Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/115f77eb6b0d0dabfed4bf1999a715d771473006.roa
File:                     115f77eb6b0d0dabfed4bf1999a715d771473006.roa (raw, json)
Hash identifier:          nJX+bj71ape0SY/QyJ+fuMqzrO3bDKotRk4biYvr2qo=
Subject key identifier:   8D:DC:3E:D1:B4:BD:1E:51:E0:08:0C:81:ED:CA:99:E0:27:63:E8:87
Certificate issuer:       /CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
Certificate serial:       1283E6
Authority key identifier: 81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/115f77eb6b0d0dabfed4bf1999a715d771473006.roa
Signing time:             Tue 14 Dec 2021 23:49:28 +0000
ROA not before:           Tue 14 Dec 2021 03:00:00 +0000
ROA not after:            Wed 14 Dec 2022 03:00:00 +0000
asID:                     269862
IP address blocks:        168.194.168.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1213414 (0x1283e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
        Validity
            Not Before: Dec 14 03:00:00 2021 GMT
            Not After : Dec 14 03:00:00 2022 GMT
        Subject: CN=115f77eb6b0d0dabfed4bf1999a715d771473006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e3:a6:b9:1e:26:46:e9:18:c6:38:13:a3:4b:
                    4b:3a:80:f1:67:b6:da:2e:83:02:86:78:82:34:f3:
                    a5:32:c4:b0:9e:38:db:23:28:65:70:93:6c:0e:46:
                    e7:f6:25:dc:b6:a9:13:42:2a:24:4a:1a:ab:99:58:
                    c5:29:de:65:67:a5:08:ac:84:d4:a2:6d:97:41:2c:
                    d5:7f:07:3a:82:c2:15:55:c6:c2:8f:b5:8e:ce:71:
                    dd:3a:e4:aa:24:8c:c4:0c:26:f0:97:bd:5e:a2:7b:
                    b5:b4:ce:54:86:bf:f9:9f:7b:43:da:f4:90:eb:ad:
                    f9:0c:a1:a7:ee:56:25:b6:2e:80:8e:02:14:37:a4:
                    93:d0:d9:ec:7b:52:f9:2e:91:fb:d7:a3:50:c2:90:
                    a7:7a:0e:22:1f:7a:07:cc:30:1c:d5:00:a8:c5:b3:
                    d1:9a:f3:81:f1:3d:0f:52:93:c1:f8:ff:81:f3:cb:
                    71:b4:b4:99:8c:dd:b4:33:58:e3:6f:ff:40:c5:a0:
                    44:34:08:52:1b:56:2a:2d:b9:95:7a:ba:cf:9d:8f:
                    bb:72:54:19:51:b7:50:ba:96:2e:6b:b8:a3:0c:d0:
                    bc:9a:76:49:cd:83:89:e5:66:85:80:97:73:69:95:
                    53:6c:06:cd:33:33:f6:0e:92:31:3a:48:7b:1c:cc:
                    83:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DC:3E:D1:B4:BD:1E:51:E0:08:0C:81:ED:CA:99:E0:27:63:E8:87
            X509v3 Authority Key Identifier:
                keyid:81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/115f77eb6b0d0dabfed4bf1999a715d771473006.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:e0:da:38:1d:f3:d5:89:37:66:7c:8c:e1:8a:31:31:db:d3:
         b9:bd:82:0c:4f:9f:b7:ba:81:a0:bf:68:d4:a6:78:b4:47:14:
         8a:fb:6f:25:3b:36:f8:a6:5c:99:ae:58:91:0b:96:27:4c:51:
         11:25:eb:59:7c:06:28:c7:00:22:5f:e3:a7:5f:39:17:ce:2a:
         f5:cc:f1:60:fb:72:75:e9:06:47:7f:63:27:93:ea:63:c6:31:
         4e:e0:ab:40:3c:d2:9d:36:5e:8d:fd:43:3b:7d:cb:db:2c:72:
         5f:20:4e:3f:0e:8c:b6:62:46:00:0c:87:76:50:65:a8:8a:b6:
         56:bd:be:6d:31:62:3d:c0:a3:7d:f0:ca:97:a2:2e:81:3e:1c:
         9a:9a:52:08:fc:f8:a6:43:73:74:1b:b8:9f:81:ec:70:69:5e:
         e4:0e:0e:c0:96:25:ae:ba:b1:28:2f:25:43:0b:6e:e0:3d:a0:
         5b:e1:2d:4b:cf:a4:cc:4b:9e:69:05:ca:08:f1:ab:ad:20:a7:
         b3:f0:9b:86:f5:0f:80:46:b2:48:9f:42:c4:72:30:fe:fd:07:
         79:70:45:0a:2b:11:97:b7:2c:f8:94:71:a1:cc:a5:99:f0:3e:
         f6:83:28:59:94:d7:cd:0f:3c:ab:6b:49:d4:1e:cd:e5:5f:0c:
         79:5a:5a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----