:6F:32:69:DF:F3:55:76:B5:36:C8:25:CF:E6:3F:56:6F:1E:F3
            X509v3 Authority Key Identifier:
                keyid:55:7C:2D:2E:8D:B1:AA:A7:A7:7D:B1:29:5D:09:4A:92:0C:0D:CD:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6991426f0c0c7ac92da1d5129c9ec711a2a38a3a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4aa08e21-fb2d-48b7-82d9-f4187c4ea7a0/aea1729b3792ad8d8ac8daa60e2f228519594008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4aa08e21-fb2d-48b7-82d9-f4187c4ea7a0/6991426f0c0c7ac92da1d5129c9ec711a2a38a3a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         42:ec:95:25:a5:73:33:49:a4:60:b6:90:7a:5c:18:49:5c:ab:
         c4:66:3e:38:64:43:33:cf:fd:b1:53:14:3f:3a:18:40:2e:bb:
         24:3f:bb:50:08:46:8a:bd:97:d4:b7:08:82:38:a5:a1:55:67:
         79:48:f9:9e:da:c8:6e:73:bd:40:7e:11:e9:eb:aa:7a:8f:18:
         b0:07:a6:74:be:5e:b6:b7:02:56:3c:fe:a0:c0:e4:e9:3f:e7:
         2b:0c:ed:f4:66:1d:34:dc:d0:61:6b:84:9f:7f:39:71:91:1f:
         d5:14:d6:6f:11:57:1c:71:bc:9a:d0:09:4d:f1:40:e6:7f:cb:
         17:54:49:05:fc:a5:70:45:50:b2:02:b9:89:87:e0:ef:19:ab:
         ab:ff:f7:41:06:f5:72:ce:c3:0a:eb:26:b8:02:f6:72:60:4d:
         df:43:09:42:04:d9:6e:ca:c4:c5:af:3c:5a:83:31:69:30:46:
         ec:50:63:58:e8:d0:62:77:5b:61:a6:5b:45:67:77:73:81:e4:
         99:f8:79:b3:03:79:58:99:89:11:71:68:84:ff:6d:8f:a6:d7:
         35:9e:ad:a1:dd:6d:b0:fd:3b:1a:21:0f:e4:e0:94:0b:db:40:
         29:24:40:cc:27:59:b0:26:05:56:e6:d2:30:fc:fd:6e:68:4f:
         8b:4b:d4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----