Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/7d911e4898259ce901a84c394e2ceeb95c5a07cd.roa
File:                     7d911e4898259ce901a84c394e2ceeb95c5a07cd.roa (raw, json)
Hash identifier:          ZH4TWCimrb4PkjVVfNWpcmbOQ1fxghnXDqRMW31tZuw=
Subject key identifier:   1C:10:C4:87:4D:1C:B5:58:1B:D0:28:D4:AC:E8:9D:FC:F2:E5:60:41
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       0D233C
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/7d911e4898259ce901a84c394e2ceeb95c5a07cd.roa
Signing time:             Wed 24 Mar 2021 14:29:20 +0000
ROA not before:           Wed 24 Mar 2021 14:29:18 +0000
ROA not after:            Tue 24 Mar 2026 14:29:18 +0000
asID:                     61554
IP address blocks:        201.182.128.0/24 maxlen: 24
                          2801:168:2::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860988 (0xd233c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Mar 24 14:29:18 2021 GMT
            Not After : Mar 24 14:29:18 2026 GMT
        Subject: CN=7d911e4898259ce901a84c394e2ceeb95c5a07cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:22:31:c5:f1:db:1c:11:54:19:a7:67:61:4a:
                    94:95:4d:3d:9f:08:b3:8c:d4:e5:aa:ab:5c:cf:86:
                    0d:0c:f7:59:e5:ac:53:6b:84:d8:90:76:d9:d0:2a:
                    f1:6e:f9:c9:5a:a6:3d:f3:10:0b:68:9d:5c:90:51:
                    e9:48:2f:a7:12:25:5b:83:63:80:94:0e:70:aa:af:
                    48:d6:54:db:7f:bc:1d:4e:33:aa:f1:c6:88:22:c9:
                    91:89:dc:f3:4b:12:fa:7f:60:db:6b:01:e9:35:67:
                    1b:32:09:9c:4e:0c:6a:2b:81:b8:ff:b8:40:fb:8b:
                    e8:d5:3f:0a:03:e4:f8:10:40:8e:74:4e:67:67:0b:
                    85:01:5a:db:aa:8b:dd:da:8b:5d:69:10:e6:1c:52:
                    09:64:2b:df:d5:13:9c:23:f8:1a:8c:e9:f8:79:d7:
                    d1:77:ce:4f:39:47:1b:25:b8:f1:95:85:a4:64:ae:
                    61:08:c3:9e:bc:ba:1d:95:37:58:84:73:cd:d3:5b:
                    c2:4d:f5:45:0f:2a:6a:3b:2c:5d:7f:6e:ff:e8:ab:
                    6c:68:87:50:80:d1:71:e9:c8:ff:52:dc:32:4f:2e:
                    00:15:46:4f:e1:c1:28:ff:49:ec:b7:81:58:a7:68:
                    b1:9b:22:07:8c:8a:cd:68:65:89:ca:0e:33:35:d5:
                    1a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:10:C4:87:4D:1C:B5:58:1B:D0:28:D4:AC:E8:9D:FC:F2:E5:60:41
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/7d911e4898259ce901a84c394e2ceeb95c5a07cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.128.0/24
                IPv6:
                  2801:168:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:48:f2:8d:dc:51:bb:8a:f2:61:78:51:40:55:cb:26:cb:f6:
         9f:ed:d7:59:01:d7:cf:49:9f:12:2a:4c:5c:11:9d:46:6c:6f:
         75:93:2d:89:af:ab:c5:92:89:0e:b8:8d:3e:d2:8f:a1:6c:cc:
         96:21:97:15:3e:8b:20:58:0c:13:b3:78:0b:4c:46:b4:45:9d:
         15:ce:04:9c:01:b0:38:a1:d1:65:70:4f:81:d5:1d:01:8b:55:
         a5:18:68:f6:95:4a:93:a6:f6:d5:60:82:88:e8:9d:c1:ee:b2:
         8f:37:71:89:ff:47:f1:6a:d8:cb:a7:e5:a8:e2:d2:85:6c:ab:
         4c:dd:95:e5:b6:0b:a6:37:25:c5:31:5f:bd:a3:ed:3e:37:a6:
         ae:e2:35:8a:4b:69:cf:71:1a:9f:c3:bb:f1:d2:d3:63:8f:63:
         54:e7:b9:15:24:16:fb:af:53:6c:38:19:ba:f5:f2:92:19:48:
         9c:e9:0c:51:0f:89:02:e4:8a:43:a6:a8:df:6a:94:f1:59:f8:
         88:30:4c:03:78:71:71:54:ee:6b:d4:a8:51:c2:45:b5:d6:ae:
         66:7c:d4:de:3f:20:82:f7:c2:7c:99:0a:d0:92:ae:f5:10:13:
         4c:9d:5f:a8:4b:1d:60:6c:a6:ff:1a:0c:62:c8:92:45:84:9c:
         70:dc:f5:64
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDDSM8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIx
MTI0ZWRlYWZkNzhhMWUyZjFjYTM4YmQ0ODljZWY4YmQyMGFlNzMwHhcNMjEwMzI0
MTQyOTE4WhcNMjYwMzI0MTQyOTE4WjAzMTEwLwYDVQQDEyg3ZDkxMWU0ODk4MjU5
Y2U5MDFhODRjMzk0ZTJjZWViOTVjNWEwN2NkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApyIxxfHbHBFUGadnYUqUlU09nwizjNTlqqtcz4YNDPdZ5axT
a4TYkHbZ0CrxbvnJWqY98xALaJ1ckFHpSC+nEiVbg2OAlA5wqq9I1lTbf7wdTjOq
8caIIsmRidzzSxL6f2DbawHpNWcbMgmcTgxqK4G4/7hA+4vo1T8KA+T4EECOdE5n
ZwuFAVrbqovd2otdaRDmHFIJZCvf1ROcI/gajOn4edfRd85POUcbJbjxlYWkZK5h
CMOevLodlTdYhHPN01vCTfVFDypqOyxdf27/6KtsaIdQgNFx6cj/UtwyTy4AFUZP
4cEo/0nst4FYp2ixmyIHjIrNaGWJyg4zNdUanQIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFBwQxIdNHLVYG9Ao1Kzonfzy5WBBMB8GA1UdIwQYMBaAFPj+c0dce8gUSBxs
/73xGXd+C9leMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjExMjRl
ZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjU1MGFlNDAtOGY4ZC00Nzc5LTllMjctODNiMWJk
MzAyNmUxLzdkOTExZTQ4OTgyNTljZTkwMWE4NGMzOTRlMmNlZWI5NWM1YTA3Y2Qu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NTUwYWU0MC04ZjhkLTQ3NzktOWUyNy04M2Ix
YmQzMDI2ZTEvMjExMjRlZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAMm2gDAPBAIAAjAJAwcAKAEBaAACMA0GCSqGSIb3DQEBCwUA
A4IBAQArSPKN3FG7ivJheFFAVcsmy/af7ddZAdfPSZ8SKkxcEZ1GbG91ky2Jr6vF
kokOuI0+0o+hbMyWIZcVPosgWAwTs3gLTEa0RZ0VzgScAbA4odFlcE+B1R0Bi1Wl
GGj2lUqTpvbVYIKI6J3B7rKPN3GJ/0fxatjLp+Wo4tKFbKtM3ZXltgumNyXFMV+9
o+0+N6au4jWKS2nPcRqfw7vx0tNjj2NU57kVJBb7r1NsOBm69fKSGUic6QxRD4kC
5IpDpqjfapTxWfiIMEwDeHFxVO5r1KhRwkW11q5mfNTePyCC98J8mQrQkq71EBNM
nV+oSx1gbKb/GgxiyJJFhJxw3PVk
-----END CERTIFICATE-----