Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/e1fc823fb45bb3b014224adf32fc0e44b4f3b542.roa
File:                     e1fc823fb45bb3b014224adf32fc0e44b4f3b542.roa (raw, json)
Hash identifier:          KOmOx5CdIZJFxdsA8SALKs4chPhnNr3CrYAB+UttfAw=
Subject key identifier:   99:CB:DF:D9:0D:F5:3E:28:AB:3D:54:22:3D:02:24:3C:3B:E9:5E:2A
Certificate issuer:       /CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Certificate serial:       0D7B8B
Authority key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/e1fc823fb45bb3b014224adf32fc0e44b4f3b542.roa
Signing time:             Wed 24 Mar 2021 14:34:52 +0000
ROA not before:           Wed 24 Mar 2021 14:34:51 +0000
ROA not after:            Tue 24 Mar 2026 14:34:51 +0000
asID:                     52262
IP address blocks:        190.242.27.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883595 (0xd7b8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
        Validity
            Not Before: Mar 24 14:34:51 2021 GMT
            Not After : Mar 24 14:34:51 2026 GMT
        Subject: CN=e1fc823fb45bb3b014224adf32fc0e44b4f3b542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:94:60:b2:7b:26:a1:59:3d:b6:de:9c:c2:5e:
                    70:26:e5:77:64:45:5c:76:c7:aa:af:f0:e3:45:cc:
                    b8:b4:30:b0:0b:b5:3a:58:dc:c8:2b:46:ec:1d:26:
                    7d:6e:66:19:a1:7a:1d:00:a3:65:ea:3c:f9:6e:4c:
                    32:12:97:05:49:89:cd:39:dc:bb:cf:30:08:b0:81:
                    09:17:dc:6b:64:96:ba:27:a2:8d:e6:75:d8:8a:8a:
                    43:0f:6a:4b:cb:2e:86:94:44:de:de:ac:fb:33:a1:
                    c4:63:7a:1a:51:66:46:ef:50:b0:c7:ec:30:63:4f:
                    82:04:7f:b1:72:5a:3c:a4:19:cd:65:8a:5b:d9:a1:
                    6d:40:44:d2:28:2e:b6:da:ea:9c:3c:d0:3b:c5:0d:
                    ab:0b:fa:d0:5f:46:7f:4c:80:46:3d:3a:67:e6:1d:
                    50:5e:fe:6f:43:25:78:99:3f:22:cd:1d:93:0e:64:
                    de:03:1e:b4:06:d8:b7:17:62:81:df:76:2f:27:b6:
                    86:6b:4c:ff:08:67:8b:bc:fc:b6:b1:30:74:58:b2:
                    9c:6f:0d:75:fe:6c:9f:e8:3a:9e:36:af:d2:10:b3:
                    d3:1d:80:50:8a:92:f5:b8:6e:1f:58:6f:18:94:04:
                    87:8e:65:15:44:4c:3a:b1:b6:39:df:d1:42:fb:ce:
                    48:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CB:DF:D9:0D:F5:3E:28:AB:3D:54:22:3D:02:24:3C:3B:E9:5E:2A
            X509v3 Authority Key Identifier:
                keyid:CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/e1fc823fb45bb3b014224adf32fc0e44b4f3b542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:a5:fb:6c:b9:41:fa:1f:37:c8:9f:9d:4f:94:4b:79:ec:e4:
         17:fc:86:c8:2e:15:82:d4:2d:b7:09:b0:5a:0a:31:e8:67:81:
         78:87:7c:8f:c6:3d:53:8e:8b:3a:eb:15:95:b2:78:c3:f6:40:
         0f:15:83:b8:2d:7a:ea:1b:ab:d8:c0:49:e8:61:94:de:22:fa:
         82:83:8d:f6:1a:a3:a3:bd:bb:05:84:85:82:91:5e:95:fb:1a:
         10:d2:5f:9c:58:07:5c:19:51:81:20:2c:85:0b:82:da:9a:f7:
         23:19:91:52:2e:2a:e1:5e:f0:3a:aa:64:74:80:85:ea:77:d6:
         40:cf:a1:3e:44:4d:75:24:66:12:7e:49:ba:87:08:92:9e:c7:
         17:29:34:20:83:89:df:35:a4:34:84:c2:13:ce:9e:c2:e5:c8:
         f1:98:8d:c2:f6:2b:ba:20:25:0a:39:3d:dc:dc:11:8e:79:a7:
         11:1c:4f:d7:7a:67:bc:e9:65:d2:18:27:3a:20:9a:58:40:f9:
         f1:4e:1f:6d:37:8b:8f:be:2b:30:28:95:aa:ea:97:23:66:66:
         40:8e:9e:bb:5a:1f:1a:e0:a8:3a:5a:d5:a5:39:34:d1:9b:c5:
         4f:48:8d:37:be:27:1b:fa:74:52:ad:23:ab:ca:51:09:4c:90:
         ef:14:44:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----