Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8986d229-fbfc-47e9-833c-d0ec2647d14b/6ce0cd251bc90e57d1f5a2b9010168cd911c3b4b.roa
File:                     6ce0cd251bc90e57d1f5a2b9010168cd911c3b4b.roa (raw, json)
Hash identifier:          Y1jCgM+KRy8q5ETTQee5BPt3567hosF4CKr7xf2TGT0=
Subject key identifier:   9F:EB:61:8B:F2:EE:22:DC:27:6C:A9:E9:8B:82:75:BB:EF:2A:B7:D6
Certificate issuer:       /CN=8b3409d23417b7ed5b171c186d6bc0e2b8b69dae
Certificate serial:       0CCC0C
Authority key identifier: D2:4A:DE:42:D5:78:F2:8F:9B:25:EA:F2:5A:80:27:9F:BF:D8:0C:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b3409d23417b7ed5b171c186d6bc0e2b8b69dae.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8986d229-fbfc-47e9-833c-d0ec2647d14b/6ce0cd251bc90e57d1f5a2b9010168cd911c3b4b.roa
Signing time:             Wed 24 Mar 2021 14:32:03 +0000
ROA not before:           Wed 24 Mar 2021 14:32:03 +0000
ROA not after:            Tue 24 Mar 2026 14:32:03 +0000
asID:                     27983
IP address blocks:        45.161.180.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 838668 (0xccc0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b3409d23417b7ed5b171c186d6bc0e2b8b69dae
        Validity
            Not Before: Mar 24 14:32:03 2021 GMT
            Not After : Mar 24 14:32:03 2026 GMT
        Subject: CN=6ce0cd251bc90e57d1f5a2b9010168cd911c3b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:87:ca:34:7f:e7:d1:e2:2b:17:07:1f:c0:d2:
                    79:bb:4f:87:dd:6b:10:7b:6c:98:fc:c4:20:1b:f5:
                    32:a4:39:b8:41:85:98:2f:50:db:7a:84:66:70:5d:
                    8e:0a:99:b4:54:97:c0:0f:97:5d:37:f5:33:5d:08:
                    a4:ad:9e:41:99:12:5e:c5:53:73:2c:e6:68:69:8f:
                    c7:a1:50:7a:5a:8a:de:dc:e0:e0:12:a2:ef:a6:39:
                    4b:44:e3:07:c5:e9:31:6f:18:1c:3a:d2:2d:24:56:
                    09:33:39:9c:39:90:93:a9:6e:13:7d:e0:6b:64:90:
                    8c:60:f7:8f:78:9c:3c:96:0c:a0:ed:41:9c:a3:83:
                    91:cd:dc:80:d7:ca:08:b1:20:99:13:cb:fb:43:48:
                    7f:55:95:b2:3d:eb:fe:e5:bb:40:f3:e8:6e:a5:f4:
                    41:7f:0a:c2:78:8a:f2:17:ca:0f:61:37:de:38:37:
                    bd:99:e7:03:3b:de:72:ef:9d:5d:2f:6c:20:1d:07:
                    a6:d4:db:fb:4e:fc:f8:7d:40:8e:7c:78:43:22:f5:
                    34:f9:2f:08:2f:69:99:84:cb:77:2c:f8:08:ee:df:
                    fc:7e:75:63:9b:e1:73:16:78:2e:a7:67:c5:0d:31:
                    19:9e:e5:40:b4:34:1c:a8:30:26:d5:88:44:3b:4a:
                    32:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EB:61:8B:F2:EE:22:DC:27:6C:A9:E9:8B:82:75:BB:EF:2A:B7:D6
            X509v3 Authority Key Identifier:
                keyid:D2:4A:DE:42:D5:78:F2:8F:9B:25:EA:F2:5A:80:27:9F:BF:D8:0C:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b3409d23417b7ed5b171c186d6bc0e2b8b69dae.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8986d229-fbfc-47e9-833c-d0ec2647d14b/6ce0cd251bc90e57d1f5a2b9010168cd911c3b4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8986d229-fbfc-47e9-833c-d0ec2647d14b/8b3409d23417b7ed5b171c186d6bc0e2b8b69dae.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:71:fb:cc:f0:c2:20:23:1b:0e:cc:40:ed:f7:ef:da:b2:bc:
         f7:47:73:f3:3e:84:60:95:a8:bb:78:fe:ea:57:d4:6e:92:5a:
         2a:08:55:b3:9d:10:d0:0f:a8:6f:a5:58:44:1b:79:71:1f:f1:
         90:43:38:d7:d3:37:2c:36:ac:d6:9c:da:21:f5:6a:bb:3c:d6:
         6d:af:85:ab:17:f8:66:40:3f:2b:6a:a8:b8:02:42:a0:4d:28:
         0e:1c:5f:39:4b:58:85:dd:2d:a9:f3:ea:ba:00:df:80:b1:4e:
         c2:5b:cd:2a:9c:0c:e3:b2:71:52:0e:1b:ca:05:ac:c8:02:41:
         8d:fe:3e:c6:e1:1e:25:41:27:28:5b:ec:3e:e2:4d:fe:f2:30:
         d5:47:2e:17:1e:3b:88:9d:cc:f7:19:1f:a1:0e:0b:34:02:e5:
         10:01:d4:e1:a1:55:e9:80:ca:c5:63:94:2e:7a:77:3c:c4:51:
         c1:fa:0e:22:88:2a:95:85:06:a6:e2:90:ae:73:ee:fe:44:ec:
         5d:21:13:82:39:a1:d5:7b:f4:45:13:f0:89:fd:45:29:49:65:
         33:d3:97:d5:91:4b:05:c0:ff:f0:c4:d0:09:3d:09:aa:55:1b:
         65:49:0b:7e:10:cc:9d:65:af:0a:e7:86:5d:c8:a7:c6:86:e7:
         86:a4:ae:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----