Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6d45d450-ba4f-4b12-a148-582dc2a96a4a/69653b0561b1beac76c5f0e9a4dea673b156df9d.roa
File:                     69653b0561b1beac76c5f0e9a4dea673b156df9d.roa (raw, json)
Hash identifier:          3wLf1BFUgNt/9u+PkWSKEFY0ETgqVfPacGB3vrF0xf0=
Subject key identifier:   77:62:DB:12:4F:B7:4B:2D:82:28:A5:E4:9D:DD:0C:57:52:9E:EE:41
Certificate issuer:       /CN=34dfefe96d7a1553a8ffa329c9e565c47bd0aa94
Certificate serial:       067D
Authority key identifier: 86:AB:1B:95:A9:91:3F:BB:C9:13:0B:83:86:CC:19:53:8C:44:3B:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/34dfefe96d7a1553a8ffa329c9e565c47bd0aa94.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6d45d450-ba4f-4b12-a148-582dc2a96a4a/69653b0561b1beac76c5f0e9a4dea673b156df9d.roa
Signing time:             Wed 01 Sep 2021 02:33:05 +0000
ROA not before:           Tue 31 Aug 2021 03:00:00 +0000
ROA not after:            Thu 31 Aug 2023 03:00:00 +0000
asID:                     264787
IP address blocks:        168.197.196.0/22 maxlen: 24
                          2803:d8c0::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1661 (0x67d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34dfefe96d7a1553a8ffa329c9e565c47bd0aa94
        Validity
            Not Before: Aug 31 03:00:00 2021 GMT
            Not After : Aug 31 03:00:00 2023 GMT
        Subject: CN=69653b0561b1beac76c5f0e9a4dea673b156df9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f9:2c:8a:ac:f7:df:dd:b8:db:f1:95:14:60:
                    97:db:c2:17:d3:7a:de:d0:ba:5b:bc:b0:dc:da:4c:
                    4f:a8:e9:5d:d1:80:8f:f2:0c:d5:d7:a8:71:2f:18:
                    9f:86:8f:f3:3f:38:6c:6f:7a:9f:e0:b7:44:2b:b1:
                    05:64:a5:3f:e1:fc:2e:14:48:7c:87:34:12:af:40:
                    c9:91:ee:16:8c:23:c2:4b:a3:2c:9a:98:93:c9:66:
                    d3:59:3e:07:0e:69:f2:89:48:3b:76:7c:81:9c:dc:
                    64:92:db:ac:9d:99:aa:aa:23:d2:36:b6:9a:73:7d:
                    3c:95:66:b3:8f:e5:db:a0:95:7e:4a:a8:5b:1d:20:
                    a9:c9:a2:19:53:1c:18:62:c3:d7:e4:4d:4d:c1:8a:
                    33:78:4f:2e:55:04:bc:cb:9e:22:9b:d5:8e:8f:f9:
                    8e:95:ab:57:18:5d:a8:95:5b:f0:61:51:16:ba:da:
                    91:bc:d2:2d:25:86:5d:b4:0d:74:7a:9b:cc:ac:f1:
                    16:dd:db:05:20:d6:f8:74:30:7d:f6:80:e7:65:04:
                    64:b0:49:6d:a2:cd:e4:ca:34:fb:7e:7a:24:ab:33:
                    ce:8b:4a:af:f4:53:1a:f6:ab:51:a6:fe:11:95:f8:
                    35:b6:91:6a:5b:1e:80:c3:58:6b:30:c9:2b:20:e0:
                    d8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:62:DB:12:4F:B7:4B:2D:82:28:A5:E4:9D:DD:0C:57:52:9E:EE:41
            X509v3 Authority Key Identifier:
                keyid:86:AB:1B:95:A9:91:3F:BB:C9:13:0B:83:86:CC:19:53:8C:44:3B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/34dfefe96d7a1553a8ffa329c9e565c47bd0aa94.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6d45d450-ba4f-4b12-a148-582dc2a96a4a/69653b0561b1beac76c5f0e9a4dea673b156df9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6d45d450-ba4f-4b12-a148-582dc2a96a4a/34dfefe96d7a1553a8ffa329c9e565c47bd0aa94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.196.0/22
                IPv6:
                  2803:d8c0::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:f9:ee:96:cd:74:7b:f6:bf:b6:1e:15:a9:78:2a:a2:b7:b8:
         71:14:ee:bc:58:25:4f:1b:63:d5:59:40:ab:9a:bd:74:8c:68:
         10:c2:0c:4e:61:bb:c8:fc:f5:61:08:2f:7e:5b:7a:39:32:45:
         da:7d:cc:ac:76:07:4e:cf:93:a9:60:42:6d:00:4c:e1:47:04:
         9f:6a:89:3d:b3:d8:72:26:2a:26:ea:a9:d9:bd:22:5e:a8:98:
         3d:37:cf:74:89:9c:ae:5b:c5:d8:13:a6:29:ea:58:ec:22:1d:
         23:15:02:01:a6:58:75:95:77:3c:08:c3:95:f9:f8:cd:dd:ed:
         9b:45:73:17:bb:5f:bc:04:ad:bb:65:05:83:47:38:e4:91:35:
         c9:0f:7f:cf:bf:36:cd:36:f3:92:f4:24:b7:4b:f2:76:4a:d2:
         7f:d0:51:0a:3e:f5:4e:60:07:ea:8d:99:6f:38:6f:7c:7a:4d:
         60:68:d3:d7:b2:ef:55:07:d6:84:05:49:a7:0b:aa:30:6b:36:
         21:ad:f3:b9:b6:15:93:41:88:21:2f:a2:bf:37:23:37:25:31:
         9a:d4:09:3c:95:9e:5d:0f:fc:35:e0:8c:26:9b:b3:4e:d5:d7:
         c0:82:99:05:da:99:5e:20:ca:38:73:80:0b:0c:42:79:ef:86:
         05:fb:ed:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----