Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/fec011fb31a4ea7cc2e147d912e156b405f50796.roa
File:                     fec011fb31a4ea7cc2e147d912e156b405f50796.roa (raw, json)
Hash identifier:          PMaKSN7AP2Datgwg28KwI5lBRAlUsFw/Nb6uqIMX3bY=
Subject key identifier:   DD:F4:83:9B:A4:B1:A3:6B:CB:D4:DF:FC:2A:DE:9A:B5:DF:D5:16:8A
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       0D115C
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/fec011fb31a4ea7cc2e147d912e156b405f50796.roa
Signing time:             Wed 24 Mar 2021 14:29:20 +0000
ROA not before:           Wed 24 Mar 2021 14:29:18 +0000
ROA not after:            Tue 24 Mar 2026 14:29:18 +0000
asID:                     64103
IP address blocks:        138.204.251.0/24 maxlen: 24
                          2001:13c7:601d::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 856412 (0xd115c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Mar 24 14:29:18 2021 GMT
            Not After : Mar 24 14:29:18 2026 GMT
        Subject: CN=fec011fb31a4ea7cc2e147d912e156b405f50796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fa:2a:54:6e:82:de:62:5f:df:45:cf:e4:fe:
                    5c:40:48:d0:a2:5b:9b:a8:9a:61:7d:b4:1f:5e:46:
                    0b:b1:b8:8a:b8:cb:29:dd:b8:1e:33:71:e4:b9:8a:
                    6b:7a:6d:75:ad:7b:a8:8c:31:ad:b9:28:48:a0:5d:
                    33:62:5a:1f:00:2d:9a:b9:e1:30:d0:4e:4b:33:0a:
                    cb:4d:c4:0c:d0:16:ca:16:8d:d8:27:f6:3b:3b:c2:
                    d3:9b:91:48:a6:60:3c:e3:17:44:36:b4:56:ec:2d:
                    59:34:1d:c1:34:4c:5a:03:6f:4c:72:d9:f3:46:6c:
                    11:ac:f9:75:6c:3b:88:1b:04:31:01:96:68:e0:cc:
                    f1:75:38:fe:b8:95:74:e9:da:c9:22:31:11:3e:79:
                    f6:e0:99:e7:9d:2b:f6:fc:b5:68:60:34:17:da:a6:
                    ce:16:fa:cb:ad:ad:f2:40:48:4d:58:8e:8a:d9:b3:
                    37:16:c0:17:3b:db:fd:92:da:95:1a:27:c4:0a:3e:
                    a8:1f:c0:b1:c9:d9:c6:20:6a:ed:b7:f6:26:03:f1:
                    71:71:95:70:4e:60:76:90:28:01:4d:cb:dc:2b:36:
                    79:c6:ef:26:6c:b7:3d:2e:72:de:6a:22:0d:b6:c7:
                    fd:68:21:c9:37:1a:1e:77:a2:e0:fd:ff:b1:9c:5a:
                    69:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F4:83:9B:A4:B1:A3:6B:CB:D4:DF:FC:2A:DE:9A:B5:DF:D5:16:8A
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/fec011fb31a4ea7cc2e147d912e156b405f50796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.251.0/24
                IPv6:
                  2001:13c7:601d::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:ea:f7:1e:2a:8c:bf:36:37:1e:35:47:8d:31:cc:7f:08:72:
         1d:3e:1a:7f:15:5b:8c:15:da:81:14:6a:59:36:97:e1:00:2f:
         6e:8a:09:61:eb:b5:28:fc:98:db:d1:58:d0:8e:c0:5b:38:aa:
         93:ad:57:05:42:23:66:d2:19:63:65:d8:9a:0f:23:e6:0a:5e:
         d4:96:cb:36:8d:3b:db:08:81:84:c7:6c:cc:92:5d:0e:f0:3e:
         90:23:8d:39:13:74:85:13:5f:41:01:ad:38:bb:a2:66:79:90:
         65:90:6a:0c:d2:88:67:93:67:80:ac:b2:80:f6:ba:e6:2f:aa:
         6a:0e:29:76:d7:67:70:5d:31:89:d4:be:3e:71:66:16:c9:6d:
         bd:91:a6:05:3a:b3:09:ee:b8:92:bb:b7:26:3a:2b:b6:99:89:
         28:df:b5:a7:e5:85:33:35:85:25:3b:0c:c1:04:fa:1a:a4:d6:
         62:2d:f7:d6:72:2c:26:73:94:fe:ea:0d:4d:64:f7:7e:88:6b:
         cd:ac:2b:18:69:46:3f:e5:d2:1e:ec:d2:25:14:ef:07:a2:2f:
         6d:48:6e:6d:f8:58:c3:c1:af:ef:e0:37:ba:69:9d:28:75:fc:
         47:cc:87:c2:30:4b:d6:d9:4a:07:be:1d:fa:cc:f0:b8:1b:6a:
         3f:4e:9d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----