Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76f97e63-a1b1-4061-be85-e8b4c06ea00c/f676ef7e6b8fe59b1236bc16fc6a9df34939249e.roa
File:                     f676ef7e6b8fe59b1236bc16fc6a9df34939249e.roa (raw, json)
Hash identifier:          Bs3N3b0k+coxtz3RdD/Elj9qxPuw7EVGyD/oVxYdl2E=
Subject key identifier:   25:57:66:7E:C4:41:B2:F4:24:D2:A0:37:C1:0F:15:2A:CC:37:6E:81
Certificate issuer:       /CN=f10755e086c3f00dedf6589d23f8331bfccf8397
Certificate serial:       0DD31B
Authority key identifier: E8:E3:21:E4:E0:29:1A:C1:D4:7E:E0:CF:EA:40:A4:B5:13:DA:66:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f10755e086c3f00dedf6589d23f8331bfccf8397.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76f97e63-a1b1-4061-be85-e8b4c06ea00c/f676ef7e6b8fe59b1236bc16fc6a9df34939249e.roa
Signing time:             Wed 24 Mar 2021 22:49:56 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     27893
IP address blocks:        190.170.112.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906011 (0xdd31b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f10755e086c3f00dedf6589d23f8331bfccf8397
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=f676ef7e6b8fe59b1236bc16fc6a9df34939249e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c3:4c:45:4e:07:9a:17:99:20:65:c5:db:f3:
                    da:1f:9f:c3:64:95:9f:f1:75:97:71:29:71:1b:f5:
                    61:6e:59:5d:a0:7a:bd:27:ae:bc:db:fd:c1:24:87:
                    8f:50:20:f3:d2:06:f9:cd:1d:e7:c9:f9:d2:d7:4b:
                    30:94:e5:04:d2:22:49:a5:89:08:71:4e:c3:0d:87:
                    03:b6:d5:8a:69:35:65:9f:3b:87:23:cd:c0:68:8c:
                    30:66:de:f0:fa:cf:4d:94:2f:d2:04:12:5d:1f:66:
                    d6:ac:5a:7a:0f:8e:7e:ed:27:3a:9e:ac:5b:57:5f:
                    84:7b:8d:a4:94:fb:a2:6e:aa:a2:88:a4:7f:3b:2a:
                    7f:7f:94:d0:9e:d3:0f:3f:9e:ea:9d:53:3f:4f:7a:
                    d6:0c:35:ad:86:f2:c1:e3:83:24:3a:69:50:8e:e7:
                    87:45:1e:36:9b:9d:8c:86:a9:51:56:af:bf:74:50:
                    cc:d4:87:95:12:da:7f:52:0e:39:01:a0:d4:92:4a:
                    c2:f0:85:d1:a0:6d:4f:0a:42:c4:f4:bc:72:a5:2a:
                    07:d3:5d:76:0a:d5:9e:d0:ac:8b:8e:41:ad:e5:a2:
                    aa:eb:84:c5:33:9f:99:db:f1:18:09:f8:b1:13:de:
                    9d:b3:1e:e7:7e:c2:21:e5:25:5a:ff:e7:13:ec:53:
                    08:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:57:66:7E:C4:41:B2:F4:24:D2:A0:37:C1:0F:15:2A:CC:37:6E:81
            X509v3 Authority Key Identifier:
                keyid:E8:E3:21:E4:E0:29:1A:C1:D4:7E:E0:CF:EA:40:A4:B5:13:DA:66:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f10755e086c3f00dedf6589d23f8331bfccf8397.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76f97e63-a1b1-4061-be85-e8b4c06ea00c/f676ef7e6b8fe59b1236bc16fc6a9df34939249e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76f97e63-a1b1-4061-be85-e8b4c06ea00c/f10755e086c3f00dedf6589d23f8331bfccf8397.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1d:50:97:4e:c9:12:e5:09:04:76:e7:ac:71:ea:a7:97:14:73:
         85:dc:cf:03:15:24:03:c5:ad:c1:89:3e:f1:bb:c2:83:85:eb:
         9e:4d:15:0a:96:55:ad:dd:02:d4:41:ae:8e:dc:ff:8f:4c:ba:
         ba:a8:df:2f:77:84:35:2a:0e:72:13:47:dc:fd:08:93:15:07:
         c0:5c:e0:f0:27:ff:4e:ce:63:da:d5:ec:12:92:f7:64:09:08:
         86:c2:30:18:d7:ba:1b:67:6e:f6:72:10:4d:7f:54:45:8d:bb:
         f2:be:15:3f:89:ee:eb:ce:b4:31:1a:0b:1b:2a:af:cd:76:a1:
         cb:3d:d3:30:c4:2c:a9:1f:27:3b:7c:ff:89:5f:e0:5a:bd:87:
         96:ce:0c:3c:e3:ed:c1:9e:57:84:8b:8a:e7:be:44:50:ae:de:
         43:e2:00:c2:e8:5b:25:0a:8f:ce:84:97:3a:46:4a:8c:01:ca:
         a9:5c:d8:8d:de:8a:5d:69:f0:b0:0d:11:74:02:4d:a4:b1:7a:
         2c:d6:16:b9:e9:d7:00:8c:cd:28:12:0c:6a:20:63:95:0b:0b:
         5b:56:20:cf:32:0b:e9:31:40:d8:11:16:3f:55:44:63:79:50:
         fb:bd:c0:b7:81:48:28:e9:b8:99:89:91:ed:aa:1c:ff:32:fa:
         e8:fd:fb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----