Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63b5f77f-ccc6-4cee-94db-4677eefc5da7/ce4631f25821c3b58affb81dd8d1b43b6f47722f.roa
File:                     ce4631f25821c3b58affb81dd8d1b43b6f47722f.roa (raw, json)
Hash identifier:          ENcLcDh3ft7EPachZ20b0D9IidGjGmtCDAMNi2Nlzqw=
Subject key identifier:   2A:98:3C:46:0D:FB:A1:96:52:F1:8C:C3:F7:CF:A6:C3:FF:C7:C8:CF
Certificate issuer:       /CN=2992018c1338674cb760d954bf606483b9b3a7d8
Certificate serial:       031F78
Authority key identifier: 5A:CB:88:0A:8F:D2:85:1B:74:EB:F9:7D:46:04:8E:1A:CF:B7:06:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2992018c1338674cb760d954bf606483b9b3a7d8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/63b5f77f-ccc6-4cee-94db-4677eefc5da7/ce4631f25821c3b58affb81dd8d1b43b6f47722f.roa
Signing time:             Mon 27 Dec 2021 14:04:29 +0000
ROA not before:           Mon 27 Dec 2021 03:00:00 +0000
ROA not after:            Wed 27 Dec 2023 03:00:00 +0000
asID:                     271896
IP address blocks:        201.94.148.0/24 maxlen: 24
                          201.94.149.0/24 maxlen: 24
                          201.94.150.0/24 maxlen: 24
                          201.94.151.0/24 maxlen: 24
                          201.94.148.0/22 maxlen: 22
                          2803:2210::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204664 (0x31f78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2992018c1338674cb760d954bf606483b9b3a7d8
        Validity
            Not Before: Dec 27 03:00:00 2021 GMT
            Not After : Dec 27 03:00:00 2023 GMT
        Subject: CN=ce4631f25821c3b58affb81dd8d1b43b6f47722f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cd:e0:22:58:b8:78:be:8b:31:ca:43:53:8d:
                    ae:06:96:98:e4:3f:27:3f:a2:11:f3:54:09:2c:d5:
                    ad:7c:da:cc:4a:18:be:b8:cc:7a:0e:75:f5:a8:3b:
                    fb:29:8e:26:a8:c4:6f:62:4a:ad:eb:0c:23:7d:20:
                    62:9a:a9:03:d2:3c:6b:12:ee:55:b2:cf:af:47:ee:
                    82:58:80:6f:10:09:23:99:16:da:10:dc:da:89:2f:
                    b9:74:75:33:0c:6a:c5:b4:70:03:76:c9:38:f6:f2:
                    74:d0:6f:aa:32:54:b3:6e:f6:3a:1f:dc:e5:b7:3e:
                    aa:5e:74:4a:f2:c0:70:34:d0:0b:cf:fd:d2:ff:58:
                    24:9d:14:41:58:c7:fe:02:0d:2d:13:60:8b:69:47:
                    ef:b2:df:fc:c2:45:5f:81:e5:d3:ad:d4:16:c8:25:
                    c4:28:48:0a:13:af:e1:6f:9a:74:63:1c:e7:d2:5f:
                    d8:e8:5f:df:ea:e0:5f:b1:ed:8c:bb:6f:a5:f7:44:
                    a6:69:cb:19:0c:55:c4:25:01:0a:d4:12:52:74:b0:
                    99:d2:2e:ef:2d:87:4f:d0:7b:79:c9:b4:48:56:bf:
                    61:72:29:d8:d3:e9:04:fa:b7:eb:87:d2:ed:9a:61:
                    fd:81:a7:0d:9d:96:e1:cf:22:bf:71:22:46:0d:ba:
                    23:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:98:3C:46:0D:FB:A1:96:52:F1:8C:C3:F7:CF:A6:C3:FF:C7:C8:CF
            X509v3 Authority Key Identifier:
                keyid:5A:CB:88:0A:8F:D2:85:1B:74:EB:F9:7D:46:04:8E:1A:CF:B7:06:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2992018c1338674cb760d954bf606483b9b3a7d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63b5f77f-ccc6-4cee-94db-4677eefc5da7/ce4631f25821c3b58affb81dd8d1b43b6f47722f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/63b5f77f-ccc6-4cee-94db-4677eefc5da7/2992018c1338674cb760d954bf606483b9b3a7d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.94.148.0/22
                IPv6:
                  2803:2210::/36

    Signature Algorithm: sha256WithRSAEncryption
         35:df:47:65:15:15:08:64:da:ac:f9:bc:1e:d1:8b:3f:5e:74:
         c8:d8:25:24:a2:b5:d2:a5:b6:c2:a0:c1:f1:b7:d0:83:47:cc:
         97:36:1f:20:d2:cc:9f:72:78:21:f6:e4:66:20:3d:50:0f:a1:
         06:9e:71:86:47:60:68:8f:72:5a:9b:72:2d:a2:01:74:7c:32:
         a9:71:13:c7:6e:68:12:65:ee:a7:b0:14:f2:9b:27:eb:d2:bd:
         02:6e:2d:bc:d1:ef:a3:d3:a5:c7:d3:17:82:b0:fb:32:7d:89:
         61:ac:7d:07:c0:89:63:69:e9:1e:20:5c:50:fc:03:40:6d:e7:
         04:5b:fa:0f:f4:1e:d2:8b:98:eb:36:a4:17:b7:1c:6c:92:11:
         6f:28:11:21:43:2c:3b:18:34:c0:9e:76:89:38:d3:14:48:5c:
         04:7b:22:c0:8e:4d:ea:47:a3:90:1f:e8:f2:ad:8b:3e:57:52:
         51:71:95:54:4a:2a:59:a1:0a:96:19:88:f7:ce:8d:74:82:ea:
         40:df:9f:1b:1a:52:5e:06:cf:67:20:4c:74:60:98:c2:8b:16:
         89:08:2a:95:3d:73:86:f6:58:f1:7c:4a:c0:75:34:0d:af:af:
         7c:34:5c:70:57:28:48:b7:3c:c7:0b:53:28:d0:39:79:a2:9a:
         96:1a:90:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----