Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/515f479e-d772-4ae4-af16-a4ae7a6cb527/e24389aa9f95574f9fa47956cb28910cc0eaf217.roa
File:                     e24389aa9f95574f9fa47956cb28910cc0eaf217.roa (raw, json)
Hash identifier:          AQcaxlDWAKsk2vZy2ezmFkVux7wE/l9o1VxSE3zbqVI=
Subject key identifier:   00:9E:C9:6B:AD:E8:3D:00:88:61:E6:BC:1D:08:54:B1:04:D8:48:18
Certificate issuer:       /CN=a98f648b9bf5787afaa7dadb97d7c2064bb120c7
Certificate serial:       0D1AFB
Authority key identifier: 34:FE:8F:49:AA:CF:79:AC:9D:7B:A2:72:E3:05:5C:C8:CA:01:16:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a98f648b9bf5787afaa7dadb97d7c2064bb120c7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/515f479e-d772-4ae4-af16-a4ae7a6cb527/e24389aa9f95574f9fa47956cb28910cc0eaf217.roa
Signing time:             Wed 24 Mar 2021 14:46:32 +0000
ROA not before:           Wed 24 Mar 2021 14:46:32 +0000
ROA not after:            Tue 24 Mar 2026 14:46:32 +0000
asID:                     263799
IP address blocks:        168.195.216.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858875 (0xd1afb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a98f648b9bf5787afaa7dadb97d7c2064bb120c7
        Validity
            Not Before: Mar 24 14:46:32 2021 GMT
            Not After : Mar 24 14:46:32 2026 GMT
        Subject: CN=e24389aa9f95574f9fa47956cb28910cc0eaf217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:df:21:06:3a:15:50:f6:cc:69:29:8d:d4:78:
                    08:85:c2:da:07:cf:07:65:58:76:90:6a:7c:44:6b:
                    de:e1:cb:ce:4b:92:ed:9d:19:88:30:4e:42:fb:dd:
                    65:aa:e5:82:7d:88:6a:9e:ed:a2:3c:c4:f3:74:ae:
                    3d:22:53:9f:be:1c:73:87:51:34:f8:10:2c:3b:9a:
                    86:49:ed:2c:b1:26:2a:54:9f:c1:40:29:ef:9d:83:
                    26:28:ac:26:43:d7:0a:9a:d4:c2:11:68:8e:cc:9d:
                    eb:95:23:9f:23:76:27:c2:3e:8a:04:0a:ab:96:77:
                    e4:3e:71:17:da:11:0e:e6:4e:3e:89:74:98:71:bb:
                    95:a2:ce:b5:be:18:f2:bb:c2:39:85:c6:81:45:2c:
                    b2:b5:10:2e:da:8e:c1:c7:71:d9:45:b3:40:45:6e:
                    dc:be:8a:df:df:2e:e0:b4:f8:bf:b1:d1:1d:6c:16:
                    fb:3a:79:9d:92:5b:5b:1e:0b:ce:a1:85:d2:78:90:
                    16:93:54:bb:27:4b:59:78:ce:28:a6:0e:0b:26:c0:
                    ae:a0:91:07:01:d4:d2:39:14:61:a8:2d:cd:73:3e:
                    33:cd:37:97:20:5a:59:72:70:65:b2:9c:72:df:e0:
                    c0:e7:ff:bc:bd:5f:62:e6:83:1b:c1:2f:e0:11:c7:
                    a4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9E:C9:6B:AD:E8:3D:00:88:61:E6:BC:1D:08:54:B1:04:D8:48:18
            X509v3 Authority Key Identifier:
                keyid:34:FE:8F:49:AA:CF:79:AC:9D:7B:A2:72:E3:05:5C:C8:CA:01:16:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a98f648b9bf5787afaa7dadb97d7c2064bb120c7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/515f479e-d772-4ae4-af16-a4ae7a6cb527/e24389aa9f95574f9fa47956cb28910cc0eaf217.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/515f479e-d772-4ae4-af16-a4ae7a6cb527/a98f648b9bf5787afaa7dadb97d7c2064bb120c7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:91:a5:e4:7b:22:6a:03:5e:a7:08:5c:bf:b6:43:4f:6c:3e:
         3d:b8:5d:5d:42:09:cf:be:7d:fa:2b:9f:2a:ca:0c:68:d5:6a:
         08:9c:e9:cd:7f:76:30:15:fb:1e:1c:74:2d:fb:f8:c3:c0:cb:
         c7:87:7f:cb:3f:55:c3:0e:a2:f5:af:ea:0b:d1:e0:ff:65:2b:
         95:06:09:8e:1c:94:d7:14:b1:26:60:93:6c:61:44:b5:bb:9b:
         c6:be:1e:d4:4f:8e:53:47:14:bf:07:ab:9f:63:9a:8f:3a:21:
         3d:a8:30:bc:04:da:17:88:58:3c:a8:9e:de:7c:dc:db:61:de:
         1a:75:01:cb:06:cb:22:f9:42:8f:ac:f7:03:4c:68:04:05:c7:
         92:32:44:2f:d7:3b:81:97:b8:54:8c:76:61:0d:33:26:63:2b:
         c1:98:1b:e9:e6:cb:52:f2:5d:13:1a:fa:56:fb:88:81:4e:88:
         5b:11:0b:26:c9:9a:f9:54:8b:72:a0:43:08:0e:c5:9c:1c:97:
         5e:cd:d8:2c:10:dc:d3:99:d7:0b:ca:b0:74:64:ce:07:79:1b:
         8b:5a:d5:05:d5:db:1b:81:54:0c:49:72:b3:55:9f:cd:22:1e:
         95:57:3e:07:86:64:c1:59:9c:37:44:71:db:a9:bf:87:26:03:
         1d:ef:af:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----