Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/af6cd0d4ba6c9fb3a023a5f78de85597fff4022d.roa
File:                     af6cd0d4ba6c9fb3a023a5f78de85597fff4022d.roa (raw, json)
Hash identifier:          tNEnPoGsKReRdaFDRgKyjnQ8EJCRA/uXIYP+1tFssk4=
Subject key identifier:   C4:15:5D:59:94:7B:15:00:38:95:39:51:23:85:6F:4A:9A:96:86:B2
Certificate issuer:       /CN=8cca422c9ff30980ab758c3310c2e40a2e836482
Certificate serial:       0DD1C3
Authority key identifier: 2A:0B:F2:11:DE:DB:46:2F:1C:7A:03:FA:E4:0C:91:34:F8:28:00:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cca422c9ff30980ab758c3310c2e40a2e836482.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/af6cd0d4ba6c9fb3a023a5f78de85597fff4022d.roa
Signing time:             Wed 24 Mar 2021 14:36:29 +0000
ROA not before:           Wed 24 Mar 2021 14:36:26 +0000
ROA not after:            Tue 24 Mar 2026 14:36:26 +0000
asID:                     52468
IP address blocks:        190.61.49.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905667 (0xdd1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cca422c9ff30980ab758c3310c2e40a2e836482
        Validity
            Not Before: Mar 24 14:36:26 2021 GMT
            Not After : Mar 24 14:36:26 2026 GMT
        Subject: CN=af6cd0d4ba6c9fb3a023a5f78de85597fff4022d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:12:a6:57:26:7d:c1:a4:55:75:ab:e9:55:
                    9f:91:05:15:90:c2:bb:5f:fc:5c:0f:77:90:cd:de:
                    e1:c2:8e:35:ad:9f:80:1b:26:b0:d0:da:0d:44:24:
                    c5:ef:43:a6:45:c1:72:35:99:88:f4:3b:01:00:ac:
                    3e:1f:cc:a2:b4:07:8f:79:57:04:da:7f:b1:50:d1:
                    13:fa:25:c3:09:95:78:5a:08:6f:e2:e9:ed:c3:95:
                    98:27:77:35:1f:c5:bd:f0:7e:65:fc:2a:25:be:93:
                    69:27:7b:2f:da:40:88:53:0d:27:0e:dd:1d:bf:86:
                    45:78:4e:4e:1f:6c:f2:3a:99:c7:e1:f2:03:8c:89:
                    42:d6:f6:14:7d:f8:7b:0a:22:0b:a3:09:76:33:b8:
                    de:30:b2:09:4c:ac:22:40:c1:d1:2e:f4:36:8a:42:
                    7c:88:00:29:9e:64:43:96:f6:2d:91:61:65:21:03:
                    b4:d7:19:43:d6:c2:df:cb:33:21:d2:c6:b0:d1:fc:
                    6b:6a:e8:1d:1c:d3:02:e5:98:48:62:c3:37:9b:1e:
                    64:4d:b7:79:95:28:da:70:ad:ce:fe:50:92:ed:d0:
                    8e:30:c0:5f:d0:d3:0a:68:7a:67:ed:75:68:ca:5c:
                    16:e0:f0:0a:8e:4e:c7:07:08:a7:43:a3:a6:43:7f:
                    69:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:15:5D:59:94:7B:15:00:38:95:39:51:23:85:6F:4A:9A:96:86:B2
            X509v3 Authority Key Identifier:
                keyid:2A:0B:F2:11:DE:DB:46:2F:1C:7A:03:FA:E4:0C:91:34:F8:28:00:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cca422c9ff30980ab758c3310c2e40a2e836482.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/af6cd0d4ba6c9fb3a023a5f78de85597fff4022d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/8cca422c9ff30980ab758c3310c2e40a2e836482.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:8a:18:17:aa:81:21:d2:35:24:f8:8b:2b:4e:98:cc:fd:a4:
         78:26:da:a2:d9:94:15:e4:99:d2:25:4b:8d:ce:37:1c:46:14:
         02:bd:d9:85:47:c8:81:dd:e5:67:10:46:b6:82:fd:21:d8:63:
         3b:ba:d7:94:7a:87:9a:c9:a6:eb:42:ea:e7:01:60:d0:9a:55:
         a9:ff:2f:42:15:83:83:c9:9a:b8:b8:59:70:d4:a1:d7:41:98:
         ba:d5:a5:86:de:7f:b5:70:1a:ba:d1:20:ca:38:c5:09:58:aa:
         2e:12:77:f1:b5:de:fc:46:8e:32:33:b9:90:f1:91:91:c0:89:
         30:0d:1f:d4:bb:90:94:09:6b:13:d1:d6:47:50:73:9b:0b:a4:
         f4:e1:5b:2a:f8:fd:4a:21:1c:65:25:63:cf:f7:70:0a:88:c0:
         4b:ea:66:d4:83:cb:39:c1:7b:69:a9:bb:d1:6b:9e:97:17:ef:
         80:86:af:7f:e0:73:7b:3c:58:80:5b:bf:c2:43:33:32:e9:f0:
         a3:67:55:2e:e9:c7:1f:9a:04:3a:9a:6b:fc:54:9a:f7:d1:c7:
         b4:f8:94:09:05:af:38:55:58:be:2f:bf:ee:e6:09:84:49:fb:
         f2:19:62:27:28:ae:93:6e:77:be:c5:87:f5:4f:2f:d8:0b:97:
         e2:7f:89:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----