Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/66ded7210f8cde23a2b35b85328e0005faa4c4c7.roa
File:                     66ded7210f8cde23a2b35b85328e0005faa4c4c7.roa (raw, json)
Hash identifier:          jOvXwtunRziHq7W2JfLgFyVZODVVV2VFZ2Dg0S5s7QQ=
Subject key identifier:   A1:8B:9E:F6:50:D6:E5:2E:12:0C:0E:62:31:D6:9D:52:C3:77:2C:91
Certificate issuer:       /CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
Certificate serial:       11409E
Authority key identifier: 81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/66ded7210f8cde23a2b35b85328e0005faa4c4c7.roa
Signing time:             Thu 21 Oct 2021 15:11:56 +0000
ROA not before:           Thu 21 Oct 2021 03:00:00 +0000
ROA not after:            Fri 21 Oct 2022 03:00:00 +0000
asID:                     269862
IP address blocks:        168.194.171.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1130654 (0x11409e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
        Validity
            Not Before: Oct 21 03:00:00 2021 GMT
            Not After : Oct 21 03:00:00 2022 GMT
        Subject: CN=66ded7210f8cde23a2b35b85328e0005faa4c4c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:67:23:d0:c0:11:29:fd:63:ba:75:12:c3:5f:
                    1a:85:3b:38:e2:4f:1f:3f:50:b1:0f:29:7d:d6:41:
                    3f:30:70:2f:be:0c:71:d6:d2:a2:e1:c6:d6:46:20:
                    3c:b9:28:bf:24:4b:11:7b:6b:b0:90:a0:1f:52:e7:
                    a1:cc:46:24:e9:2d:5e:7f:d3:fd:67:c7:83:5d:30:
                    4d:65:51:82:6f:a1:61:5d:cd:99:07:61:2a:19:e4:
                    97:4c:d4:33:43:f9:c9:d1:14:ce:e4:b5:4a:88:15:
                    6a:38:a2:0a:dd:20:13:87:f2:c1:7e:b8:c5:50:79:
                    50:81:06:51:97:44:10:58:71:df:3c:e5:5d:20:7e:
                    df:36:aa:5b:dc:c9:5e:ed:b9:a5:a1:bf:82:15:b9:
                    65:71:db:34:95:a3:1e:55:76:bc:c1:32:79:17:65:
                    f2:0d:5a:8b:9a:9f:5e:f7:f7:1e:b7:12:cf:58:17:
                    51:84:fd:af:d2:d1:1b:23:14:f6:de:c5:d1:98:84:
                    e5:d2:54:5f:95:48:9b:91:07:1f:dc:f0:b9:f4:cd:
                    06:a0:9f:8d:4b:aa:c7:8b:9e:d2:19:38:68:0b:18:
                    34:0b:df:ea:74:31:c7:0f:f3:ec:a8:46:fd:fc:20:
                    f1:f7:23:e7:9f:47:1c:f9:fb:64:18:22:d6:57:d2:
                    86:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8B:9E:F6:50:D6:E5:2E:12:0C:0E:62:31:D6:9D:52:C3:77:2C:91
            X509v3 Authority Key Identifier:
                keyid:81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/66ded7210f8cde23a2b35b85328e0005faa4c4c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:7d:20:e8:5e:14:70:37:1f:36:17:f4:9f:2b:26:a1:5a:33:
         17:f0:e8:56:7c:1a:73:06:6d:d2:dc:bd:50:c6:3c:68:5c:40:
         b7:f8:95:ba:8c:e2:bf:45:8f:04:fa:8a:1f:71:5c:63:5f:6e:
         e7:ca:b6:f6:8b:95:d3:85:33:ce:2e:66:9e:fd:b2:38:6f:ca:
         8a:76:54:01:2e:81:cd:d2:d0:9b:91:54:21:31:1c:88:2c:29:
         2b:c9:41:ef:cf:5f:ec:d4:13:cf:d6:9a:18:cc:c7:57:4f:75:
         b4:38:16:56:ea:b7:2d:36:6f:15:72:8d:50:12:f2:65:6e:e6:
         67:b9:e5:64:72:8b:e5:85:ab:83:f7:ca:bf:9f:9a:ba:ed:14:
         cb:f8:d8:f3:10:93:8d:22:55:cd:2f:1f:39:64:3d:0a:98:ac:
         3c:85:1b:16:34:d5:3f:8b:a6:87:cc:c3:42:d7:6a:ec:9c:dc:
         2a:78:65:34:c4:b4:a0:e6:6b:d8:e0:cd:cd:aa:6e:ca:44:6b:
         ec:41:c3:a4:65:a7:eb:46:0c:73:65:7a:5f:4d:94:24:f8:29:
         61:33:ff:0a:41:18:d2:a1:e4:54:e6:03:b0:d3:46:a6:a8:fe:
         bd:41:0b:20:d0:42:69:74:64:fc:b8:9d:06:e0:4d:3e:fd:de:
         e7:7a:6c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----