Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/1510c9c385342a9ea9843a589496184aaffa0f76.roa
File:                     1510c9c385342a9ea9843a589496184aaffa0f76.roa (raw, json)
Hash identifier:          rL44Av7vSj3MLvqAh90DcWZOXZloWMWT0nRGEQH+YMw=
Subject key identifier:   FA:D8:26:26:A0:42:D9:25:02:2B:5B:38:7C:0C:93:64:04:C4:8A:C2
Certificate issuer:       /CN=0042db77b74ea2762ddae10bb68f8cc86bcbb8ba
Certificate serial:       0D29CC
Authority key identifier: C2:16:FF:16:26:BA:27:D4:8A:94:8F:2A:9B:C2:C7:46:A7:73:8C:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0042db77b74ea2762ddae10bb68f8cc86bcbb8ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/1510c9c385342a9ea9843a589496184aaffa0f76.roa
Signing time:             Wed 24 Mar 2021 22:49:55 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     264773
IP address blocks:        168.197.172.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862668 (0xd29cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0042db77b74ea2762ddae10bb68f8cc86bcbb8ba
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=1510c9c385342a9ea9843a589496184aaffa0f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:be:99:43:f5:f4:aa:c6:eb:7f:f1:52:96:2f:
                    27:3a:dc:91:18:24:37:83:0c:0c:0e:b2:e2:24:2f:
                    db:5d:a3:dc:9d:a8:b8:4a:3d:55:cb:84:64:e1:54:
                    7e:65:31:66:20:2f:55:b0:3a:c7:3f:69:ff:b1:44:
                    a9:42:d0:b2:48:a3:88:7d:b3:8d:85:14:18:d5:4e:
                    33:33:a2:34:54:b7:33:a0:da:a2:b8:29:fc:b1:4c:
                    c8:42:b7:6d:5a:c1:1e:ab:57:49:a2:61:98:49:0b:
                    5e:37:bc:fc:8a:9f:be:61:99:2a:83:da:a0:31:ee:
                    35:f3:03:86:43:01:bc:d7:43:d0:0a:22:06:a7:dc:
                    6d:5b:4e:1c:9d:61:61:fd:fa:8a:11:98:26:c7:2a:
                    10:91:f3:4a:dd:fb:ee:15:61:cd:85:d4:95:79:7a:
                    5a:41:9b:92:05:ab:35:18:de:c8:30:b7:87:48:8a:
                    3d:8f:a6:65:ca:a9:c4:59:6e:d8:60:d1:66:5b:5e:
                    93:52:ac:a3:ae:8c:77:9e:1a:de:08:ce:5e:4a:fd:
                    e3:7d:63:8f:93:98:ad:e3:c8:1d:c5:b5:13:c3:5e:
                    9c:c8:46:3f:55:5c:fd:18:a2:bd:4a:ee:20:d3:57:
                    26:30:f0:e4:46:c6:3c:e9:34:fc:ab:ba:71:ea:4a:
                    23:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D8:26:26:A0:42:D9:25:02:2B:5B:38:7C:0C:93:64:04:C4:8A:C2
            X509v3 Authority Key Identifier:
                keyid:C2:16:FF:16:26:BA:27:D4:8A:94:8F:2A:9B:C2:C7:46:A7:73:8C:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0042db77b74ea2762ddae10bb68f8cc86bcbb8ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/1510c9c385342a9ea9843a589496184aaffa0f76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/0042db77b74ea2762ddae10bb68f8cc86bcbb8ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:b3:86:36:01:45:a6:5e:0d:46:5d:fb:56:95:34:cd:cd:d6:
         b3:cc:4a:9a:28:da:19:f4:a8:fd:28:36:40:97:b2:35:c6:27:
         b9:f2:84:53:f0:a0:95:78:e1:6f:c7:53:37:ef:b3:70:8e:d1:
         a7:fe:bd:18:ac:5d:13:2b:fa:87:1a:05:7a:c1:78:d3:47:31:
         c2:88:eb:28:8b:1a:90:78:9a:10:33:1b:8c:f8:6c:9d:9d:1f:
         ab:a7:c0:c1:91:f9:9c:0a:13:6a:5d:62:8f:3a:7f:81:f1:53:
         86:2a:b8:ef:2e:f2:ee:c5:81:8f:0d:96:15:c2:42:c6:23:ab:
         e9:c9:03:81:c6:b1:2f:41:a5:dd:d2:27:4b:65:cc:98:b8:c0:
         76:68:f2:b0:e4:74:48:ee:89:cd:34:a1:47:1f:2c:2b:a2:36:
         7b:19:8e:ab:3d:6b:9b:2b:80:57:08:b4:94:cf:f9:ac:69:4a:
         08:c8:86:2d:0f:88:63:32:88:4e:47:fa:0c:8c:77:e2:dd:37:
         7d:5a:51:c5:f1:a3:2a:74:a6:69:28:17:49:f4:aa:72:2a:a3:
         57:2b:ef:8d:e3:a6:ad:4e:15:b2:83:55:13:c9:34:e9:02:31:
         af:e5:2d:ec:b7:92:90:ab:7e:d8:b3:df:6c:3a:2c:c1:ab:75:
         86:66:49:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----