Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/9938a4d0f8545f955bb7cc083c4d0e3469e3beb0.roa
File:                     9938a4d0f8545f955bb7cc083c4d0e3469e3beb0.roa (raw, json)
Hash identifier:          K5Yi5Fhcz0uhz3ZlGTDyy+Vfo1QXf23SaEksXNf1n6M=
Subject key identifier:   D1:C6:DD:4A:EE:9F:0A:49:BB:F4:21:90:8A:30:03:C7:63:1E:C0:1C
Certificate issuer:       /CN=29194fbdbd11c97181ad21546cc92fc2d0e3857a
Certificate serial:       1207C6
Authority key identifier: 48:F9:63:04:80:AE:04:85:2E:87:A6:87:F3:2E:19:51:75:61:A2:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29194fbdbd11c97181ad21546cc92fc2d0e3857a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/9938a4d0f8545f955bb7cc083c4d0e3469e3beb0.roa
Signing time:             Mon 20 Sep 2021 17:07:13 +0000
ROA not before:           Mon 20 Sep 2021 03:00:00 +0000
ROA not after:            Wed 20 Sep 2023 03:00:00 +0000
asID:                     6762
IP address blocks:        190.14.16.0/20 maxlen: 20
                          200.123.192.0/20 maxlen: 20
                          2800:870::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1181638 (0x1207c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29194fbdbd11c97181ad21546cc92fc2d0e3857a
        Validity
            Not Before: Sep 20 03:00:00 2021 GMT
            Not After : Sep 20 03:00:00 2023 GMT
        Subject: CN=9938a4d0f8545f955bb7cc083c4d0e3469e3beb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:00:c1:05:6e:db:ad:6a:9f:39:ab:e1:89:48:
                    e8:27:ae:1a:f9:c2:73:b4:e9:06:97:1b:91:7b:81:
                    82:3c:3e:d8:ba:f6:4f:6e:d7:69:a6:ea:60:4f:e3:
                    a5:81:51:5b:56:99:40:59:08:5f:68:5d:9e:54:a5:
                    61:60:f0:f9:ef:66:f2:99:a3:a8:02:7d:16:ae:35:
                    cc:f0:93:57:de:64:99:f6:de:e4:cc:55:20:f0:63:
                    ba:2d:6d:8a:e9:57:03:49:15:72:3d:c4:b7:ed:0c:
                    fd:3b:3f:dd:1f:25:5e:2b:65:71:80:0b:47:a4:32:
                    ae:5e:8a:e0:93:d1:4a:d1:fc:18:d2:a4:76:7d:d8:
                    ea:1b:32:0c:8b:67:d8:ef:1f:91:a3:67:ef:f0:35:
                    52:3c:0b:07:65:90:f9:0b:aa:d5:79:37:2c:fb:0a:
                    ff:da:4e:19:4c:e6:56:48:e0:b2:9a:a0:98:83:9c:
                    f2:45:21:fa:b3:6d:31:5f:d0:cb:f4:5e:76:43:4f:
                    ab:82:e8:4d:d6:22:ef:d3:01:0e:87:b7:64:0c:dc:
                    62:97:9c:a8:e0:47:dd:da:ff:6f:bf:f8:a2:30:8e:
                    44:84:a8:4f:00:10:69:ef:09:15:13:ff:8e:f8:9b:
                    c5:f1:2e:12:e1:11:ae:29:f3:ae:a5:3c:b6:f5:a0:
                    2d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C6:DD:4A:EE:9F:0A:49:BB:F4:21:90:8A:30:03:C7:63:1E:C0:1C
            X509v3 Authority Key Identifier:
                keyid:48:F9:63:04:80:AE:04:85:2E:87:A6:87:F3:2E:19:51:75:61:A2:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29194fbdbd11c97181ad21546cc92fc2d0e3857a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/9938a4d0f8545f955bb7cc083c4d0e3469e3beb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/29194fbdbd11c97181ad21546cc92fc2d0e3857a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.16.0/20
                  200.123.192.0/20
                IPv6:
                  2800:870::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:55:2d:95:e0:e7:5c:1a:f3:42:d0:8e:bc:c8:9b:ba:d6:69:
         6f:3e:67:53:8b:1c:6e:cd:05:0c:3a:5d:0a:26:04:c6:a0:94:
         ae:63:b9:2c:1f:eb:dd:1b:24:8a:f1:06:06:ed:b1:19:bc:7c:
         9e:0f:94:31:fa:bb:7b:a0:6b:22:7b:da:49:a8:56:66:dd:bc:
         0f:79:48:a0:90:76:7b:5f:15:27:b3:79:70:07:96:16:be:4e:
         57:f9:04:d0:7d:fd:c4:c6:c5:df:82:ab:62:6d:10:6e:a6:05:
         20:00:be:9f:96:3d:aa:94:f2:86:e9:f3:e1:38:34:3a:b8:74:
         12:29:c3:75:43:25:aa:f1:0e:2d:ed:72:cb:5e:c9:ad:64:aa:
         ea:4d:f3:7d:8f:8b:b0:30:b1:56:fb:eb:90:d7:00:d6:0c:0e:
         be:39:99:03:41:9c:8e:da:da:08:c5:d7:e0:4b:18:8f:a9:f1:
         8e:ac:61:23:b0:ab:58:8c:aa:52:01:dd:10:9d:41:82:62:92:
         f8:fd:7e:cf:4f:7c:70:91:b7:1c:a2:06:29:40:01:0a:2b:51:
         da:71:17:4a:77:b9:56:52:fd:78:2c:ae:38:e3:b4:73:d6:6a:
         06:c0:a2:b8:a4:39:ac:99:da:30:00:9e:00:12:7e:6c:48:d3:
         96:52:94:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----