Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/75954b458c1c5da0ba94c7438163cdddb6fff56b.roa
File:                     75954b458c1c5da0ba94c7438163cdddb6fff56b.roa (raw, json)
Hash identifier:          2aIs9F6Yl02QZv/EiioMF5nKE3Esvas8gh4IkmuR+js=
Subject key identifier:   74:F8:74:27:8C:6A:73:E8:F4:BE:89:66:31:95:E3:8D:C3:01:47:21
Certificate issuer:       /CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
Certificate serial:       10F167
Authority key identifier: A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/75954b458c1c5da0ba94c7438163cdddb6fff56b.roa
Signing time:             Thu 12 Aug 2021 21:39:07 +0000
ROA not before:           Thu 12 Aug 2021 03:00:00 +0000
ROA not after:            Sat 12 Aug 2023 03:00:00 +0000
asID:                     52501
IP address blocks:        181.174.124.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1110375 (0x10f167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
        Validity
            Not Before: Aug 12 03:00:00 2021 GMT
            Not After : Aug 12 03:00:00 2023 GMT
        Subject: CN=75954b458c1c5da0ba94c7438163cdddb6fff56b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:40:6c:8e:be:e7:a9:e9:64:43:8b:4e:1a:f0:
                    54:e1:54:99:69:ce:61:d4:28:03:e6:01:2f:b8:97:
                    2e:ef:69:5c:dd:01:8a:b3:1c:87:85:12:e8:27:35:
                    eb:78:a8:a6:6d:68:93:03:85:34:4a:bc:b6:26:da:
                    4c:a7:64:94:32:0c:17:a8:a9:d3:b6:a4:3f:0b:0f:
                    29:63:37:fc:d8:1e:5f:39:de:e6:57:fa:be:77:e8:
                    51:33:4f:93:63:25:3b:e3:89:31:83:b6:24:54:38:
                    64:2f:d5:9d:4d:97:f7:c6:0b:23:80:f9:46:13:5c:
                    5c:3a:f6:b4:57:f8:38:9c:94:6d:80:07:27:a3:68:
                    3e:10:60:da:6b:ab:2d:8a:17:d3:7b:68:6f:90:06:
                    39:60:8d:5f:6e:7b:da:99:74:73:b2:d3:7b:4b:c5:
                    ca:6b:66:3f:f2:fa:a7:70:9f:ed:f5:0c:b7:b0:80:
                    0e:17:67:ef:3c:4b:0a:be:48:78:38:bc:45:81:1d:
                    0a:fd:d7:d3:1b:1c:36:bf:79:ae:cd:14:7f:13:35:
                    0d:9f:fa:35:1b:f9:e8:38:87:71:11:a9:53:d8:25:
                    ad:54:70:aa:0f:43:44:b3:01:86:45:63:68:34:51:
                    6f:bc:de:9a:d0:81:db:57:ed:76:12:72:85:69:b8:
                    7a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F8:74:27:8C:6A:73:E8:F4:BE:89:66:31:95:E3:8D:C3:01:47:21
            X509v3 Authority Key Identifier:
                keyid:A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/75954b458c1c5da0ba94c7438163cdddb6fff56b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/b12012502b7ca3b0da125f250315dfe19bfb18d5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:a2:21:2f:ea:35:c8:5d:3a:f5:58:0c:35:a9:7e:41:47:07:
         2e:c1:95:dd:66:26:f7:d4:1d:8d:79:5d:21:df:11:ae:91:28:
         ae:fa:21:53:0c:6a:91:b7:22:53:1f:9e:cf:57:62:4d:1d:25:
         96:41:b8:95:56:b5:0f:57:06:09:db:18:4f:a5:4c:47:ee:9b:
         84:bc:a0:23:c4:d4:00:2b:69:01:0a:50:2e:db:94:6d:55:a7:
         58:c6:50:1b:c1:7e:98:94:dd:95:58:bb:3b:45:b0:03:80:c9:
         79:c7:7a:a0:3e:1d:37:06:fd:8e:f5:8d:f1:09:34:5a:40:4d:
         3e:8b:14:cb:45:b6:c2:ed:86:90:9f:28:07:19:cf:a2:58:b6:
         f5:ab:1e:a3:77:02:80:f3:a7:5b:31:61:14:0d:be:45:e8:ac:
         67:dd:25:78:77:9d:c2:25:b6:f6:00:c5:6b:d9:b4:d1:43:24:
         9d:80:1a:08:ce:a7:10:e1:16:96:fd:3e:57:c2:44:e7:e0:c6:
         c6:3d:ef:ef:c5:ca:ce:91:1d:66:63:d6:e7:76:4f:72:6c:b9:
         89:2e:7c:c0:43:72:39:38:92:1e:c5:2a:3a:f2:06:d4:a7:49:
         98:99:f8:5f:7f:90:18:8f:e8:7c:3a:e7:54:bc:d3:3e:f0:32:
         dd:c0:08:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----