Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5c148db6-14b1-4240-92ed-f16b54c09a69/1133e7ec4a318c223e51dfe9124af2fec1c9ec34.roa
File:                     1133e7ec4a318c223e51dfe9124af2fec1c9ec34.roa (raw, json)
Hash identifier:          Pvxzyij+0fiPP7AdWA+VAmXxUSnvc3a83GD9NSXrYEE=
Subject key identifier:   3D:64:F2:66:57:DE:98:32:CD:4A:70:60:97:4B:83:4C:48:08:45:DF
Certificate issuer:       /CN=9fcf3302c6615af1974dce9c8e8304499ee53acc
Certificate serial:       0D8A2C
Authority key identifier: 0C:2B:E8:0C:8A:F6:87:11:C5:E1:13:00:62:89:C4:8B:A8:1F:E8:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fcf3302c6615af1974dce9c8e8304499ee53acc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5c148db6-14b1-4240-92ed-f16b54c09a69/1133e7ec4a318c223e51dfe9124af2fec1c9ec34.roa
Signing time:             Wed 24 Mar 2021 14:32:51 +0000
ROA not before:           Wed 24 Mar 2021 14:32:51 +0000
ROA not after:            Tue 24 Mar 2026 14:32:51 +0000
asID:                     264789
IP address blocks:        168.197.240.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887340 (0xd8a2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fcf3302c6615af1974dce9c8e8304499ee53acc
        Validity
            Not Before: Mar 24 14:32:51 2021 GMT
            Not After : Mar 24 14:32:51 2026 GMT
        Subject: CN=1133e7ec4a318c223e51dfe9124af2fec1c9ec34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:81:42:f7:97:81:eb:72:b1:99:56:1a:04:3c:
                    a7:36:9a:8e:94:b4:74:19:47:bd:dc:d2:86:d8:3f:
                    d9:b2:16:7b:52:e2:40:97:65:0a:25:98:86:82:b7:
                    1d:58:46:7c:61:d0:de:14:f5:46:10:07:13:b9:24:
                    99:80:68:3a:5d:e2:9c:e9:2d:89:c4:27:42:2b:43:
                    3c:25:ae:49:87:20:85:46:8a:55:1a:07:43:33:11:
                    3b:dd:bb:d3:b8:97:2b:40:2a:4d:25:7e:3b:43:e2:
                    5b:bf:a7:f7:65:3f:17:37:41:1b:56:b1:d6:1b:b9:
                    11:73:a2:77:73:49:29:97:0d:96:84:8a:30:c3:18:
                    18:2f:50:b9:6f:53:d3:84:ea:5c:d8:79:be:80:a9:
                    3c:43:44:e0:12:0c:a1:98:65:9c:29:e4:e8:8c:6e:
                    1c:c1:58:48:52:c3:aa:83:1a:97:1b:84:3c:af:78:
                    c3:2b:1b:f7:cd:22:ec:3d:74:5a:e8:31:17:52:76:
                    3c:15:d4:55:25:a8:74:c5:93:65:47:45:1c:97:5b:
                    ac:00:9f:9a:64:fd:5b:90:40:76:a7:11:b0:d2:c6:
                    f8:79:40:23:50:ac:66:51:64:01:83:0f:98:0e:52:
                    d7:e8:72:ac:5f:bc:03:fe:ed:ed:34:7f:09:f8:22:
                    d1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:64:F2:66:57:DE:98:32:CD:4A:70:60:97:4B:83:4C:48:08:45:DF
            X509v3 Authority Key Identifier:
                keyid:0C:2B:E8:0C:8A:F6:87:11:C5:E1:13:00:62:89:C4:8B:A8:1F:E8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fcf3302c6615af1974dce9c8e8304499ee53acc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5c148db6-14b1-4240-92ed-f16b54c09a69/1133e7ec4a318c223e51dfe9124af2fec1c9ec34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5c148db6-14b1-4240-92ed-f16b54c09a69/9fcf3302c6615af1974dce9c8e8304499ee53acc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:ef:d6:bb:6c:e6:cb:59:81:06:5f:92:09:60:28:78:31:48:
         3f:a9:ed:5b:2c:de:1b:55:05:81:66:ec:21:dd:ec:b2:9f:7d:
         09:48:c5:30:ef:24:61:11:37:b9:d3:df:54:dc:61:e2:c3:5f:
         ef:59:52:82:9f:9d:3c:fc:b9:63:5d:92:8a:8e:22:e3:1a:5f:
         4d:19:65:f2:d4:95:06:b3:5a:13:ad:aa:f6:c8:8a:2f:77:70:
         05:ed:0e:69:04:85:bc:4d:3c:12:40:92:ee:2d:b6:68:09:41:
         e2:5d:03:47:c1:db:d7:5d:a9:5e:49:f4:fd:82:5c:1e:f1:ad:
         74:3c:c1:0e:db:29:c1:0c:67:58:86:9e:b7:89:93:2c:82:d5:
         ae:ee:c2:19:30:59:e6:83:d8:33:f8:6b:de:79:30:15:76:4a:
         26:1a:ef:6f:a1:43:7b:5a:0d:27:18:1f:4e:53:ac:cc:ce:a6:
         a0:b0:b3:9d:ec:c9:76:9f:f9:8b:70:e4:70:11:a5:2c:ce:fc:
         70:be:a7:36:a5:5d:48:3c:35:f9:4e:42:66:02:be:23:2c:b5:
         22:02:c2:27:ed:b3:57:18:9b:98:e2:28:65:62:7f:85:35:be:
         7a:72:b8:e6:b9:0f:67:06:75:4c:0e:5e:b9:7c:10:d1:ab:7b:
         c8:cf:cf:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----