Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/b3936de44b93a22b6b79e78dd86d294adcc801ce.roa
File:                     b3936de44b93a22b6b79e78dd86d294adcc801ce.roa (raw, json)
Hash identifier:          82zhqiVS3JRrEV+DO6FQ0a2j5KcNzyort6vTETP9vlU=
Subject key identifier:   17:4B:26:7D:C7:F7:E4:71:1B:86:FD:F2:D0:58:12:3B:58:56:EE:1B
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       0E489E
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/b3936de44b93a22b6b79e78dd86d294adcc801ce.roa
Signing time:             Wed 24 Mar 2021 14:39:08 +0000
ROA not before:           Wed 24 Mar 2021 14:39:07 +0000
ROA not after:            Tue 24 Mar 2026 14:39:07 +0000
asID:                     22724
IP address blocks:        190.15.139.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 936094 (0xe489e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Mar 24 14:39:07 2021 GMT
            Not After : Mar 24 14:39:07 2026 GMT
        Subject: CN=b3936de44b93a22b6b79e78dd86d294adcc801ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ee:ea:4c:4b:3c:08:ff:c9:92:0b:5c:5b:74:
                    3c:bd:3c:74:95:2d:0f:aa:d2:4b:06:23:dd:a1:9f:
                    e1:f1:65:45:31:98:e8:b2:97:08:77:77:5c:03:c5:
                    80:2a:00:71:c4:03:97:14:fd:10:61:62:99:6c:36:
                    8c:fa:49:24:65:10:0d:56:da:97:ce:90:a2:2f:9b:
                    0f:28:7e:2a:f0:9e:09:99:fa:4a:43:62:58:c1:74:
                    8d:32:8b:e2:1e:fa:4d:4a:14:72:e3:49:ef:60:02:
                    2c:2e:26:32:2a:39:c6:b6:3a:c6:cf:06:82:e1:e7:
                    d8:8a:12:7c:f7:aa:e8:30:82:05:f1:04:d9:ad:0f:
                    44:01:36:84:47:7e:e0:6f:70:54:8d:e0:d6:92:ba:
                    36:67:7f:25:28:50:04:c8:08:87:7e:92:a2:c0:b6:
                    91:dc:7a:d0:76:06:dd:db:04:f0:92:9c:76:49:ea:
                    e7:c5:57:57:a0:10:7a:98:06:48:ac:23:6a:bb:39:
                    38:02:ae:d3:77:38:a3:20:f3:e2:74:b7:7a:05:2a:
                    67:bf:f2:30:2f:24:e4:b4:f5:a3:3e:2f:21:24:1d:
                    2d:0a:e6:8a:3f:98:c3:c6:a4:83:f3:e1:67:00:8b:
                    0c:1c:fb:23:f9:e5:21:a7:d2:49:be:eb:ac:eb:ba:
                    e7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4B:26:7D:C7:F7:E4:71:1B:86:FD:F2:D0:58:12:3B:58:56:EE:1B
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/b3936de44b93a22b6b79e78dd86d294adcc801ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:1d:26:f3:b4:7a:69:94:d6:2f:55:6a:0a:b1:72:7e:b4:da:
         b6:6c:f6:48:ba:cc:2a:14:93:f3:26:49:3e:b1:ef:5e:d4:c5:
         d1:27:ae:7d:d6:2a:1a:86:8a:4f:d7:88:0c:c6:7d:7c:cb:4a:
         71:ff:08:83:36:75:e6:9e:72:8c:40:49:c1:0c:c2:4a:4e:02:
         f8:4f:cd:0e:9a:dd:10:ce:c2:af:4c:10:e1:23:73:9a:88:21:
         d2:51:5f:e4:8d:6a:4f:1c:02:99:41:30:8a:4c:bf:91:fa:c0:
         81:49:3d:bf:c0:05:35:77:2a:7f:c0:eb:d8:95:17:0d:01:7c:
         dc:78:a6:0f:bb:94:b7:a5:25:c3:22:ea:b4:b4:58:59:a4:82:
         f9:0e:f9:7a:b2:f4:d9:1a:e9:36:2b:d7:c6:30:5e:ad:9f:ad:
         59:a6:fa:06:55:74:af:b5:4a:bd:13:d8:5b:c5:a8:10:8d:b9:
         9a:24:b5:c3:46:1b:2f:74:6c:3d:b1:3d:74:53:84:6a:5d:c8:
         42:43:53:e4:4b:7c:cd:9c:dc:b0:bf:8f:47:66:1c:36:db:40:
         fa:30:ce:39:01:50:24:b3:01:6c:1c:af:b7:be:e4:9e:86:c0:
         e8:da:9f:32:8a:e5:07:de:e0:90:f4:ef:e2:b2:13:e3:9d:49:
         a7:fc:58:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----