Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/2e72b90dc958370856272502130b22ca025fae62.roa
File:                     2e72b90dc958370856272502130b22ca025fae62.roa (raw, json)
Hash identifier:          P+MqNCiw+Ytt1O6GGLmGgW7qDYTpDUVRpu+AGUk/ef8=
Subject key identifier:   3C:3A:DB:D1:E9:B9:C6:26:1E:D8:CD:E2:7B:75:F5:9F:D5:01:87:FD
Certificate issuer:       /CN=4ec9e37ddb578cbbdc4e2281b37679864d80672b
Certificate serial:       0D1A00
Authority key identifier: 6A:32:EA:0E:A5:50:8E:89:35:14:6E:9E:46:73:44:A0:B1:21:57:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ec9e37ddb578cbbdc4e2281b37679864d80672b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/2e72b90dc958370856272502130b22ca025fae62.roa
Signing time:             Wed 24 Mar 2021 14:28:36 +0000
ROA not before:           Wed 24 Mar 2021 14:28:35 +0000
ROA not after:            Tue 24 Mar 2026 14:28:35 +0000
asID:                     27762
IP address blocks:        190.121.223.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858624 (0xd1a00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ec9e37ddb578cbbdc4e2281b37679864d80672b
        Validity
            Not Before: Mar 24 14:28:35 2021 GMT
            Not After : Mar 24 14:28:35 2026 GMT
        Subject: CN=2e72b90dc958370856272502130b22ca025fae62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a6:f2:3e:93:55:a0:98:6d:c8:d8:63:23:4b:
                    5c:51:eb:51:fe:b5:ac:06:cf:7f:b9:c1:71:e1:48:
                    a5:22:39:79:2b:1f:e9:87:94:c6:b4:a4:3f:aa:8b:
                    bd:ee:24:b7:32:c3:2d:2e:2a:42:e8:07:d4:22:b1:
                    3d:22:6c:e9:b5:f3:82:96:72:0e:8c:bd:11:8f:95:
                    03:b1:f2:73:56:61:bf:dc:d7:e6:53:c9:43:ed:61:
                    8b:f1:5c:af:9d:8d:68:5d:e3:38:bb:70:30:a0:0c:
                    91:78:73:5f:e1:7f:ba:f4:4c:c0:bb:b4:49:b5:16:
                    02:47:64:f8:4f:6d:32:ce:ba:72:cf:ad:77:f0:7b:
                    64:cc:43:03:b8:f5:5a:1c:f3:12:10:19:0b:2c:9e:
                    bb:9a:63:83:0b:cd:44:ba:c7:54:5f:b1:e7:6f:a9:
                    d0:19:f0:71:b1:ff:ff:13:aa:93:67:e8:db:fd:5f:
                    f7:26:57:b0:dc:57:e4:fa:32:da:c9:14:db:fc:48:
                    e1:83:87:a1:27:ea:12:f9:67:e3:18:ab:6d:9a:a6:
                    47:a4:68:64:83:f9:3a:3c:92:e3:51:c3:90:a8:21:
                    a2:ed:81:c6:c7:d5:1b:7b:2e:7e:91:55:c7:a7:32:
                    2e:ac:74:28:14:05:05:e1:18:9e:fc:c5:55:b5:17:
                    6a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3A:DB:D1:E9:B9:C6:26:1E:D8:CD:E2:7B:75:F5:9F:D5:01:87:FD
            X509v3 Authority Key Identifier:
                keyid:6A:32:EA:0E:A5:50:8E:89:35:14:6E:9E:46:73:44:A0:B1:21:57:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ec9e37ddb578cbbdc4e2281b37679864d80672b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/2e72b90dc958370856272502130b22ca025fae62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/4ec9e37ddb578cbbdc4e2281b37679864d80672b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:46:58:b1:d7:b0:6e:e9:62:7a:5b:b2:98:cd:f2:4f:71:ac:
         1d:51:bb:0b:f9:37:e6:5e:3e:bd:62:ab:08:98:55:65:fa:ea:
         41:8a:b1:82:94:60:20:1c:40:92:68:90:7c:b6:3c:ee:2c:f3:
         6e:c2:70:a4:49:66:fc:74:d1:95:a4:7c:af:e7:53:48:c1:ff:
         91:af:2a:12:d4:61:d6:fb:2a:5e:c8:48:f7:50:71:3b:6a:75:
         bd:3a:12:fd:e7:ab:8f:82:f5:83:2e:cc:9e:c7:fa:8b:c2:11:
         63:af:5b:c1:84:75:54:7b:1e:cb:37:03:ee:58:e2:04:fe:7b:
         a3:fc:73:b7:a1:03:c5:7d:d9:fc:6e:77:0e:8e:42:af:0c:de:
         fd:29:11:0c:fe:b9:10:1e:35:4f:10:45:d6:88:cd:8a:2c:cc:
         38:24:6e:cb:6a:1c:ad:72:f8:ee:ff:da:a7:df:af:9d:10:b9:
         2e:5f:bf:0c:78:26:cb:09:c2:78:0d:da:59:d1:de:76:53:1f:
         35:85:dd:64:2f:d5:21:68:d8:b3:86:22:14:8c:9a:1d:65:a8:
         8b:6e:7a:48:ad:6f:9a:12:55:6c:bc:f8:99:dd:70:56:8a:37:
         a4:e6:1c:51:5c:7e:23:11:da:db:33:bd:4f:d9:ae:00:69:ce:
         f1:34:75:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----