Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/ce84111f6e530fab5a96d32847d3b5e9ee09788d.roa
File:                     ce84111f6e530fab5a96d32847d3b5e9ee09788d.roa (raw, json)
Hash identifier:          /bn45aZm/kVpGs16tzGIKBCDWb3TRK0o6UNupLIB1iE=
Subject key identifier:   1C:F2:A8:44:AF:06:3E:A4:45:B0:47:E6:85:04:A5:91:9C:92:AD:43
Certificate issuer:       /CN=2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82
Certificate serial:       0D0F99
Authority key identifier: 92:B6:4A:50:EF:06:00:D0:23:FF:00:07:AC:5F:C0:FD:73:E1:A9:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/ce84111f6e530fab5a96d32847d3b5e9ee09788d.roa
Signing time:             Mon 09 May 2022 22:29:57 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     19169
IP address blocks:        179.63.20.0/22 maxlen: 31

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 855961 (0xd0f99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=ce84111f6e530fab5a96d32847d3b5e9ee09788d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fa:a1:73:07:9c:7b:ed:eb:b1:a8:50:98:f7:
                    a5:3c:5a:03:d8:0b:e1:d0:13:be:d1:d4:48:40:a2:
                    22:aa:f3:70:81:18:3d:74:36:41:9f:be:bc:ab:b5:
                    b3:22:33:99:e1:cb:64:6e:c7:55:4d:91:11:d0:4d:
                    07:65:fb:83:a0:99:cd:f2:71:a4:3a:60:45:b6:98:
                    e6:46:98:88:c9:fb:be:ad:d5:ca:94:83:5d:2a:d8:
                    9a:bb:f4:d8:d3:a4:e2:1f:f0:6a:d9:6d:e9:64:a6:
                    76:c1:de:d5:5d:dc:0d:2f:bf:89:49:05:da:1b:ce:
                    32:49:17:52:74:af:42:2d:37:36:91:f5:f7:87:b4:
                    39:f1:f8:56:bd:3b:dd:a0:e2:9d:04:e5:0e:59:4d:
                    ec:9a:a9:c7:81:08:f5:de:77:23:eb:97:ca:dc:01:
                    97:f8:6f:94:61:ad:8a:c8:3d:ee:0e:11:c2:b3:2a:
                    45:c1:d0:88:e0:7f:29:4b:38:94:38:27:48:99:ae:
                    12:ca:71:f0:dd:f8:f6:57:05:d0:8a:40:44:e0:47:
                    18:25:dd:ce:c6:95:46:1c:74:5d:04:46:57:04:0a:
                    c5:19:e5:91:76:f3:f0:ef:e1:ec:35:af:91:98:2c:
                    d5:9a:df:da:b7:c0:02:68:43:db:04:f5:c2:12:c5:
                    39:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F2:A8:44:AF:06:3E:A4:45:B0:47:E6:85:04:A5:91:9C:92:AD:43
            X509v3 Authority Key Identifier:
                keyid:92:B6:4A:50:EF:06:00:D0:23:FF:00:07:AC:5F:C0:FD:73:E1:A9:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/ce84111f6e530fab5a96d32847d3b5e9ee09788d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:50:72:29:6f:ca:f4:bd:01:44:73:41:bd:32:39:25:81:33:
         bf:8f:3b:03:fc:7f:75:10:ae:71:f9:e2:b2:1a:05:d2:64:87:
         ca:24:0a:22:42:52:57:de:b7:2b:9f:7a:a4:86:70:c0:ab:de:
         f5:1e:a8:9b:72:f9:74:37:39:22:ee:d3:5d:34:61:4a:39:45:
         cd:b3:b2:7c:ec:4d:33:7a:8f:02:48:bb:a9:09:57:eb:4b:23:
         bd:6b:46:d9:98:11:a2:fc:bb:e1:75:e6:ab:6f:65:e6:0d:42:
         64:c8:27:46:7e:60:64:0f:78:50:15:a1:70:f9:8a:05:8e:58:
         fe:47:5a:26:f2:c6:74:82:55:54:e5:57:7e:5f:c0:1a:81:c5:
         4f:3b:d8:7d:22:fe:b5:35:5f:f0:dd:c4:b3:05:7e:70:54:a3:
         75:75:f0:f0:d1:3b:5f:25:b5:9c:8d:99:e8:98:77:28:5d:64:
         6a:d0:b4:68:62:95:90:de:56:aa:57:55:20:e2:e6:f0:1a:d1:
         57:49:59:80:bc:0d:37:f9:a5:3d:3b:b2:b6:0f:ad:37:fb:10:
         5b:9f:fa:54:ab:b8:ed:2c:70:d7:9f:f6:d7:7d:36:ce:04:ea:
         51:b5:29:62:49:96:5c:67:65:16:09:e9:78:c6:43:3d:56:33:
         ca:51:46:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----