Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/733762e7-6c26-4327-bdfb-d505e6543210/facb1dfff2415898ba3177c8302a34b742af8fc3.roa
File:                     facb1dfff2415898ba3177c8302a34b742af8fc3.roa (raw, json)
Hash identifier:          25odb+Zz7ZIupVuRE/uzo/J0ISWnp/Q/3G1khc6JOJE=
Subject key identifier:   99:EC:D7:44:24:DB:8E:71:7C:99:23:47:F3:AF:1F:26:0E:45:24:38
Certificate issuer:       /CN=5de7951af17313ff75f3239cc744c63f2ab25b0b
Certificate serial:       0D1B43
Authority key identifier: 56:D3:D4:34:73:6F:00:94:5B:C2:3E:F0:F2:0A:57:85:EB:27:1E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5de7951af17313ff75f3239cc744c63f2ab25b0b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/733762e7-6c26-4327-bdfb-d505e6543210/facb1dfff2415898ba3177c8302a34b742af8fc3.roa
Signing time:             Wed 24 Mar 2021 14:37:24 +0000
ROA not before:           Wed 24 Mar 2021 14:37:24 +0000
ROA not after:            Tue 24 Mar 2026 14:37:24 +0000
asID:                     28007
IP address blocks:        168.232.28.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858947 (0xd1b43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5de7951af17313ff75f3239cc744c63f2ab25b0b
        Validity
            Not Before: Mar 24 14:37:24 2021 GMT
            Not After : Mar 24 14:37:24 2026 GMT
        Subject: CN=facb1dfff2415898ba3177c8302a34b742af8fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f3:98:05:09:ad:32:42:f9:b0:30:63:ff:d2:
                    68:eb:8a:b6:19:a2:a0:11:5b:2c:23:a9:b4:a8:89:
                    26:f6:0d:22:53:f8:5e:2a:4f:0e:41:51:3d:c0:b0:
                    c0:d6:a7:dd:b1:a9:3f:2d:40:13:7a:d8:dd:15:9e:
                    d9:8e:f4:ca:54:d1:6d:4e:93:09:0c:50:98:13:67:
                    e5:9d:de:7f:14:bf:69:c7:0a:5f:0f:15:a1:54:3e:
                    21:4f:22:76:8a:44:fa:31:f5:c9:0d:c8:4c:d4:d3:
                    66:74:8a:14:38:6b:37:c7:a1:63:39:53:5f:73:0f:
                    27:b3:49:21:c6:59:c7:b3:13:19:c0:be:85:47:86:
                    b9:21:15:fc:74:fa:89:e9:e4:53:62:c7:db:55:b9:
                    39:04:5b:a7:43:b1:89:31:49:e6:a0:58:3b:80:d4:
                    0a:6a:1b:64:2d:36:32:90:fd:fe:36:67:cf:ef:43:
                    6a:b3:a1:c8:b6:48:4b:b2:b1:b8:e6:27:0d:d0:49:
                    9d:2c:3b:a4:b7:e4:49:29:fd:ed:ef:fe:78:8f:93:
                    ea:fa:99:5e:d5:82:80:bd:0b:61:df:47:85:81:08:
                    b5:a4:70:1b:f7:6c:db:b6:e1:95:36:31:93:33:5a:
                    3d:6a:cd:3c:f6:3f:53:68:4e:98:b8:c9:b5:5a:b3:
                    b3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EC:D7:44:24:DB:8E:71:7C:99:23:47:F3:AF:1F:26:0E:45:24:38
            X509v3 Authority Key Identifier:
                keyid:56:D3:D4:34:73:6F:00:94:5B:C2:3E:F0:F2:0A:57:85:EB:27:1E:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5de7951af17313ff75f3239cc744c63f2ab25b0b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/733762e7-6c26-4327-bdfb-d505e6543210/facb1dfff2415898ba3177c8302a34b742af8fc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/733762e7-6c26-4327-bdfb-d505e6543210/5de7951af17313ff75f3239cc744c63f2ab25b0b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:86:8e:74:89:04:c4:b2:99:61:45:f4:b9:18:f9:80:7b:24:
         d1:be:5e:8d:67:69:9a:0e:aa:a4:13:93:54:67:ca:8c:44:c0:
         d0:56:aa:85:11:cd:f7:80:dc:17:d3:30:b5:51:aa:63:e7:eb:
         3b:3e:ec:f1:61:c6:2a:a8:a8:bb:9a:29:d6:a6:f5:9f:a4:32:
         47:46:e7:08:f0:1a:aa:54:80:97:5c:ae:2d:63:83:19:bd:62:
         7f:65:11:6b:b6:16:6a:40:ff:22:a8:a8:88:60:97:5a:c1:26:
         b0:a6:47:45:07:8e:38:d1:c3:2c:b6:b4:45:b6:33:58:88:cd:
         8d:5f:c1:4e:e8:4d:aa:35:10:ab:bf:a5:18:0d:4d:74:96:8f:
         10:a9:ed:3b:e2:44:88:ed:93:91:9d:48:98:9f:04:2d:71:22:
         67:86:2d:7f:9a:1c:22:33:dd:56:95:d4:96:97:35:76:ad:96:
         63:2b:43:74:68:82:72:79:90:fe:ce:e6:d3:03:9f:1f:ba:6c:
         86:f7:c7:24:81:cb:49:39:77:21:58:0c:f4:65:5b:c2:73:98:
         67:c1:7b:64:50:2d:17:9b:e3:69:5f:a9:8b:f5:2b:45:86:b7:
         3a:97:2c:c6:70:e7:61:51:07:95:fe:51:80:4a:fb:df:e3:b6:
         93:89:56:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----