Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/356850daf196e1d390a43deb25d9cbc65da68d6b.roa
File:                     356850daf196e1d390a43deb25d9cbc65da68d6b.roa (raw, json)
Hash identifier:          hWXtlH3hP08lHASjmMy7p1l1jVhgkjNNYX1yKV4xZgs=
Subject key identifier:   CD:43:67:D1:EE:2A:46:64:58:86:D6:77:F8:EB:0D:B3:87:72:08:2C
Certificate issuer:       /CN=2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82
Certificate serial:       0D1EC9
Authority key identifier: 92:B6:4A:50:EF:06:00:D0:23:FF:00:07:AC:5F:C0:FD:73:E1:A9:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/356850daf196e1d390a43deb25d9cbc65da68d6b.roa
Signing time:             Tue 10 May 2022 17:23:52 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     27947
IP address blocks:        179.63.20.0/22 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 859849 (0xd1ec9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=356850daf196e1d390a43deb25d9cbc65da68d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e6:30:82:93:4e:73:60:6e:82:4a:4b:bd:7f:
                    4c:e3:27:cc:f9:e0:a3:f8:24:13:cc:ca:74:da:ce:
                    b9:aa:5e:46:10:f3:9c:73:ee:18:96:4b:66:63:04:
                    95:0b:36:32:ab:be:87:a6:d0:a3:80:f6:4f:0c:83:
                    5a:cf:e1:61:47:ac:a9:f7:58:34:e7:1f:1f:15:87:
                    45:59:04:b9:e9:17:d3:81:40:da:fa:5e:f4:df:10:
                    dd:97:fa:7c:42:14:80:4a:26:de:3c:30:df:22:3b:
                    8b:42:05:4a:e4:3a:74:11:95:5f:da:98:02:1a:b8:
                    43:f9:02:f9:79:fa:b4:a7:34:2b:d5:55:11:9d:70:
                    c3:3f:5f:5c:0f:71:e6:4c:b5:a7:1d:ee:2a:3a:f0:
                    43:60:99:87:a7:ae:50:25:b7:44:f4:89:f7:5c:28:
                    fd:40:00:d1:6d:7c:c4:40:9a:ff:8a:32:86:cb:10:
                    a8:04:5e:c0:b2:16:33:f2:ff:86:95:88:43:67:ff:
                    cb:87:43:aa:76:d8:e2:65:50:23:01:2f:56:0f:c8:
                    ef:3a:e5:c4:0d:d8:56:3c:8f:26:e5:8d:d3:43:d8:
                    46:d7:16:85:cc:d6:00:c2:4b:fc:bf:ed:8b:69:0c:
                    0a:35:9d:8c:af:ee:72:3b:98:17:c3:71:e4:bd:41:
                    0c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:43:67:D1:EE:2A:46:64:58:86:D6:77:F8:EB:0D:B3:87:72:08:2C
            X509v3 Authority Key Identifier:
                keyid:92:B6:4A:50:EF:06:00:D0:23:FF:00:07:AC:5F:C0:FD:73:E1:A9:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/356850daf196e1d390a43deb25d9cbc65da68d6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:0a:15:b2:d6:c6:84:20:e1:df:4f:cc:8c:b3:d2:c6:f8:06:
         23:5b:49:48:6b:d7:20:b1:ce:ea:43:08:3b:5c:fc:94:84:4c:
         c6:68:74:6c:03:6a:00:d6:5b:d6:ef:c2:d6:76:a8:a8:f3:ff:
         4a:96:33:a6:37:b3:d3:b6:61:da:32:c2:6f:18:03:6f:6f:7f:
         30:c3:0c:38:fd:e1:fe:56:1c:f3:44:f3:6b:02:b4:ae:69:fe:
         10:26:1b:67:4a:5e:53:bc:39:37:44:61:09:ef:ef:ea:98:97:
         54:b8:dc:cc:88:86:56:66:ec:69:b0:3e:9e:ef:5b:83:ec:10:
         98:67:10:43:5f:4d:d6:54:f6:55:1c:fb:a6:36:ff:6e:52:30:
         90:91:d9:74:c4:78:0c:91:02:4f:80:47:ca:0e:6a:f4:e8:f5:
         7d:71:eb:8e:91:0a:0b:48:64:a4:8b:5a:c9:1d:7c:a6:ab:d2:
         91:37:0b:c9:65:38:08:6b:df:37:e7:e4:53:bd:68:a1:89:f2:
         6c:02:60:97:d3:35:f6:85:48:d2:09:09:df:38:a4:64:d2:3e:
         30:ac:04:49:70:78:67:ad:b0:71:1d:40:f8:54:e7:0d:0b:9e:
         09:6a:71:60:55:b4:2c:ac:c6:23:e2:dd:38:5b:62:fd:c7:2f:
         b7:0c:1e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----