Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/919f235903d3c667f1f79fdc73a578e9a25f0dee.roa
File:                     919f235903d3c667f1f79fdc73a578e9a25f0dee.roa (raw, json)
Hash identifier:          ksiMkTquSRXCJB1RJXpOngsEei12FXELOyQGZ2MIhLg=
Subject key identifier:   FD:3C:F0:B6:D0:62:75:13:26:19:B6:0E:78:45:6F:2D:13:E0:9D:C8
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       0E068E
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/919f235903d3c667f1f79fdc73a578e9a25f0dee.roa
Signing time:             Wed 24 Mar 2021 14:31:35 +0000
ROA not before:           Wed 24 Mar 2021 14:31:34 +0000
ROA not after:            Tue 24 Mar 2026 14:31:34 +0000
asID:                     28035
IP address blocks:        190.210.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919182 (0xe068e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Mar 24 14:31:34 2021 GMT
            Not After : Mar 24 14:31:34 2026 GMT
        Subject: CN=919f235903d3c667f1f79fdc73a578e9a25f0dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fc:2b:c3:79:95:7c:bc:1c:67:c6:15:17:fe:
                    b4:85:c8:05:3b:55:ec:0b:f1:9e:9d:c7:bd:5f:04:
                    eb:ad:44:5f:7e:f4:22:eb:85:3e:ae:2a:6d:e7:be:
                    01:a1:6a:5f:19:83:cc:41:10:c6:62:f2:85:93:86:
                    da:fd:23:3f:9f:3f:83:29:c8:d1:4e:0c:b6:a9:93:
                    4e:42:62:ba:d3:b0:3d:62:c8:c0:ee:1c:e5:40:c5:
                    cb:42:d9:42:98:5a:d4:a9:e4:c7:71:fc:e0:d2:03:
                    76:2b:2e:84:a4:5e:de:27:f6:86:8b:97:fd:c5:f6:
                    20:9a:44:20:53:97:1b:08:91:dc:1e:df:f4:3d:4c:
                    78:84:bd:7c:23:8f:57:81:b9:00:66:d9:2d:b5:29:
                    70:3c:6f:ec:1a:53:ec:20:47:27:a4:0e:00:03:a7:
                    91:02:97:b1:12:c7:d3:a0:6e:e3:fd:32:e3:ce:1d:
                    94:9f:c6:37:5b:db:ce:1f:1c:e2:3d:54:51:41:af:
                    08:07:44:d1:d9:8d:b2:b1:a2:38:ea:10:8b:c8:8a:
                    7a:04:cb:f6:7a:5b:1d:e8:12:df:5a:c3:c9:14:7b:
                    2f:4e:aa:07:f0:b9:33:e6:79:c2:75:9c:23:a8:9d:
                    56:ae:e0:3e:6f:3e:e6:11:03:a9:09:73:c3:3a:52:
                    1a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3C:F0:B6:D0:62:75:13:26:19:B6:0E:78:45:6F:2D:13:E0:9D:C8
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/919f235903d3c667f1f79fdc73a578e9a25f0dee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:d3:fc:01:33:c1:e1:ac:80:b5:82:68:cf:af:70:70:66:00:
         b2:66:b1:c4:20:19:52:66:17:2f:d7:19:c0:b4:c5:0b:aa:26:
         89:83:8b:64:22:9d:eb:cc:17:f9:1b:83:1b:f3:fd:0c:08:61:
         63:9d:02:69:e1:cc:b9:51:83:30:71:f6:29:74:91:34:87:07:
         1b:73:ec:3b:1e:c9:2a:8e:34:54:3f:85:ea:d8:e6:56:2b:a9:
         9a:6c:98:a9:31:eb:d4:a9:69:a5:d9:04:d6:56:88:55:db:09:
         94:83:7a:bc:3c:9b:78:b6:09:f8:e8:d0:c5:bf:d3:15:56:04:
         45:66:72:a2:11:72:4f:42:51:a6:23:31:a3:9f:b9:6d:dc:54:
         7c:b2:49:3f:5b:3f:f0:42:50:79:78:7c:e6:a3:d8:fa:a8:67:
         4f:d9:42:58:20:e5:77:b0:1b:ff:29:12:d3:2a:c9:be:a2:a6:
         9f:fb:87:5c:5f:98:a0:23:e5:5b:65:fc:a6:66:d2:71:39:c6:
         a6:08:12:f7:e3:f5:c8:a9:ca:4b:e1:5f:11:73:76:0a:d8:c9:
         38:48:df:13:25:10:11:db:91:8e:7d:0b:25:74:a2:ed:c7:24:
         de:d0:79:ff:73:72:13:f6:66:57:e3:77:25:b1:7b:d2:58:81:
         91:ba:3e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----