Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/566a23ea-27cb-443a-9dcc-19ebf3aac68c/00520a9ab3df77c858f5dbd110f41873b683489f.roa
File:                     00520a9ab3df77c858f5dbd110f41873b683489f.roa (raw, json)
Hash identifier:          A+EKdT4EIx7F0SORyZ+CR8G9X6hYWt9LEH1CWLpC2Do=
Subject key identifier:   FD:F6:A2:55:C8:5E:BE:B4:03:BE:80:E0:CC:09:BC:7C:3C:AB:C2:D1
Certificate issuer:       /CN=d9ac9a7feee39accc7e1dfb5485bc1dcf333d37f
Certificate serial:       056809
Authority key identifier: 65:CA:6C:4F:D1:55:D0:04:51:3F:3A:E8:82:DE:75:E0:C6:6C:34:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9ac9a7feee39accc7e1dfb5485bc1dcf333d37f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/566a23ea-27cb-443a-9dcc-19ebf3aac68c/00520a9ab3df77c858f5dbd110f41873b683489f.roa
Signing time:             Wed 24 Mar 2021 14:46:51 +0000
ROA not before:           Wed 24 Mar 2021 14:46:50 +0000
ROA not after:            Tue 24 Mar 2026 14:46:50 +0000
asID:                     27708
IP address blocks:        190.151.176.0/20 maxlen: 25

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354313 (0x56809)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ac9a7feee39accc7e1dfb5485bc1dcf333d37f
        Validity
            Not Before: Mar 24 14:46:50 2021 GMT
            Not After : Mar 24 14:46:50 2026 GMT
        Subject: CN=00520a9ab3df77c858f5dbd110f41873b683489f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2c:38:11:d2:7f:bd:05:d2:d1:08:65:de:79:
                    e2:94:4c:06:85:08:87:83:a9:6c:99:e4:66:ac:ec:
                    fe:6d:af:f4:d0:85:e8:2a:94:46:80:fb:52:2d:8b:
                    fc:3b:08:93:2c:68:49:e3:dd:ec:d5:c6:45:2c:f2:
                    58:d1:7f:26:31:bc:74:e7:0b:2c:94:ed:bc:ba:a5:
                    bc:c2:78:12:a7:e5:52:0e:bf:9f:6d:d7:24:60:96:
                    7f:66:3e:45:3d:42:e7:6b:db:0a:9a:3f:59:bf:2f:
                    e6:d9:b3:c3:63:16:62:e1:75:16:c6:5a:db:43:b7:
                    04:2f:70:e5:4e:b1:e9:6e:9e:fc:0c:6f:fd:8c:9a:
                    cc:83:55:08:51:f2:ce:ff:b5:a8:23:d9:2a:5d:c1:
                    0a:b9:7a:14:43:e5:9e:7b:16:8f:73:a8:02:79:61:
                    c1:42:02:c0:be:a8:3e:71:a4:11:7b:7a:d2:2c:c7:
                    0a:b5:22:8f:9d:99:ea:75:c5:45:57:25:94:80:d9:
                    1e:b1:f6:2f:c0:c6:2b:fa:fa:1a:ff:a7:68:ae:aa:
                    9e:46:1a:36:fa:ce:b6:f1:a5:65:b7:77:36:a5:7d:
                    fc:d4:39:4b:10:70:bd:4c:e1:3e:8b:9c:5e:46:e8:
                    84:93:0f:3d:f6:38:ec:9b:bf:86:36:f6:de:74:f1:
                    56:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F6:A2:55:C8:5E:BE:B4:03:BE:80:E0:CC:09:BC:7C:3C:AB:C2:D1
            X509v3 Authority Key Identifier:
                keyid:65:CA:6C:4F:D1:55:D0:04:51:3F:3A:E8:82:DE:75:E0:C6:6C:34:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9ac9a7feee39accc7e1dfb5485bc1dcf333d37f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/566a23ea-27cb-443a-9dcc-19ebf3aac68c/00520a9ab3df77c858f5dbd110f41873b683489f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/566a23ea-27cb-443a-9dcc-19ebf3aac68c/d9ac9a7feee39accc7e1dfb5485bc1dcf333d37f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:37:aa:fa:aa:7c:a8:a2:78:75:44:ca:7a:8a:c0:e9:03:22:
         2d:6d:90:ae:7e:f9:70:16:66:04:46:6d:28:97:8c:9b:64:07:
         e4:fe:3e:7b:2b:48:41:14:e3:fe:b9:9a:dd:ed:d7:5b:6d:55:
         6a:ba:8f:40:4a:8d:35:f6:58:9a:be:8d:e0:af:f4:e9:79:9f:
         ee:b5:4c:7a:69:82:db:5a:6c:d5:9e:0c:d3:31:08:65:a8:5c:
         a9:42:80:6c:96:fb:76:2a:f1:b9:43:63:8a:d0:38:30:f2:3d:
         cf:31:45:3c:b5:c5:34:44:2e:97:7a:de:4a:7d:6a:eb:76:89:
         26:c8:d1:fc:79:66:76:d7:8a:a8:24:e7:ae:52:32:59:48:c7:
         80:b6:13:1f:75:67:12:0c:25:15:30:03:a6:6b:0e:59:a8:2d:
         1a:35:dc:1f:ab:f0:a4:49:46:d3:e5:51:35:2c:f3:6b:3f:aa:
         d3:98:7f:c0:aa:b2:90:bb:08:09:bb:b5:5f:3b:bb:a1:76:f6:
         8d:8b:38:a6:f3:ed:f6:fd:e3:10:c3:58:16:71:af:bc:cb:14:
         21:96:b6:5a:4c:16:bc:c7:68:d7:15:21:8a:09:6b:f3:f4:b9:
         a5:61:48:92:4d:21:f2:a1:39:ed:7d:7a:46:91:db:32:e7:f8:
         25:b6:7c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----