Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/897dca2d-c59c-42f3-b81b-2d88c0b0b0d1/c31780e186b59afa5d82c1bd5423d68c3cc89aae.roa
File:                     c31780e186b59afa5d82c1bd5423d68c3cc89aae.roa (raw, json)
Hash identifier:          P8eZDN6qlgvoLx/MwtZwQv3/sa9c1Jj3TYbdg+rqBHc=
Subject key identifier:   FC:EF:D8:78:FC:CA:2C:DB:2F:72:3B:5C:4D:33:7F:45:51:FC:24:DC
Certificate issuer:       /CN=978e7d88424415725f3aaf2277c4a6e9a5313d10
Certificate serial:       0DB58C
Authority key identifier: BB:67:34:7A:28:A3:06:DC:6A:46:9A:2A:1B:BC:80:5B:A8:94:90:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/978e7d88424415725f3aaf2277c4a6e9a5313d10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/897dca2d-c59c-42f3-b81b-2d88c0b0b0d1/c31780e186b59afa5d82c1bd5423d68c3cc89aae.roa
Signing time:             Wed 24 Mar 2021 14:42:37 +0000
ROA not before:           Wed 24 Mar 2021 14:42:36 +0000
ROA not after:            Tue 24 Mar 2026 14:42:36 +0000
asID:                     263170
IP address blocks:        181.114.56.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898444 (0xdb58c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=978e7d88424415725f3aaf2277c4a6e9a5313d10
        Validity
            Not Before: Mar 24 14:42:36 2021 GMT
            Not After : Mar 24 14:42:36 2026 GMT
        Subject: CN=c31780e186b59afa5d82c1bd5423d68c3cc89aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:85:9b:20:7b:d6:e1:9f:05:c4:67:f3:66:e2:
                    e8:b3:f8:82:8e:4d:7f:55:3a:2c:bf:89:3d:7f:0d:
                    3c:dc:3a:8b:59:98:ad:e8:62:e0:1d:8e:f9:ce:6d:
                    60:26:6d:4c:cd:c1:aa:24:3c:a0:57:2f:db:c7:fa:
                    54:ff:8c:1d:3a:92:1f:6a:fc:e1:8c:44:8d:5c:25:
                    12:45:77:d9:e5:47:27:61:ae:df:49:26:8b:ef:fd:
                    74:1e:7c:2a:6e:19:5d:ca:ac:53:a4:e8:8f:8d:3a:
                    b2:e1:e3:de:e1:af:24:8b:c7:8f:70:46:04:43:ce:
                    dc:48:b5:93:64:f6:e2:e9:f9:9e:d8:b7:66:4c:fd:
                    22:90:bb:85:5e:3f:fc:1d:d5:d1:0a:4f:7b:7a:de:
                    0b:97:57:3c:0a:f0:7b:35:6c:14:f0:9a:f8:5b:c7:
                    6f:e2:1e:d8:81:9a:c1:0a:18:23:3e:6c:70:ec:3b:
                    b3:26:4c:47:c2:cc:1e:c0:e1:6b:80:c9:48:0d:0f:
                    f7:3f:b8:55:32:a7:ec:3e:bc:cc:9f:67:5b:3c:f1:
                    79:4b:0b:fc:d2:e0:ef:7d:fe:15:c2:11:c0:1c:a4:
                    51:a9:4a:e2:fd:15:60:b1:d8:96:a5:39:50:3a:40:
                    e0:5f:b7:14:b8:ac:2d:7b:dc:68:a5:d3:07:f3:8a:
                    58:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EF:D8:78:FC:CA:2C:DB:2F:72:3B:5C:4D:33:7F:45:51:FC:24:DC
            X509v3 Authority Key Identifier:
                keyid:BB:67:34:7A:28:A3:06:DC:6A:46:9A:2A:1B:BC:80:5B:A8:94:90:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/978e7d88424415725f3aaf2277c4a6e9a5313d10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/897dca2d-c59c-42f3-b81b-2d88c0b0b0d1/c31780e186b59afa5d82c1bd5423d68c3cc89aae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/897dca2d-c59c-42f3-b81b-2d88c0b0b0d1/978e7d88424415725f3aaf2277c4a6e9a5313d10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:fa:3a:14:00:73:98:89:86:e0:d9:f9:b3:85:aa:ac:0e:94:
         cc:76:8e:8f:81:bc:cd:e2:ed:71:96:f2:6c:46:36:42:6f:b8:
         66:25:f4:ee:5e:b1:18:a3:ff:75:85:30:90:0e:41:e6:9f:93:
         ff:ea:2c:e6:8e:ce:3a:80:e2:22:db:34:b6:8e:3b:9b:94:ca:
         9d:94:04:91:2c:40:85:38:25:0a:de:5b:0c:31:3d:eb:c1:10:
         44:86:f0:ac:77:04:55:f1:b5:18:e5:8d:d7:1e:41:1e:97:b2:
         52:ef:25:c5:f5:4f:7e:78:ea:08:d1:a5:c4:11:b2:bc:1a:08:
         6b:5e:4d:f9:4b:f0:99:60:f0:79:aa:83:74:15:e8:e4:75:c5:
         0b:18:bb:ba:8c:7e:3d:a6:54:0b:cd:42:65:d9:a9:32:36:48:
         04:ae:00:4a:ac:ee:19:f0:51:ca:24:27:b8:50:06:ed:77:93:
         54:c1:ea:a4:14:4c:71:07:5e:82:30:a6:d0:9d:95:86:4d:7a:
         25:90:3e:c1:c3:5a:7c:27:12:ff:72:8b:3b:31:5f:c1:22:06:
         2f:af:01:2c:e4:bb:ee:c1:9a:7c:45:be:5d:53:9b:f9:e5:8b:
         88:f5:04:ef:5f:be:8b:cb:9d:d8:08:2f:82:cc:ed:5f:2b:88:
         28:0f:bb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----