Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/f86c2b5ac4119db64d485a5cb2a53b8dc9f8cf4f.roa
File:                     f86c2b5ac4119db64d485a5cb2a53b8dc9f8cf4f.roa (raw, json)
Hash identifier:          aDJFNo1FeLSkqIhB/zY4o5IFhBvTPg8qgJR5s4WBc10=
Subject key identifier:   31:30:09:83:3E:D2:10:14:9A:3B:B3:A0:33:53:58:D6:BA:6A:61:1F
Certificate issuer:       /CN=8cca422c9ff30980ab758c3310c2e40a2e836482
Certificate serial:       0E7742
Authority key identifier: 2A:0B:F2:11:DE:DB:46:2F:1C:7A:03:FA:E4:0C:91:34:F8:28:00:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cca422c9ff30980ab758c3310c2e40a2e836482.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/f86c2b5ac4119db64d485a5cb2a53b8dc9f8cf4f.roa
Signing time:             Fri 16 Apr 2021 16:44:11 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     265620
IP address blocks:        190.61.32.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 948034 (0xe7742)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cca422c9ff30980ab758c3310c2e40a2e836482
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=f86c2b5ac4119db64d485a5cb2a53b8dc9f8cf4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a9:cd:ee:e0:6f:86:ba:99:c9:6a:b9:bf:c1:
                    55:41:d7:f1:89:18:1b:c7:ac:5d:e6:73:12:a0:6f:
                    0f:64:bb:ce:2f:64:93:65:a1:73:c8:74:ef:05:da:
                    4a:45:b5:a2:eb:ad:c0:b9:04:b8:93:04:09:b7:fe:
                    ef:ba:a2:4b:02:f7:46:9e:f5:91:66:41:0f:3c:d6:
                    8f:3e:6e:b0:e0:b8:64:ea:0e:3d:e4:a2:38:ce:0b:
                    44:5c:5b:70:5f:32:90:31:12:c1:6c:43:57:3b:04:
                    77:71:e5:3e:be:54:ec:5a:bf:09:c9:28:5a:b9:f0:
                    cb:35:ab:3a:1c:a0:3b:05:2f:ab:ab:a5:59:72:3e:
                    32:a6:34:b4:c9:4e:f6:2e:e2:70:c8:b3:ee:3a:15:
                    fa:03:be:a0:72:02:ad:99:53:d3:6a:21:27:97:94:
                    30:57:79:4d:0d:6b:ac:70:98:f6:f4:80:02:50:ce:
                    74:b3:42:c5:93:be:41:71:5f:33:c0:63:56:fd:94:
                    b3:42:1f:be:04:a7:3c:19:8e:c2:d1:00:ba:d0:02:
                    ef:24:66:58:f7:de:65:e2:60:4b:81:3f:9f:5a:3d:
                    da:8f:61:b9:f4:bc:44:1d:f6:ff:3a:a0:c2:28:df:
                    33:2b:63:66:9c:7c:1f:3f:93:26:f5:92:7d:33:0d:
                    01:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:30:09:83:3E:D2:10:14:9A:3B:B3:A0:33:53:58:D6:BA:6A:61:1F
            X509v3 Authority Key Identifier:
                keyid:2A:0B:F2:11:DE:DB:46:2F:1C:7A:03:FA:E4:0C:91:34:F8:28:00:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cca422c9ff30980ab758c3310c2e40a2e836482.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/f86c2b5ac4119db64d485a5cb2a53b8dc9f8cf4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/8cca422c9ff30980ab758c3310c2e40a2e836482.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:da:b2:e5:e6:bb:54:fa:72:fc:ad:82:8a:b5:0a:73:ad:fd:
         de:18:90:14:3a:72:b0:ee:b9:25:e8:11:27:de:62:c0:80:6f:
         2a:da:a0:a7:ba:e8:52:23:7b:f4:bc:4b:4c:85:31:b8:be:33:
         68:b9:24:96:e6:90:7c:28:5d:83:b6:bb:fd:e9:fa:d7:5d:c3:
         cc:fd:9e:50:3a:fe:b1:f9:88:98:46:8c:e2:b9:d2:94:8f:10:
         36:0f:a5:09:a8:c5:1a:b7:ca:12:0a:2f:1a:dc:b1:08:12:f6:
         3f:aa:b0:c5:4a:4e:18:5f:a8:48:f5:9b:73:fa:1b:01:7a:e5:
         e6:b0:d9:39:0f:7d:8b:51:46:be:aa:62:37:96:b3:ee:e8:75:
         1e:dd:c3:a3:d3:85:2d:8a:94:ef:c7:d4:7f:39:d1:ea:35:aa:
         63:3e:18:1d:25:5f:1c:d1:d4:dc:28:73:e6:12:84:94:55:97:
         5c:17:34:eb:89:af:55:60:9e:0a:86:95:a6:91:da:65:8d:36:
         04:3d:0a:8d:31:c2:d6:30:53:8f:6e:c0:17:7e:73:77:b8:f8:
         0d:71:2e:22:1f:24:2c:0d:78:3e:f9:ab:cb:bb:48:02:cf:15:
         20:d6:bb:e4:9f:15:cd:3d:e6:e1:d8:f4:82:bf:87:ff:66:6b:
         7a:1e:60:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----