Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4aa08e21-fb2d-48b7-82d9-f4187c4ea7a0/c5a22172b8896906c2a31d1c39b7f2042e3f284e.roa
File:                     c5a22172b8896906c2a31d1c39b7f2042e3f284e.roa (raw, json)
Hash identifier:          0/2pbNogXNrDeVIAaibUIEuID5dxqsy9LpLCEDhkKc4=
Subject key identifier:   01:D4:74:75:30:68:E0:85:40:83:9A:2B:C4:D9:B3:09:65:22:EC:B0
Certificate issuer:       /CN=6991426f0c0c7ac92da1d5129c9ec711a2a38a3a
Certificate serial:       0CCC26
Authority key identifier: 55:7C:2D:2E:8D:B1:AA:A7:A7:7D:B1:29:5D:09:4A:92:0C:0D:CD:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6991426f0c0c7ac92da1d5129c9ec711a2a38a3a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4aa08e21-fb2d-48b7-82d9-f4187c4ea7a0/c5a22172b8896906c2a31d1c39b7f2042e3f284e.roa
Signing time:             Wed 24 Mar 2021 14:45:05 +0000
ROA not before:           Wed 24 Mar 2021 14:45:04 +0000
ROA not after:            Tue 24 Mar 2026 14:45:04 +0000
asID:                     52242
IP address blocks:        143.137.24.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 838694 (0xccc26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6991426f0c0c7ac92da1d5129c9ec711a2a38a3a
        Validity
            Not Before: Mar 24 14:45:04 2021 GMT
            Not After : Mar 24 14:45:04 2026 GMT
        Subject: CN=c5a22172b8896906c2a31d1c39b7f2042e3f284e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4c:90:1e:65:9a:a6:14:6b:05:93:8c:90:91:
                    65:e7:7c:12:8b:1b:b1:57:08:ca:70:19:4f:2f:f2:
                    16:a5:ce:76:66:10:d9:f8:36:a1:64:ea:cc:cc:73:
                    50:3f:b0:ab:64:eb:46:c4:8c:15:6b:4c:4c:51:f3:
                    ad:da:00:e9:f2:54:32:e3:a4:95:9e:66:74:6d:49:
                    c7:73:c8:90:f7:69:20:ca:a7:13:51:76:0c:f3:19:
                    9e:89:5f:e5:85:98:b1:b9:8d:18:87:ca:be:87:c0:
                    b5:32:c1:41:b7:38:29:db:42:5a:e5:d4:e5:ad:72:
                    31:4b:f9:5b:43:8c:0c:dd:0d:d1:ff:9f:9c:ea:f1:
                    27:4a:26:df:94:33:45:e0:4f:39:a9:cd:8b:8b:bc:
                    72:26:ba:3b:64:f3:81:7d:78:16:72:14:49:8b:6e:
                    bd:c5:4c:91:74:4d:af:f3:47:c8:b6:41:f9:a1:a2:
                    32:f3:ab:42:24:16:5b:71:cb:68:be:7a:ba:4d:77:
                    7d:db:dd:4e:40:e6:b3:2f:cd:49:87:e9:08:44:58:
                    b8:f1:e6:a8:0e:60:62:12:2f:8a:c9:1b:32:fb:7c:
                    77:78:28:e2:51:81:b8:4c:c5:60:2c:ab:1d:81:c2:
                    5f:7d:5f:f4:9e:24:b1:55:91:52:8b:ad:25:41:c5:
                    31:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D4:74:75:30:68:E0:85:40:83:9A:2B:C4:D9:B3:09:65:22:EC:B0
            X509v3 Authority Key Identifier:
                keyid:55:7C:2D:2E:8D:B1:AA:A7:A7:7D:B1:29:5D:09:4A:92:0C:0D:CD:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6991426f0c0c7ac92da1d5129c9ec711a2a38a3a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4aa08e21-fb2d-48b7-82d9-f4187c4ea7a0/c5a22172b8896906c2a31d1c39b7f2042e3f284e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4aa08e21-fb2d-48b7-82d9-f4187c4ea7a0/6991426f0c0c7ac92da1d5129c9ec711a2a38a3a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:33:3f:79:ec:8d:a0:5e:97:f9:0b:88:e9:e0:8f:d7:f1:b3:
         b0:46:6d:7f:94:66:9a:08:a9:61:45:7e:ef:6c:a9:1b:0e:a9:
         b4:2a:63:6c:0d:aa:b1:71:14:ac:a2:2d:82:da:04:7a:d0:68:
         2c:c3:57:f4:ea:40:cf:e7:9f:f4:ff:a4:d2:cc:6e:ff:62:6f:
         6a:b7:22:de:28:1f:82:42:83:08:ac:e3:52:b6:3e:39:94:96:
         8c:16:54:cd:a2:61:23:97:e9:af:b7:4b:3f:bc:ad:3c:96:4f:
         5c:1c:94:3a:f7:8e:19:54:d6:f1:76:ed:c1:2f:1a:07:1e:88:
         8b:24:6f:5e:43:ef:96:ab:f3:8a:2c:a3:36:ce:d0:db:fa:c5:
         dd:7a:17:ce:12:62:61:7a:7d:03:3f:fd:79:a9:49:c1:7c:96:
         fe:69:bd:fc:f4:19:e8:1b:6d:f0:88:31:2e:d1:38:df:0f:9d:
         e0:94:6c:13:d0:a9:14:3f:87:6e:22:d6:d5:bf:ec:54:73:c7:
         d2:b7:15:1d:2d:94:67:3b:04:3e:eb:6e:dd:77:fb:e8:c3:4a:
         e5:e6:2d:b5:8f:06:59:71:d5:c7:06:25:5a:17:2e:9c:8e:c5:
         71:da:d0:88:31:4e:31:5f:6c:ea:75:ed:1e:70:7e:5e:70:42:
         ca:3c:3b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----