Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/d55f0d9158515e1ffd3e212e54faedbc3c3d2e82.roa
File:                     d55f0d9158515e1ffd3e212e54faedbc3c3d2e82.roa (raw, json)
Hash identifier:          K+FrW9Uz3NRQFQ8gxvg3tcRRsHiSTYREawO01V5HyRk=
Subject key identifier:   50:93:44:97:D6:6B:43:1E:28:CE:51:E6:32:F8:1A:38:C5:F3:4C:CA
Certificate issuer:       /CN=f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b
Certificate serial:       0DB266
Authority key identifier: C6:04:49:3B:FF:C3:07:89:21:D3:5E:06:41:B2:53:0C:47:7D:0C:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/d55f0d9158515e1ffd3e212e54faedbc3c3d2e82.roa
Signing time:             Wed 24 Mar 2021 14:35:20 +0000
ROA not before:           Wed 24 Mar 2021 14:35:20 +0000
ROA not after:            Tue 24 Mar 2026 14:35:20 +0000
asID:                     262220
IP address blocks:        190.7.112.0/20 maxlen: 24
                          191.102.0.0/20 maxlen: 24
                          179.51.113.0/24 maxlen: 24
                          167.250.120.0/22 maxlen: 24
                          179.51.117.0/24 maxlen: 29
                          179.51.121.0/24 maxlen: 24
                          2800:b40::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897638 (0xdb266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b
        Validity
            Not Before: Mar 24 14:35:20 2021 GMT
            Not After : Mar 24 14:35:20 2026 GMT
        Subject: CN=d55f0d9158515e1ffd3e212e54faedbc3c3d2e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d2:26:d0:28:fd:50:63:85:46:1f:82:64:62:
                    db:1c:75:4c:27:e5:63:35:b3:ad:f5:33:88:01:1a:
                    0a:25:da:5b:af:e8:b7:35:a1:a1:8b:7a:af:e2:ae:
                    fa:20:9d:fc:e4:eb:42:3f:ea:be:50:88:d0:26:2d:
                    a8:d5:af:5a:78:a5:26:44:04:46:17:51:0e:6a:7c:
                    35:c2:75:1f:db:45:d6:07:6e:15:57:a9:c9:d0:05:
                    e8:bd:0e:4a:b0:d6:02:10:8c:4c:85:1a:54:db:a1:
                    f2:85:25:ea:3a:19:b7:60:39:4d:f7:3c:44:a5:51:
                    92:76:2f:81:54:36:a1:f1:9c:89:7f:d3:68:70:25:
                    9d:25:0e:d3:b4:57:0e:cd:03:35:84:08:e7:99:40:
                    1c:8f:5f:6c:d2:fb:b7:04:b0:24:9a:fc:78:75:df:
                    b4:fc:b6:7b:9e:56:c9:59:8a:53:cf:08:1e:db:6f:
                    af:72:41:5c:5a:0a:e4:de:be:29:50:46:2c:c9:51:
                    5c:53:68:e4:97:1c:e7:d6:0f:2d:e9:d9:67:f9:48:
                    9e:3e:16:72:a2:30:62:49:30:11:bd:69:02:a4:47:
                    30:37:08:ff:97:81:ea:cd:f3:2b:ac:c4:15:49:e8:
                    9d:62:7c:28:57:9e:a1:85:8c:62:92:96:5b:d8:c8:
                    c1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:93:44:97:D6:6B:43:1E:28:CE:51:E6:32:F8:1A:38:C5:F3:4C:CA
            X509v3 Authority Key Identifier:
                keyid:C6:04:49:3B:FF:C3:07:89:21:D3:5E:06:41:B2:53:0C:47:7D:0C:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/d55f0d9158515e1ffd3e212e54faedbc3c3d2e82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.120.0/22
                  179.51.113.0/24
                  179.51.117.0/24
                  179.51.121.0/24
                  190.7.112.0/20
                  191.102.0.0/20
                IPv6:
                  2800:b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:ec:e8:cb:07:43:f4:c0:b8:c3:4b:99:e2:9f:22:60:3b:4d:
         8d:05:93:e5:db:4f:41:7a:f6:ec:0a:34:0b:d9:cd:bb:84:91:
         61:6c:91:1b:82:c3:7e:ab:f0:e8:1d:11:bb:4f:b8:f3:44:f8:
         8c:3a:55:ad:36:e7:ca:43:c6:46:ca:9c:3c:02:23:2f:f0:84:
         f6:79:53:d0:2b:3b:24:38:ca:c1:ac:36:d2:d0:70:6f:07:ea:
         3f:fb:36:8d:40:3f:3a:a0:09:16:8e:12:9c:f9:53:21:ea:b6:
         61:1d:10:5a:6d:87:62:7e:5e:d6:29:ef:1b:14:07:c3:eb:1e:
         9e:18:51:f2:6c:08:62:79:8e:24:5b:ae:cf:d2:00:8f:97:7d:
         20:a1:9d:95:f8:1d:ed:af:4e:c9:9b:07:fe:f4:c8:26:03:7c:
         21:8f:f6:4c:8d:f6:bd:2e:79:5f:34:9b:a7:38:1f:fd:7b:a6:
         d6:07:07:80:a6:5e:54:12:d9:1b:a1:a8:74:08:c7:7e:79:c5:
         dd:91:ad:31:62:25:54:f6:98:a3:9b:c2:cc:4a:bf:9b:35:ac:
         ca:bf:26:9c:9c:30:69:9e:02:48:cb:eb:f0:9c:a2:74:15:ea:
         f7:ed:f1:35:83:09:f5:1c:77:18:9e:08:90:ed:ab:86:ee:fa:
         54:cb:6a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----