Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/2fedd34b7caff58be3486dad9e4851de6f2808ce.roa
File:                     2fedd34b7caff58be3486dad9e4851de6f2808ce.roa (raw, json)
Hash identifier:          q2+lHJ2x0aF9RZsSoXV+tyqYv1+qnTGbMHs13o3sONc=
Subject key identifier:   BD:02:B1:3E:BC:01:1A:26:D8:E3:81:BB:87:69:A3:CA:50:9A:04:01
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       11C2B5
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/2fedd34b7caff58be3486dad9e4851de6f2808ce.roa
Signing time:             Fri 16 Apr 2021 00:08:21 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     264808
IP address blocks:        181.13.50.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1163957 (0x11c2b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=2fedd34b7caff58be3486dad9e4851de6f2808ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:80:57:b7:d6:be:65:37:2e:55:bc:94:32:c0:
                    ad:8c:50:71:07:ac:0f:da:e8:f5:a6:63:a0:d5:5a:
                    2d:80:59:51:f2:f0:20:67:26:3a:d1:90:4c:5e:2b:
                    19:a0:c2:ba:8b:31:e2:ee:40:d0:96:a8:1d:42:43:
                    bd:35:12:aa:ba:32:dd:99:4e:d2:4d:f7:64:f3:f1:
                    d8:59:17:d9:a3:42:d0:9b:5b:e6:e1:4a:3a:2c:12:
                    52:7b:2f:7b:e4:6d:65:4e:f3:fd:76:fb:c2:e7:d7:
                    ee:4b:a1:02:b7:2c:0a:0f:86:9d:63:d4:ee:9a:41:
                    82:e5:9e:90:bf:0f:a2:ea:8b:91:13:78:54:cc:8e:
                    ad:2b:33:f2:04:d7:45:36:48:e8:a7:bc:61:06:c5:
                    15:58:30:1f:c7:c9:a4:de:9d:80:49:4b:cc:24:82:
                    2d:10:77:02:1e:b1:7c:a3:87:55:61:ae:93:29:3a:
                    a8:63:2f:ce:bf:f0:d8:e9:f8:f8:11:e3:a9:fa:a8:
                    08:79:a8:b0:56:99:93:5f:5c:4a:2e:56:da:05:89:
                    e2:59:c5:09:e7:f2:4f:2e:db:b9:db:d2:56:36:e0:
                    b2:f7:28:a2:77:8b:47:51:d3:da:3e:95:19:66:40:
                    86:33:fe:10:23:cb:3c:4b:3c:96:f8:85:cd:28:5f:
                    a9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:02:B1:3E:BC:01:1A:26:D8:E3:81:BB:87:69:A3:CA:50:9A:04:01
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/2fedd34b7caff58be3486dad9e4851de6f2808ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.13.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:6e:0c:3b:68:0c:24:b4:bf:e9:bd:4f:7f:14:1d:ff:79:ed:
         43:0d:c8:e6:24:f6:0d:a5:b9:d4:fe:a4:a8:dd:98:2a:4f:35:
         dd:50:8e:2d:7b:89:4a:4a:29:95:05:d6:42:18:6d:83:bb:e3:
         e0:5b:16:35:e0:48:47:bf:1e:c8:00:48:d4:31:35:20:62:f4:
         8b:c9:30:78:e7:29:65:21:c0:81:c7:07:a2:f6:c3:8b:ef:78:
         21:bf:b5:56:65:28:bd:cc:9f:c4:d8:6b:e7:1d:80:99:4e:c2:
         3b:32:77:49:bd:ee:b5:6a:53:fc:56:31:5f:14:90:f4:92:c8:
         cc:a6:07:f5:4f:63:3f:22:ae:ce:32:51:1f:ae:64:5c:99:b0:
         35:0a:60:20:7b:81:99:a6:15:a6:aa:53:03:71:f9:60:b9:1a:
         e7:a0:ab:e9:1d:4f:9f:19:74:f5:98:71:4a:90:71:75:93:f7:
         fa:3d:94:45:b7:9e:19:17:29:e8:09:d2:d0:e5:4d:82:d7:89:
         ed:d1:9e:78:8d:f5:82:95:61:98:bc:e5:2b:af:63:13:84:31:
         cd:7e:2c:cb:8c:e4:4e:c7:53:1a:ce:68:c7:b8:46:5e:c4:b1:
         27:dd:f6:c0:a8:75:c5:46:20:be:bb:95:17:cc:70:cc:fd:71:
         9c:fc:65:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----