Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/c3ac1dc50d140e9457ce5589df4c7ecb09e61ba4.roa
File:                     c3ac1dc50d140e9457ce5589df4c7ecb09e61ba4.roa (raw, json)
Hash identifier:          0nAv7yZGrT+Hm/CJSED4CFaJvSWV5GJ+UzIBozExlUc=
Subject key identifier:   DC:3A:1B:8E:64:CF:BE:E8:A0:15:F3:F9:F4:8F:D2:85:FA:91:7D:6D
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       0CFA1E
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/c3ac1dc50d140e9457ce5589df4c7ecb09e61ba4.roa
Signing time:             Wed 24 Mar 2021 14:29:19 +0000
ROA not before:           Wed 24 Mar 2021 14:29:18 +0000
ROA not after:            Tue 24 Mar 2026 14:29:18 +0000
asID:                     61504
IP address blocks:        138.219.1.0/24 maxlen: 24
                          138.204.245.0/24 maxlen: 24
                          2001:13c7:6017::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 850462 (0xcfa1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Mar 24 14:29:18 2021 GMT
            Not After : Mar 24 14:29:18 2026 GMT
        Subject: CN=c3ac1dc50d140e9457ce5589df4c7ecb09e61ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c7:19:73:eb:34:f4:54:aa:b7:2e:b7:a7:ab:
                    43:ea:66:25:3d:ed:66:fa:d8:82:ab:5c:aa:7e:03:
                    af:f0:e1:e8:28:29:3b:43:76:d8:31:4e:89:8b:31:
                    99:6a:d4:2e:dc:75:ec:da:f7:38:0e:2d:62:ec:5b:
                    2a:9e:87:7b:81:af:e2:4d:fc:87:f4:10:0d:14:9e:
                    1c:7b:76:d5:e1:1e:e1:1e:d2:8b:e8:f9:ca:30:c5:
                    b0:71:eb:a0:b1:61:39:59:06:ef:94:52:1a:7e:bf:
                    b5:eb:16:58:84:34:b9:03:2f:cf:b2:c9:c8:1f:7f:
                    36:4f:a4:60:d8:3a:75:31:2d:f6:94:e9:65:4c:13:
                    40:e7:2e:cd:04:1e:11:49:3d:45:4f:13:47:53:b9:
                    17:1d:0d:39:1c:39:45:16:86:9a:ae:46:a7:c5:a8:
                    68:b9:64:4e:9b:4e:b4:25:49:85:27:86:20:aa:37:
                    7c:3a:e8:f6:15:a0:9d:ab:ff:62:70:4e:00:6d:79:
                    d2:6c:17:98:03:ba:a8:53:01:44:98:bb:54:9c:c7:
                    4c:10:31:fa:5d:3f:59:e2:c7:77:b8:b4:b4:78:76:
                    8a:7c:e8:97:63:a7:0f:4f:48:c0:79:b8:ea:59:52:
                    09:41:2f:6e:8b:06:a0:a7:f6:91:ba:65:22:8d:33:
                    ea:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3A:1B:8E:64:CF:BE:E8:A0:15:F3:F9:F4:8F:D2:85:FA:91:7D:6D
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/c3ac1dc50d140e9457ce5589df4c7ecb09e61ba4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.245.0/24
                  138.219.1.0/24
                IPv6:
                  2001:13c7:6017::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:aa:1d:1e:8d:b0:d5:55:da:63:5e:2a:91:41:0b:c5:79:29:
         b1:b0:1a:44:eb:db:16:ea:a5:e3:f9:64:25:95:fe:29:31:bd:
         a9:51:2a:73:c6:59:09:73:43:ec:f7:22:d6:0b:03:de:e6:95:
         73:25:fb:9a:af:45:9e:12:b9:ad:61:f6:bc:41:c5:ce:31:9c:
         01:cd:87:9e:f6:f2:50:1e:79:01:21:09:ca:a2:d4:c4:b0:6d:
         77:9b:18:3c:f3:8b:60:a0:8a:34:49:c0:e9:37:48:a9:5c:62:
         e5:5f:ad:15:d8:bd:60:1f:0c:e6:17:c7:c3:05:e0:0f:69:9a:
         1f:60:96:6e:c8:ae:45:ac:e8:9c:7d:59:72:24:a7:4b:05:21:
         96:6d:37:9a:23:8e:b6:0c:6e:34:5c:79:68:0e:de:a8:e2:73:
         55:96:66:6c:7e:c5:32:b7:8b:68:dc:6a:6f:6a:fb:01:34:d2:
         77:dd:44:84:ce:4d:ae:cd:91:96:88:13:b2:43:97:f7:b9:de:
         5a:22:2f:c8:f7:0d:b3:5d:27:80:69:fa:0b:d2:39:0d:25:cc:
         02:81:e8:dc:f5:3e:a9:61:3c:d2:f1:2a:eb:31:a6:d8:22:11:
         fd:c5:2f:58:cd:70:02:59:7d:59:45:15:e4:0c:3f:0d:27:87:
         3e:12:ee:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----