Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/1728c3c1b559bba9b0844f73302f2f10082ea501.roa
File:                     1728c3c1b559bba9b0844f73302f2f10082ea501.roa (raw, json)
Hash identifier:          Uk4nhm84sB7jkjFYf27QQcgRUXcyC0a2Zpi3sq5Poq8=
Subject key identifier:   F4:40:4D:79:6C:66:C1:F0:A3:72:EA:9D:75:E8:C6:9D:F7:41:29:1C
Certificate issuer:       /CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
Certificate serial:       0D225B
Authority key identifier: AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/1728c3c1b559bba9b0844f73302f2f10082ea501.roa
Signing time:             Wed 24 Mar 2021 14:43:09 +0000
ROA not before:           Wed 24 Mar 2021 14:43:08 +0000
ROA not after:            Tue 24 Mar 2026 14:43:08 +0000
asID:                     32098
IP address blocks:        187.251.0.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860763 (0xd225b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
        Validity
            Not Before: Mar 24 14:43:08 2021 GMT
            Not After : Mar 24 14:43:08 2026 GMT
        Subject: CN=1728c3c1b559bba9b0844f73302f2f10082ea501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:de:e2:f0:99:17:4e:1d:3c:1e:ce:40:6c:d7:
                    11:48:df:7a:83:6a:87:c5:b5:66:fe:67:7a:6f:d0:
                    ae:47:e8:19:bd:3a:df:ac:ca:57:66:7e:4f:99:6f:
                    27:0f:db:ab:00:d0:58:49:bc:e1:12:4e:cd:ae:a9:
                    38:df:20:2f:11:c0:23:28:ac:5c:92:72:bd:8b:a2:
                    07:1e:ce:97:24:c3:3d:6b:10:29:cd:2c:0a:da:71:
                    a5:aa:e6:a2:0d:f1:a2:e5:ef:59:78:4c:25:ef:57:
                    bf:20:8d:fe:07:cc:09:a7:22:f1:9e:09:6f:9c:9b:
                    20:aa:08:cb:59:27:6e:60:87:9f:9e:0e:d4:a1:55:
                    10:bf:6c:df:59:7f:b6:fd:57:e9:04:7e:41:aa:70:
                    e5:f0:d0:b3:1a:05:77:70:7a:09:26:b8:2f:37:3e:
                    bb:dc:72:b2:09:c1:31:be:6b:a3:8c:d2:b2:be:83:
                    8f:1c:e8:eb:de:19:c4:5f:a0:a7:e6:56:cb:2f:85:
                    f3:b8:70:50:e2:f5:1c:a3:32:82:b5:a8:d8:82:9a:
                    ee:62:4a:74:2d:8e:0e:72:d2:12:fb:20:83:52:39:
                    e3:72:5f:e1:6f:5f:0a:45:9b:73:2c:b8:65:e1:11:
                    19:19:7f:a2:a4:25:ee:b0:5c:80:53:c1:4b:1e:ad:
                    28:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:40:4D:79:6C:66:C1:F0:A3:72:EA:9D:75:E8:C6:9D:F7:41:29:1C
            X509v3 Authority Key Identifier:
                keyid:AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/1728c3c1b559bba9b0844f73302f2f10082ea501.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         72:6d:b6:a8:92:d8:af:84:c5:d0:7e:7b:10:99:a3:7d:6c:4b:
         20:6a:de:ae:a1:32:82:f5:8e:38:6f:6a:39:c5:55:ce:fe:ca:
         88:bf:79:1a:40:1b:d2:aa:39:ca:ff:ca:6d:1d:42:e8:4f:85:
         af:06:06:89:44:bf:8c:30:1f:db:ac:4d:07:09:1e:26:ea:03:
         ff:f6:fe:34:d9:b1:56:8f:e8:80:46:b3:1a:e8:ed:d8:26:77:
         ae:38:34:54:d7:ee:84:50:60:73:72:68:1c:36:38:81:d6:d0:
         6f:83:0a:43:56:dc:87:45:c3:e6:09:52:83:d2:b4:78:4b:42:
         5f:06:d6:fd:26:9c:5f:fe:c7:7f:b0:83:1c:93:51:88:d4:08:
         9f:86:3f:41:0a:de:3b:a5:c9:fd:1f:ed:9e:8a:04:6c:bb:48:
         75:b4:ca:11:ca:d9:a4:5c:1a:bf:b6:bd:88:16:cd:2f:ab:c4:
         c1:7e:62:5e:6d:89:ee:3e:6c:a7:57:10:1d:5f:7e:97:cc:a9:
         d0:9b:79:61:9c:f5:50:f9:0c:db:48:3d:6c:7a:b3:71:6d:77:
         cb:dc:17:38:ce:ea:d0:07:c6:ee:39:48:e6:84:4c:69:a9:e9:
         f1:1f:81:2d:6c:8b:f6:03:37:a5:6f:f0:7f:2b:0a:f1:7c:dc:
         f6:21:17:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----