Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/873744a5-7f75-401a-bcce-4a77e8b7f4d8/ea86538c7d78b4e90b41caa6752f07d28c58fe4b.roa
File:                     ea86538c7d78b4e90b41caa6752f07d28c58fe4b.roa (raw, json)
Hash identifier:          oh/5Cj3zMi6FKrFVu3qLv+wu4jNn6ZcglVWALWJ1wDg=
Subject key identifier:   A9:51:85:AE:85:15:49:EE:EC:9C:7D:56:8C:65:7B:3B:8A:9E:7D:17
Certificate issuer:       /CN=764f53a9efe1db2fab97687005b125dfe130baea
Certificate serial:       04892E
Authority key identifier: 2F:62:61:05:27:11:8C:67:B3:D8:B3:FD:63:58:20:18:D3:9F:45:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/764f53a9efe1db2fab97687005b125dfe130baea.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/873744a5-7f75-401a-bcce-4a77e8b7f4d8/ea86538c7d78b4e90b41caa6752f07d28c58fe4b.roa
Signing time:             Wed 24 Mar 2021 14:41:07 +0000
ROA not before:           Wed 24 Mar 2021 14:41:07 +0000
ROA not after:            Tue 24 Mar 2026 14:41:07 +0000
asID:                     271785
IP address blocks:        177.184.92.0/22 maxlen: 22
                          2803:5fe0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297262 (0x4892e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764f53a9efe1db2fab97687005b125dfe130baea
        Validity
            Not Before: Mar 24 14:41:07 2021 GMT
            Not After : Mar 24 14:41:07 2026 GMT
        Subject: CN=ea86538c7d78b4e90b41caa6752f07d28c58fe4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ca:31:e0:58:f8:fc:19:79:7c:52:22:95:28:
                    ff:6a:53:b6:3a:14:38:03:af:9b:8e:53:c9:2c:f3:
                    96:43:95:bf:68:c1:fa:74:3d:55:b3:70:b5:41:b1:
                    01:09:f2:64:3f:7f:a1:f3:6d:b5:7a:98:64:31:c0:
                    0e:c7:55:c2:fb:ff:ce:12:47:0e:d4:a8:21:29:e6:
                    a2:59:de:69:f1:25:6f:d6:73:fb:67:e6:53:16:e1:
                    55:39:a4:92:a5:5e:ab:40:e4:60:16:a8:b6:c8:86:
                    68:b0:ec:60:2b:1a:f0:93:3a:0b:34:c2:3d:5b:12:
                    aa:28:4b:79:0b:48:f2:65:c3:40:61:fc:f5:5f:a2:
                    c9:2b:96:23:94:7f:f8:e0:46:af:e8:a1:15:dd:d9:
                    db:fc:7a:c1:58:98:e9:59:8e:9b:d9:e2:14:35:03:
                    8b:93:d8:da:32:8b:c5:14:1c:70:14:87:b1:3d:9c:
                    e9:0c:21:8e:b5:d1:28:7c:f1:16:cd:45:8e:c5:d9:
                    c2:fb:47:e4:5e:9e:84:07:55:94:4f:23:bc:52:fa:
                    e7:4d:57:c5:f9:fa:c4:60:d3:a6:48:3a:a1:fe:de:
                    82:4e:0b:4c:eb:d1:fd:fd:c8:4b:b5:fa:b7:96:34:
                    16:63:5c:a4:61:a4:b6:96:a9:f3:78:67:ed:bf:23:
                    26:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:51:85:AE:85:15:49:EE:EC:9C:7D:56:8C:65:7B:3B:8A:9E:7D:17
            X509v3 Authority Key Identifier:
                keyid:2F:62:61:05:27:11:8C:67:B3:D8:B3:FD:63:58:20:18:D3:9F:45:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/764f53a9efe1db2fab97687005b125dfe130baea.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/873744a5-7f75-401a-bcce-4a77e8b7f4d8/ea86538c7d78b4e90b41caa6752f07d28c58fe4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/873744a5-7f75-401a-bcce-4a77e8b7f4d8/764f53a9efe1db2fab97687005b125dfe130baea.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.92.0/22
                IPv6:
                  2803:5fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:5c:1b:e0:d9:1d:53:ab:b5:97:34:62:f9:42:05:44:5c:1a:
         a9:63:e2:e1:fd:d0:82:44:dc:ee:5e:27:e8:4f:6a:77:0b:b5:
         62:4e:cc:44:0e:ca:9d:d2:65:ac:48:ab:6f:77:6d:25:34:df:
         eb:50:67:18:83:a1:24:c6:84:29:92:34:2b:30:45:e2:e0:b7:
         23:b1:08:22:31:5f:ef:e0:e7:6c:3b:0f:64:a8:86:6e:f0:cc:
         44:0b:eb:54:23:11:16:d5:28:db:3f:93:56:30:e6:2f:7a:ab:
         86:c7:ad:04:e1:29:e4:04:86:50:b1:8f:99:7a:c5:e2:0e:9d:
         0b:ce:6d:ee:16:23:99:6a:88:c0:fd:a8:6e:4f:64:50:84:62:
         05:7a:6e:54:72:aa:42:ce:53:b7:94:0b:53:9d:a7:5f:c9:59:
         61:20:1e:fc:a6:fd:e4:bc:96:83:14:66:66:b9:5f:d7:7e:01:
         99:e2:72:16:41:c8:9d:b3:ff:e8:25:f3:60:53:17:8b:68:9d:
         2a:55:9a:7f:e9:77:d0:38:b0:6f:4e:77:e4:ab:78:b0:1d:41:
         a3:c6:6a:58:c6:b3:c4:e3:cb:77:17:ff:30:1e:e6:ef:92:2f:
         34:28:66:1e:4f:99:24:02:7c:2d:c7:17:ba:28:2a:9a:17:56:
         58:e2:f3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----