Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/9579ddb5fa5c7fc311caaa89ffddc432baf38627.roa
File:                     9579ddb5fa5c7fc311caaa89ffddc432baf38627.roa (raw, json)
Hash identifier:          vJldA8zGJMuQnHZ3/Cti3kBloV7ITl0IH4X4KtQKt2g=
Subject key identifier:   9D:49:03:AC:65:37:BB:8C:EF:35:C2:E0:C6:66:80:0A:7B:C8:9E:3F
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       0E4918
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/9579ddb5fa5c7fc311caaa89ffddc432baf38627.roa
Signing time:             Wed 24 Mar 2021 14:39:08 +0000
ROA not before:           Wed 24 Mar 2021 14:39:07 +0000
ROA not after:            Tue 24 Mar 2026 14:39:07 +0000
asID:                     27841
IP address blocks:        190.15.128.0/20 maxlen: 24
                          2800:68:3::/48 maxlen: 48
                          2800:68:7::/48 maxlen: 48
                          2800:68:a::/48 maxlen: 48
                          2800:68:b::/48 maxlen: 48
                          2800:68:c::/48 maxlen: 48
                          2800:68:d::/48 maxlen: 48
                          2800:68:12::/48 maxlen: 48
                          2800:68:14::/48 maxlen: 48
                          2800:68:16::/48 maxlen: 48
                          2800:68:18::/48 maxlen: 48
                          2800:68:19::/48 maxlen: 48
                          2800:68:20::/48 maxlen: 48
                          2800:68::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 936216 (0xe4918)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Mar 24 14:39:07 2021 GMT
            Not After : Mar 24 14:39:07 2026 GMT
        Subject: CN=9579ddb5fa5c7fc311caaa89ffddc432baf38627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:05:8c:3d:53:69:be:14:a4:cf:f6:1c:d2:a8:
                    1c:b9:60:6a:f3:4a:cb:49:fa:58:b0:39:b4:7f:56:
                    ae:31:67:6c:de:10:4c:f9:c4:ab:eb:6c:c4:62:cb:
                    37:ed:88:4e:ef:91:1e:16:aa:dc:d4:8b:96:fd:72:
                    9b:24:e4:4f:50:0e:4d:54:1b:18:34:a5:4f:5c:45:
                    b0:f5:0e:8e:0b:43:d8:1c:0b:bc:8a:51:24:cb:c3:
                    9f:34:17:5c:67:9e:a3:3d:c0:74:e4:d6:49:82:b0:
                    a9:77:cb:f9:1b:c0:09:99:4c:13:8f:ae:67:0d:fd:
                    d1:0c:ee:b4:82:b9:c5:47:d8:91:48:29:32:f7:5a:
                    0c:c3:4a:af:d9:14:20:6c:d1:6a:ce:49:4e:3e:35:
                    f0:7c:d0:27:3a:93:90:f3:63:29:d1:6f:7b:57:d2:
                    7f:a1:9f:cf:28:97:2c:69:0a:9d:3c:5f:ef:f7:fb:
                    75:26:df:98:4d:f0:12:2c:fd:17:10:ba:3e:f2:3d:
                    44:16:41:a5:94:e8:a2:73:27:83:65:13:cb:f3:d4:
                    1b:e1:50:bf:00:64:46:c6:d9:d6:11:ad:b4:47:10:
                    c6:f7:f4:37:c9:d5:66:ed:bc:ed:4c:9e:04:04:77:
                    8e:7c:eb:fd:a2:08:94:92:a3:4e:14:ef:28:b7:c3:
                    89:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:49:03:AC:65:37:BB:8C:EF:35:C2:E0:C6:66:80:0A:7B:C8:9E:3F
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/9579ddb5fa5c7fc311caaa89ffddc432baf38627.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.128.0/20
                IPv6:
                  2800:68::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:9f:39:1f:bb:87:6a:4d:f7:fd:a7:15:e6:c7:bd:7f:43:e7:
         51:c4:66:20:0f:f1:d7:60:c3:5e:4a:bc:6d:82:9b:42:f0:e0:
         be:66:d8:80:b8:90:9a:b3:9d:fd:48:7a:83:af:e5:f2:2e:2a:
         79:81:05:6b:a9:3f:07:a7:de:ee:c3:41:52:9d:99:62:f6:98:
         b1:5f:46:9a:14:18:09:8a:f2:17:91:c3:d7:2b:ee:7b:f5:76:
         17:81:90:f9:43:4a:97:a8:a3:00:aa:dc:3d:7b:83:bb:59:5a:
         a4:c1:1f:ba:49:d7:8b:d9:0a:4c:8d:ea:d4:39:ce:91:61:f6:
         3b:38:c3:34:69:62:9e:fa:7e:c7:fd:54:c6:2c:db:ba:bc:65:
         47:38:80:a8:8a:fe:a7:53:0d:31:c7:18:d3:e4:92:9f:14:dd:
         1f:f1:df:ef:86:c8:0e:04:7c:0e:3c:55:f6:8a:c8:c1:12:cb:
         29:2e:45:e4:de:e0:b6:61:24:e3:e1:d3:04:75:94:26:60:1e:
         5b:47:7d:ae:60:8f:40:19:85:35:89:3a:b9:20:fc:6b:7c:7b:
         b5:5e:80:fa:c4:30:50:c7:95:99:f8:db:a2:2d:51:f8:7e:a4:
         87:a7:62:86:11:e6:55:a7:d3:ce:2a:6c:66:bb:3e:ff:cd:52:
         93:db:1e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----