Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b77b809-dcf8-48ee-8baf-f75e35b5ecba/084c209c298b12f57fc83aa29ed912cbcbf0db4e.roa
File:                     084c209c298b12f57fc83aa29ed912cbcbf0db4e.roa (raw, json)
Hash identifier:          qA6VZb4+Qxs29DwCKbva1ME2Sa7iJIiDc68RVjUaGk8=
Subject key identifier:   4B:70:6A:3E:B1:7B:EA:CD:5D:F5:5A:8E:D1:46:D6:2B:EF:6F:3F:69
Certificate issuer:       /CN=ebe91dc23a981293baadb7c6ae73c111d36d98be
Certificate serial:       01D898
Authority key identifier: 4B:97:F4:90:08:9F:01:73:35:E2:F9:68:85:0F:3E:CC:64:E5:A5:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebe91dc23a981293baadb7c6ae73c111d36d98be.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4b77b809-dcf8-48ee-8baf-f75e35b5ecba/084c209c298b12f57fc83aa29ed912cbcbf0db4e.roa
Signing time:             Wed 24 Mar 2021 14:41:25 +0000
ROA not before:           Wed 24 Mar 2021 14:41:25 +0000
ROA not after:            Tue 24 Mar 2026 14:41:25 +0000
asID:                     61468
IP address blocks:        192.100.198.0/24 maxlen: 24
                          2801:10:6800::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120984 (0x1d898)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe91dc23a981293baadb7c6ae73c111d36d98be
        Validity
            Not Before: Mar 24 14:41:25 2021 GMT
            Not After : Mar 24 14:41:25 2026 GMT
        Subject: CN=084c209c298b12f57fc83aa29ed912cbcbf0db4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ba:7c:f8:33:78:f5:78:82:19:35:d9:bd:63:
                    aa:93:6f:8b:7d:6d:2f:9c:08:81:cd:35:7a:39:18:
                    34:88:75:8e:dd:f4:46:3b:45:45:e0:cd:a6:d5:b6:
                    dd:17:ab:17:cb:c3:15:0b:a6:32:d8:5c:79:0c:de:
                    d4:7c:0e:87:11:36:16:6d:66:9b:e4:8b:15:ac:da:
                    1c:c1:a9:83:88:59:e1:59:f2:70:ae:90:45:79:b4:
                    0e:de:0c:1e:e7:f0:60:29:61:f5:8b:87:1c:d5:0f:
                    12:90:89:2a:a6:bc:cd:af:d5:31:e7:f1:4f:99:da:
                    4d:a6:37:7d:57:43:58:d3:4a:df:1b:e5:4b:84:24:
                    88:93:6d:e4:c4:8d:82:be:64:64:20:c8:23:72:a3:
                    3d:05:93:4d:96:93:3b:33:56:a1:d7:64:bf:62:c2:
                    6b:54:05:00:53:de:1f:b0:49:6f:0b:cc:df:93:6d:
                    54:ae:e3:c2:ab:9c:5a:3c:f8:16:7b:31:0f:9f:80:
                    24:a6:6d:f7:91:2f:6a:35:2f:65:b3:9a:42:e7:32:
                    99:9f:e2:f8:4f:e6:49:83:ae:84:6f:6d:af:d0:1a:
                    b0:53:b4:0b:00:6d:87:dd:16:cb:cd:e5:8a:9b:65:
                    f7:24:bb:18:d4:ec:43:2e:13:55:c0:c0:9b:10:ba:
                    5e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:70:6A:3E:B1:7B:EA:CD:5D:F5:5A:8E:D1:46:D6:2B:EF:6F:3F:69
            X509v3 Authority Key Identifier:
                keyid:4B:97:F4:90:08:9F:01:73:35:E2:F9:68:85:0F:3E:CC:64:E5:A5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebe91dc23a981293baadb7c6ae73c111d36d98be.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b77b809-dcf8-48ee-8baf-f75e35b5ecba/084c209c298b12f57fc83aa29ed912cbcbf0db4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4b77b809-dcf8-48ee-8baf-f75e35b5ecba/ebe91dc23a981293baadb7c6ae73c111d36d98be.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.198.0/24
                IPv6:
                  2801:10:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:f8:a6:b8:61:91:a5:32:76:1a:f0:43:8f:a8:ed:81:5e:82:
         bc:92:53:54:cd:85:82:dc:28:b7:5b:70:19:19:1e:7b:30:08:
         9b:3e:1f:a0:e7:2c:e4:53:1f:54:f0:90:d3:0c:b2:1c:e1:bc:
         a4:02:34:41:91:6a:93:da:e9:04:e6:94:55:6a:f4:c5:b5:3d:
         d5:d0:2d:e3:80:04:8d:4c:12:55:c4:77:70:83:2e:99:34:ed:
         0e:7e:5e:b0:98:08:bf:63:26:a3:30:8d:a9:d4:62:63:12:bf:
         4e:b5:75:72:86:dd:bf:c0:02:11:2a:8f:41:b3:91:8e:01:60:
         8b:1e:da:16:2c:1e:58:8b:a0:1d:b4:cd:f4:05:9e:1a:d7:df:
         e8:13:66:29:6d:8a:e3:50:95:a5:0c:d6:2d:04:6c:ab:c2:99:
         90:9d:05:b7:44:c9:a7:92:f0:fc:87:64:e9:0d:08:d0:75:0f:
         c6:ff:cb:cc:da:9f:69:55:14:96:b4:91:b0:7d:5e:98:a8:86:
         b9:93:40:e7:45:cb:03:0c:85:f4:df:6b:73:92:d8:fe:d4:cd:
         1a:cf:81:e0:f9:35:7e:c5:85:6e:ba:70:96:9b:40:15:33:fb:
         3d:43:a6:a4:97:f4:fb:d5:b0:0b:46:30:00:3f:56:2c:90:65:
         06:cb:f0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----