Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/42ffd7eefdfcc167962f4a9c179babab536b5caa.roa
File:                     42ffd7eefdfcc167962f4a9c179babab536b5caa.roa (raw, json)
Hash identifier:          g+gip03wyNTZ9023hCn1O+VT+/Kc3wfpN3Ott/4+X4o=
Subject key identifier:   42:FB:18:93:37:71:A2:E6:16:AA:D6:6F:71:A6:AE:14:A8:BB:0A:B3
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       0D0B71
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/42ffd7eefdfcc167962f4a9c179babab536b5caa.roa
Signing time:             Wed 24 Mar 2021 14:29:20 +0000
ROA not before:           Wed 24 Mar 2021 14:29:18 +0000
ROA not after:            Tue 24 Mar 2026 14:29:18 +0000
asID:                     61494
IP address blocks:        138.204.244.0/24 maxlen: 24
                          2001:13c7:6016::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 854897 (0xd0b71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Mar 24 14:29:18 2021 GMT
            Not After : Mar 24 14:29:18 2026 GMT
        Subject: CN=42ffd7eefdfcc167962f4a9c179babab536b5caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cc:9c:06:32:20:d5:8a:cc:00:07:a7:df:1c:
                    ff:25:5c:ea:c5:42:9d:24:b0:bb:f6:82:7e:4e:ae:
                    c5:d0:26:a2:94:18:f6:8d:ee:f3:66:3c:50:24:18:
                    0e:9c:db:84:2d:e9:ce:ec:13:87:c6:80:68:af:39:
                    d7:9c:91:4c:16:39:cb:7c:bf:19:ea:82:7e:ad:3e:
                    38:9d:ce:43:90:cd:e2:55:92:7c:f7:cd:6f:57:92:
                    ae:12:86:10:65:3e:97:cc:a5:12:20:a6:cf:72:64:
                    34:30:40:db:b2:b9:67:a5:0d:e9:27:76:ae:6e:c3:
                    b4:b3:48:86:a2:42:ba:77:28:77:b0:37:c3:64:d7:
                    e6:3e:56:68:73:19:3e:82:01:f2:f0:ad:a0:0c:f1:
                    fa:90:c1:d4:2d:7a:70:97:1b:08:01:c8:05:63:18:
                    3d:86:bf:e9:b5:79:78:bf:85:60:5b:68:74:88:79:
                    32:ac:8b:9a:65:1e:c8:3a:e2:65:53:f7:52:14:92:
                    6a:15:b9:59:33:d0:87:0f:fb:b8:76:ee:23:c5:c4:
                    a5:c0:da:4c:60:e8:44:8d:a0:f2:43:8d:f6:8c:4a:
                    8c:45:f0:29:73:50:89:a5:ca:11:dc:1f:3e:60:6b:
                    98:51:29:19:61:97:4e:bf:64:66:7f:2e:56:36:5e:
                    fb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FB:18:93:37:71:A2:E6:16:AA:D6:6F:71:A6:AE:14:A8:BB:0A:B3
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/42ffd7eefdfcc167962f4a9c179babab536b5caa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.244.0/24
                IPv6:
                  2001:13c7:6016::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:9b:90:7b:4b:b7:68:b3:c5:4e:82:41:63:b0:0f:7c:b8:40:
         38:7d:e1:27:33:f6:05:e4:63:4d:c9:bd:ca:b1:ac:02:fa:43:
         0d:8d:47:6d:35:62:18:b1:7b:c3:c4:a4:25:6f:50:d0:7f:7e:
         ac:3f:6a:2c:4c:f6:e9:4d:a1:87:da:07:3f:20:62:76:ec:0c:
         92:e4:06:ac:2b:ea:9f:9c:29:1d:c6:0b:a0:06:d3:70:53:a3:
         20:82:3c:28:ab:95:dd:e4:cc:23:24:8c:e6:65:dd:ce:94:f3:
         fd:de:93:c4:b6:8f:ca:f6:43:6e:aa:3f:23:8f:92:79:39:6d:
         66:a4:d3:ca:e6:b5:00:29:9e:d7:29:dc:20:2e:0d:52:44:45:
         49:f1:57:38:fb:6d:f2:2f:d0:bc:1a:bc:db:f3:8d:19:db:74:
         92:12:f0:d5:2e:ca:dc:c8:86:11:45:01:e0:fd:20:8b:48:6f:
         b9:a8:81:ef:3a:72:84:80:f6:20:81:b3:b1:38:df:18:da:4e:
         7c:a9:d1:c4:f1:8b:68:b9:c6:ec:d3:43:16:59:52:5a:96:8a:
         c5:d0:47:02:c3:70:89:d7:9c:aa:b8:04:17:7c:5b:31:df:22:
         28:41:d5:15:e9:70:dc:82:67:69:f8:8d:cc:5d:b1:cb:c6:6c:
         e6:d2:37:5d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDDQtxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIx
MTI0ZWRlYWZkNzhhMWUyZjFjYTM4YmQ0ODljZWY4YmQyMGFlNzMwHhcNMjEwMzI0
MTQyOTE4WhcNMjYwMzI0MTQyOTE4WjAzMTEwLwYDVQQDEyg0MmZmZDdlZWZkZmNj
MTY3OTYyZjRhOWMxNzliYWJhYjUzNmI1Y2FhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjsycBjIg1YrMAAen3xz/JVzqxUKdJLC79oJ+Tq7F0CailBj2
je7zZjxQJBgOnNuELenO7BOHxoBorznXnJFMFjnLfL8Z6oJ+rT44nc5DkM3iVZJ8
981vV5KuEoYQZT6XzKUSIKbPcmQ0MEDbsrlnpQ3pJ3aubsO0s0iGokK6dyh3sDfD
ZNfmPlZocxk+ggHy8K2gDPH6kMHULXpwlxsIAcgFYxg9hr/ptXl4v4VgW2h0iHky
rIuaZR7IOuJlU/dSFJJqFblZM9CHD/u4du4jxcSlwNpMYOhEjaDyQ432jEqMRfAp
c1CJpcoR3B8+YGuYUSkZYZdOv2Rmfy5WNl77KQIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFEL7GJM3caLmFqrWb3GmrhSouwqzMB8GA1UdIwQYMBaAFPj+c0dce8gUSBxs
/73xGXd+C9leMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjExMjRl
ZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjU1MGFlNDAtOGY4ZC00Nzc5LTllMjctODNiMWJk
MzAyNmUxLzQyZmZkN2VlZmRmY2MxNjc5NjJmNGE5YzE3OWJhYmFiNTM2YjVjYWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NTUwYWU0MC04ZjhkLTQ3NzktOWUyNy04M2Ix
YmQzMDI2ZTEvMjExMjRlZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAIrM9DAPBAIAAjAJAwcAIAETx2AWMA0GCSqGSIb3DQEBCwUA
A4IBAQAJm5B7S7dos8VOgkFjsA98uEA4feEnM/YF5GNNyb3KsawC+kMNjUdtNWIY
sXvDxKQlb1DQf36sP2osTPbpTaGH2gc/IGJ27AyS5AasK+qfnCkdxgugBtNwU6Mg
gjwoq5Xd5MwjJIzmZd3OlPP93pPEto/K9kNuqj8jj5J5OW1mpNPK5rUAKZ7XKdwg
Lg1SREVJ8Vc4+23yL9C8Grzb840Z23SSEvDVLsrcyIYRRQHg/SCLSG+5qIHvOnKE
gPYggbOxON8Y2k58qdHE8Ytoucbs00MWWVJalorF0EcCw3CJ15yquAQXfFsx3yIo
QdUV6XDcgmdp+I3MXbHLxmzm0jdd
-----END CERTIFICATE-----