Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/01f336a7aa222977aba6ab021505928113eae329.roa
File:                     01f336a7aa222977aba6ab021505928113eae329.roa (raw, json)
Hash identifier:          MZV5jMV0hzo0vXMhc6GV10yWwAkxwsD+XVSGejhUbvo=
Subject key identifier:   F5:96:49:98:55:B4:35:CF:6F:7A:65:0F:CD:5C:6E:1A:90:26:F4:2B
Certificate issuer:       /CN=2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82
Certificate serial:       0D27FC
Authority key identifier: 92:B6:4A:50:EF:06:00:D0:23:FF:00:07:AC:5F:C0:FD:73:E1:A9:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/01f336a7aa222977aba6ab021505928113eae329.roa
Signing time:             Tue 10 May 2022 17:24:33 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     19169
IP address blocks:        179.63.20.0/22 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862204 (0xd27fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=01f336a7aa222977aba6ab021505928113eae329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8e:76:38:75:6a:50:ca:3c:45:cc:11:9b:27:
                    83:62:14:4e:b9:d9:b9:ea:4d:bf:bb:ce:3f:a2:3a:
                    68:22:36:43:60:09:a8:bc:81:9f:77:87:f9:1c:8c:
                    b7:5b:ce:e0:8b:d8:59:ba:06:5f:f9:bc:11:a5:86:
                    47:c2:73:76:80:b5:c6:05:ce:46:06:d8:ca:5d:e2:
                    01:21:d2:fc:1a:8b:11:f3:56:96:92:bd:9e:60:04:
                    96:91:0a:d5:18:e2:9e:2b:53:86:35:7a:63:3f:0f:
                    77:b1:bc:94:3e:d8:0f:2c:06:bd:cb:ea:e9:4d:91:
                    d7:2a:22:be:b5:42:19:3e:39:00:7a:c2:3b:e1:36:
                    b9:b8:69:2f:8c:d9:ae:bd:82:8a:a8:af:f0:f3:9d:
                    3b:43:5d:d4:e5:d7:12:61:47:0e:4f:5e:b0:c7:8c:
                    d4:a4:7e:46:20:a1:2a:eb:3d:9b:b7:e9:6e:81:6c:
                    59:c4:80:48:3c:4a:16:77:d6:27:2d:4e:ef:00:47:
                    74:7a:68:63:bf:7a:e9:79:83:f6:ef:45:97:f9:db:
                    bc:df:aa:d2:99:2b:05:af:66:ec:80:f9:42:4c:3a:
                    69:82:99:4d:9b:ca:95:e8:80:50:dc:40:f2:5c:31:
                    40:02:0b:2a:f2:a2:af:71:87:1e:fc:dc:f8:67:f0:
                    76:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:96:49:98:55:B4:35:CF:6F:7A:65:0F:CD:5C:6E:1A:90:26:F4:2B
            X509v3 Authority Key Identifier:
                keyid:92:B6:4A:50:EF:06:00:D0:23:FF:00:07:AC:5F:C0:FD:73:E1:A9:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/01f336a7aa222977aba6ab021505928113eae329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:75:b1:36:0e:41:55:73:91:b9:ea:78:d4:5a:03:3a:8d:98:
         ff:6d:55:e4:70:80:3d:49:c5:f5:15:e4:4b:99:3d:77:96:2b:
         48:29:1a:8b:56:9c:a7:33:3c:79:b7:a2:ec:65:8a:a2:95:97:
         6e:3f:ab:4b:91:1d:68:3a:a9:16:92:fd:43:e0:eb:79:17:6c:
         3a:c3:54:f1:66:42:f3:16:20:52:e8:3f:a2:05:22:5b:75:9f:
         22:91:46:59:d4:96:3f:57:0f:c4:0e:0a:39:b7:da:ae:06:a0:
         79:ac:60:e7:74:ca:26:9b:a7:54:c0:7d:2b:1c:e1:c7:f8:54:
         e7:02:8a:06:6d:21:c0:a5:e0:b8:db:ab:93:0e:3e:be:4c:3e:
         18:d0:81:8e:be:28:6d:5d:1d:c0:68:3d:cd:af:16:0b:79:bd:
         5b:3f:c7:ee:c4:fb:8d:9f:16:bf:7d:a1:77:bd:50:54:14:ad:
         a5:a9:84:cf:ba:4c:15:75:e1:b5:67:94:10:70:fb:d3:01:31:
         b7:4a:80:2c:89:c6:cb:c3:cf:8a:4d:b3:6f:b7:47:6c:d3:15:
         00:8f:dc:bb:27:fb:7f:e3:e4:6f:bb:83:a8:80:10:3d:f1:a5:
         8b:5f:5e:ba:cd:c3:c7:de:48:bd:7d:68:de:9a:ab:d8:0e:f1:
         f4:d2:89:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----