Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6942c298-c676-4e9a-9575-0de01de4f5f5/ccee6da0a94f9188f2d55159907125ad0fc200e5.roa
File:                     ccee6da0a94f9188f2d55159907125ad0fc200e5.roa (raw, json)
Hash identifier:          y2lkpAKJ5xlTwMkqIperBKaWxx9ATcSlE0FuEvAlLXA=
Subject key identifier:   96:87:A9:1B:C4:CA:56:7B:70:05:72:DB:A0:44:79:A0:EB:8D:46:41
Certificate issuer:       /CN=ae3cf2536575d774352e8bdfb75251b353267e80
Certificate serial:       088F
Authority key identifier: A9:D0:89:41:9C:89:B0:BA:BF:5D:A7:C1:60:56:34:1D:AF:D9:D5:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae3cf2536575d774352e8bdfb75251b353267e80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6942c298-c676-4e9a-9575-0de01de4f5f5/ccee6da0a94f9188f2d55159907125ad0fc200e5.roa
Signing time:             Tue 01 Jun 2021 14:04:01 +0000
ROA not before:           Tue 01 Jun 2021 03:00:00 +0000
ROA not after:            Thu 01 Jun 2023 03:00:00 +0000
asID:                     27989
IP address blocks:        201.131.49.0/24 maxlen: 24
                          2801:1c:6000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2191 (0x88f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae3cf2536575d774352e8bdfb75251b353267e80
        Validity
            Not Before: Jun  1 03:00:00 2021 GMT
            Not After : Jun  1 03:00:00 2023 GMT
        Subject: CN=ccee6da0a94f9188f2d55159907125ad0fc200e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:42:c7:ed:9e:a9:f5:4b:88:26:28:42:ec:ab:
                    8f:15:88:61:f5:05:42:6c:db:4e:b4:5c:3b:cb:0e:
                    17:a2:4b:26:64:b8:90:2e:60:7d:08:c6:2e:21:c1:
                    95:48:58:94:2b:eb:90:45:29:e8:c5:63:be:ce:85:
                    bc:d0:cd:26:d4:27:50:13:16:cc:cf:1e:99:16:50:
                    2d:96:d9:69:6c:e7:fa:37:e9:28:0f:e5:fb:25:6d:
                    e3:70:00:02:cc:0e:1d:a9:c6:8a:bf:6c:b0:cf:98:
                    e7:9a:26:e2:14:01:fe:33:f8:3d:b2:02:93:54:84:
                    2b:02:bb:d1:be:7f:62:6d:1e:30:53:16:78:f6:9e:
                    62:59:ad:29:66:e5:28:46:4a:4b:e6:67:04:96:e8:
                    a6:a4:8d:d2:3b:b8:84:b2:30:c0:2f:87:5f:0b:74:
                    37:72:54:d2:aa:6c:1b:f9:4e:8a:19:b9:37:d9:9a:
                    5b:b9:ca:f2:a8:52:ea:f5:7b:7a:81:3c:c2:02:9b:
                    68:01:f2:a6:85:22:0b:88:fd:1d:de:63:c4:16:ac:
                    96:e5:2d:31:39:82:f6:2c:5e:74:af:f7:37:04:14:
                    08:f1:9a:28:4c:39:16:92:c3:76:1d:1e:02:f5:d3:
                    93:54:05:aa:b5:8f:42:f9:43:65:ac:45:de:90:af:
                    96:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:87:A9:1B:C4:CA:56:7B:70:05:72:DB:A0:44:79:A0:EB:8D:46:41
            X509v3 Authority Key Identifier:
                keyid:A9:D0:89:41:9C:89:B0:BA:BF:5D:A7:C1:60:56:34:1D:AF:D9:D5:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae3cf2536575d774352e8bdfb75251b353267e80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6942c298-c676-4e9a-9575-0de01de4f5f5/ccee6da0a94f9188f2d55159907125ad0fc200e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6942c298-c676-4e9a-9575-0de01de4f5f5/ae3cf2536575d774352e8bdfb75251b353267e80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.49.0/24
                IPv6:
                  2801:1c:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:58:f2:6f:e0:6e:e4:41:a2:90:ef:a7:36:12:ea:c9:69:9a:
         9a:79:73:cd:5e:0b:03:5c:28:17:d3:05:ec:65:00:d6:5c:a4:
         d1:8f:32:f3:ad:fe:cc:12:75:cf:f8:f5:cc:60:1c:d2:0a:3a:
         5e:da:1d:3b:3b:45:dd:d7:3b:db:d2:48:d2:38:82:33:09:48:
         2c:b7:a7:08:dc:17:60:70:38:2f:8b:96:39:44:f4:47:ed:c4:
         c3:17:69:5b:71:dc:75:de:9e:eb:7d:aa:94:40:c1:52:4c:c0:
         8c:9e:e9:07:18:53:41:d4:d0:3c:39:f7:7b:a7:ff:d1:1d:86:
         d5:f9:e4:49:91:82:ae:37:5b:37:cd:73:c1:2b:60:cf:d6:43:
         9b:4d:31:07:34:e4:83:20:6d:c8:45:86:c2:6d:da:e5:3c:10:
         60:1c:2b:12:2a:f3:15:e7:15:a1:e5:6f:bd:96:37:d6:88:f8:
         6d:59:a3:b6:5e:d6:17:c2:c1:92:09:ff:9d:61:68:81:54:13:
         62:47:8c:b4:55:de:aa:d9:7e:87:bd:f5:40:fc:ab:64:89:38:
         1c:37:e5:7c:e0:dd:d8:52:38:e9:36:82:0a:85:b3:9b:59:d4:
         53:87:da:15:f5:14:51:80:1e:a6:64:8e:17:02:cb:ce:fc:68:
         4f:48:01:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----