Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ba45778-af84-45cf-bc29-3e40d72be94d/cc16e3e4ad6cb5453e5aeaecdbc14b969e8e2736.roa
File:                     cc16e3e4ad6cb5453e5aeaecdbc14b969e8e2736.roa (raw, json)
Hash identifier:          P5v8CFIwni6zLjXbroGSUW/sSEX7dN6Q69MMBDRa0Vg=
Subject key identifier:   87:99:91:CD:A9:98:01:5C:E7:2E:46:C4:A5:92:67:BA:32:D3:AF:1D
Certificate issuer:       /CN=4b0ff3b0bb36514a29ceced3a440524fd7f636dc
Certificate serial:       0BF33E
Authority key identifier: 33:53:3D:1D:1F:5A:F1:D7:5C:44:A5:38:F4:4F:00:64:DC:F8:DC:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b0ff3b0bb36514a29ceced3a440524fd7f636dc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ba45778-af84-45cf-bc29-3e40d72be94d/cc16e3e4ad6cb5453e5aeaecdbc14b969e8e2736.roa
Signing time:             Tue 05 Oct 2021 16:28:27 +0000
ROA not before:           Tue 05 Oct 2021 03:00:00 +0000
ROA not after:            Thu 05 Oct 2023 03:00:00 +0000
asID:                     3597
IP address blocks:        168.96.240.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783166 (0xbf33e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0ff3b0bb36514a29ceced3a440524fd7f636dc
        Validity
            Not Before: Oct  5 03:00:00 2021 GMT
            Not After : Oct  5 03:00:00 2023 GMT
        Subject: CN=cc16e3e4ad6cb5453e5aeaecdbc14b969e8e2736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a5:87:14:7a:34:5c:89:fa:b8:63:22:ab:f6:
                    23:8e:e0:19:bc:6b:2b:81:74:a7:df:81:47:53:d2:
                    ca:a5:42:18:54:af:68:86:46:e6:c3:de:2e:2b:3c:
                    b4:c7:33:d4:6d:cf:89:fa:92:9c:22:8a:90:f3:24:
                    af:ae:f1:ae:61:ce:2c:55:e8:5b:ac:41:9c:1b:c7:
                    3d:18:da:78:01:59:84:16:16:1f:fe:05:86:cd:ae:
                    18:43:56:19:93:46:86:60:9d:77:ee:09:7d:ee:ec:
                    db:56:98:f0:b4:c0:47:cf:63:7e:ba:10:ca:f9:9e:
                    15:e9:ba:65:cb:0a:d6:40:88:d1:7c:25:4f:d1:6c:
                    fa:5a:5a:da:03:1f:31:9f:4d:f3:58:8b:72:09:c2:
                    03:c7:51:44:28:0a:e1:69:af:9c:0c:23:1c:ed:4e:
                    5e:62:71:b7:d9:8a:30:e1:bc:be:34:ea:fa:bb:94:
                    47:0f:04:2a:65:8b:a0:7c:72:39:d4:64:84:2a:8f:
                    8b:74:c9:a5:b0:49:15:73:87:c7:11:68:da:9b:de:
                    f3:70:05:3c:d8:4e:2a:3e:4e:2d:3f:6a:3d:d9:37:
                    0e:27:98:72:4b:83:71:1a:91:5b:71:9d:5b:52:6e:
                    81:01:04:b5:c6:be:0d:d4:46:51:82:77:77:6b:4e:
                    fc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:99:91:CD:A9:98:01:5C:E7:2E:46:C4:A5:92:67:BA:32:D3:AF:1D
            X509v3 Authority Key Identifier:
                keyid:33:53:3D:1D:1F:5A:F1:D7:5C:44:A5:38:F4:4F:00:64:DC:F8:DC:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b0ff3b0bb36514a29ceced3a440524fd7f636dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ba45778-af84-45cf-bc29-3e40d72be94d/cc16e3e4ad6cb5453e5aeaecdbc14b969e8e2736.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ba45778-af84-45cf-bc29-3e40d72be94d/4b0ff3b0bb36514a29ceced3a440524fd7f636dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.96.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:41:01:c1:69:02:05:ab:3e:1b:53:09:17:e0:d5:48:e3:e2:
         ce:ba:de:49:07:3b:be:3f:81:19:e1:0c:70:70:da:47:e5:f5:
         d7:a8:8b:42:0f:9d:0b:a6:22:b2:06:d7:7d:06:17:dd:2c:d3:
         8a:e7:e5:0c:e9:ab:54:bd:2f:67:26:a9:42:6a:34:0e:ff:e2:
         9f:af:04:9c:fa:54:97:9b:14:65:ea:95:d9:0d:ac:54:33:fd:
         ff:8b:5f:af:7d:de:af:92:b1:66:41:03:41:09:ac:64:10:e3:
         68:80:d5:3a:34:82:26:ff:66:c4:38:41:db:fc:67:44:c2:2d:
         2a:bc:f2:be:49:0c:71:43:0b:32:9e:f8:39:b6:dd:1d:96:12:
         00:17:c2:f9:14:5f:ad:e2:7e:a0:de:89:15:fc:e5:f9:bb:0a:
         97:b4:f4:3f:e4:96:55:b9:aa:40:f7:23:3d:e1:53:f6:f8:e8:
         c6:f0:bd:9e:84:01:f7:44:f5:3d:5c:1a:4c:88:2b:f8:dd:93:
         c7:2e:bf:9c:48:97:d2:96:6d:a9:54:42:09:94:56:82:7d:13:
         5c:44:75:d8:2c:3d:bd:dd:40:0f:c8:c1:93:c3:e9:9c:d1:f4:
         3d:84:01:4d:95:44:e8:da:e5:88:44:65:6c:33:73:12:0b:84:
         6b:48:9d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----