Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/412f0d5974bc4191c19b05bef59e7b1de0d58c33.roa
File:                     412f0d5974bc4191c19b05bef59e7b1de0d58c33.roa (raw, json)
Hash identifier:          MWrZyK+YnyT/KqR6OoMwVcmtj5ijLlXH+f5/lS0cUJA=
Subject key identifier:   09:B6:C3:CE:1D:F5:4A:A2:F9:8B:76:34:45:21:6D:D5:26:8C:5E:19
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       0E0DD0
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/412f0d5974bc4191c19b05bef59e7b1de0d58c33.roa
Signing time:             Wed 24 Mar 2021 14:31:36 +0000
ROA not before:           Wed 24 Mar 2021 14:31:34 +0000
ROA not after:            Tue 24 Mar 2026 14:31:34 +0000
asID:                     61452
IP address blocks:        190.210.131.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 921040 (0xe0dd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Mar 24 14:31:34 2021 GMT
            Not After : Mar 24 14:31:34 2026 GMT
        Subject: CN=412f0d5974bc4191c19b05bef59e7b1de0d58c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2d:6e:f5:b9:f5:3f:1c:ff:c4:a8:b9:96:d4:
                    dc:48:d8:88:9d:57:d8:19:97:c2:14:ef:72:22:d5:
                    bc:96:6d:f7:23:2b:f5:fe:a1:89:6d:61:ad:52:0d:
                    3c:ff:6f:19:6d:2e:12:64:dc:c3:d3:d9:77:23:2f:
                    3a:fe:2b:8d:a0:d0:01:6f:02:79:2c:09:8c:62:a9:
                    5e:7a:7b:b2:2c:61:f1:13:43:01:f7:f5:91:3c:17:
                    ae:ba:3a:64:56:cc:12:98:e7:63:7e:75:ef:db:42:
                    a6:9c:87:b8:61:ab:77:cb:6e:63:df:e5:3b:c3:37:
                    9e:f4:8f:e9:80:2f:df:bd:57:7a:5d:99:4a:29:13:
                    b1:e5:f3:75:5e:c6:60:b1:03:55:f8:dc:fe:79:ea:
                    ce:ce:e3:cb:a7:85:4d:f6:d2:54:53:7a:3c:91:51:
                    9e:70:c1:67:ab:eb:2c:64:33:98:0a:7f:ec:4e:a9:
                    ab:00:b8:fd:ff:f5:7f:e6:da:f3:2a:96:3e:ee:f3:
                    ec:86:a5:fa:28:e8:e3:04:3f:64:fc:5c:3e:97:16:
                    39:08:d2:d5:0a:37:b8:56:d0:c7:d3:65:61:40:ef:
                    af:e9:d5:ee:52:d2:41:84:10:d3:f2:6c:83:67:f7:
                    c0:1f:cb:96:89:78:96:bf:26:09:53:8e:84:5d:b4:
                    33:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B6:C3:CE:1D:F5:4A:A2:F9:8B:76:34:45:21:6D:D5:26:8C:5E:19
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/412f0d5974bc4191c19b05bef59e7b1de0d58c33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:c0:83:b9:b3:7b:be:24:ae:a9:57:96:93:8c:37:4c:36:b9:
         d5:ae:a4:e9:6a:d7:eb:1f:d6:da:bd:0e:01:1b:da:6a:ee:e7:
         ae:66:2a:70:c4:b7:4f:b5:4a:ba:67:8a:09:31:a9:2a:bf:79:
         e3:f2:eb:9c:6f:c3:a1:6f:86:f9:15:f4:1e:9e:99:61:e6:74:
         69:90:b3:2a:8b:72:c3:57:d7:28:4c:1a:25:2d:b1:af:07:6b:
         20:0d:dd:f6:17:ec:2d:44:cc:b2:a1:e0:a8:b9:a7:82:dc:79:
         b6:64:1e:0c:02:5a:13:ab:fc:12:5d:20:ae:f5:4f:d3:64:97:
         48:d7:10:86:a0:da:3a:2d:31:56:6d:e2:0f:fa:b5:21:0a:87:
         c7:66:72:8a:57:88:3a:48:a5:f9:3d:5c:53:2f:9a:b2:4a:f5:
         b7:b4:c7:6f:94:c4:90:bd:04:27:8b:36:54:b1:67:76:f6:a8:
         57:73:ab:8a:54:fb:c3:e5:91:15:2d:87:b3:10:84:f2:b3:0e:
         56:f6:6e:17:f3:e3:54:da:41:89:0d:ec:26:0d:40:f4:a3:df:
         72:ec:3e:be:0d:d3:86:ee:86:81:65:70:fe:e3:0f:63:5a:cd:
         b0:86:59:a3:f0:8b:a0:5d:0c:9c:b0:95:56:40:be:57:36:2b:
         8f:da:44:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----