Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93ea0964-70a6-4adb-807f-1c251a091570/2611fd8b03889cad2c596bf0e43b3d9b5f2c07b4.roa
File:                     2611fd8b03889cad2c596bf0e43b3d9b5f2c07b4.roa (raw, json)
Hash identifier:          joqHUT7W+m6ul9Z+OP17jhvuQ2a/tVxyFOgtf2/frxk=
Subject key identifier:   6B:4D:8C:46:6B:41:18:DD:4B:65:65:23:20:07:70:63:D4:D5:E0:CF
Certificate issuer:       /CN=6930ea902e7534388d28d0e3ac75b7e3026edd6c
Certificate serial:       0D9A66
Authority key identifier: 00:AF:5D:8C:2B:F3:24:E0:01:53:6B:43:3D:55:C6:2E:41:22:ED:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6930ea902e7534388d28d0e3ac75b7e3026edd6c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93ea0964-70a6-4adb-807f-1c251a091570/2611fd8b03889cad2c596bf0e43b3d9b5f2c07b4.roa
Signing time:             Wed 24 Mar 2021 14:32:56 +0000
ROA not before:           Wed 24 Mar 2021 14:32:56 +0000
ROA not after:            Tue 24 Mar 2026 14:32:56 +0000
asID:                     6568
IP address blocks:        200.87.0.0/17 maxlen: 24
                          200.87.128.0/17 maxlen: 24
                          190.129.0.0/17 maxlen: 24
                          190.129.128.0/17 maxlen: 24
                          168.205.96.0/22 maxlen: 22
                          181.115.128.0/17 maxlen: 24
                          2800:cd0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 891494 (0xd9a66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6930ea902e7534388d28d0e3ac75b7e3026edd6c
        Validity
            Not Before: Mar 24 14:32:56 2021 GMT
            Not After : Mar 24 14:32:56 2026 GMT
        Subject: CN=2611fd8b03889cad2c596bf0e43b3d9b5f2c07b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9e:97:a1:89:e4:45:98:49:70:c2:52:c1:81:
                    e5:b3:4b:7b:5b:0a:6e:d9:dc:b2:d4:45:42:14:7b:
                    6f:15:e9:ca:d5:4a:e3:cd:79:f5:ec:5b:97:35:d5:
                    7e:59:66:9e:a1:8f:d2:22:d3:4c:45:ba:b1:78:0e:
                    6d:c9:cb:75:f8:6c:ab:d3:9b:96:47:bd:b3:a2:66:
                    0e:45:c3:16:9e:cc:7b:1c:33:22:c7:d2:3d:8f:83:
                    cc:22:3d:54:f3:2e:f7:9b:36:ec:11:b0:04:b5:57:
                    e3:d0:29:bf:19:9c:37:08:a2:f3:f3:1c:b7:74:25:
                    81:2d:37:d1:db:60:02:8d:46:d2:aa:3e:cd:a9:14:
                    08:fc:c1:31:6b:b1:1e:52:c6:b2:8a:40:c7:e7:63:
                    fb:29:06:36:95:a6:91:e5:63:f5:1b:aa:8b:cc:92:
                    35:90:d2:67:52:51:9c:5c:25:23:3e:0d:57:7c:a4:
                    a8:37:e4:f7:0d:0d:78:f5:49:dc:bb:f2:fd:0b:23:
                    ed:cb:ff:20:c2:f1:cc:91:5a:43:57:c5:0f:7b:ba:
                    8d:38:bc:a3:59:e1:97:39:8d:a1:80:fe:f6:00:b3:
                    64:8c:e9:75:a4:51:7f:d2:a7:d6:be:a4:d5:68:f9:
                    e6:74:06:a6:69:2e:31:a1:85:83:d5:9d:eb:c2:be:
                    ae:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4D:8C:46:6B:41:18:DD:4B:65:65:23:20:07:70:63:D4:D5:E0:CF
            X509v3 Authority Key Identifier:
                keyid:00:AF:5D:8C:2B:F3:24:E0:01:53:6B:43:3D:55:C6:2E:41:22:ED:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6930ea902e7534388d28d0e3ac75b7e3026edd6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93ea0964-70a6-4adb-807f-1c251a091570/2611fd8b03889cad2c596bf0e43b3d9b5f2c07b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93ea0964-70a6-4adb-807f-1c251a091570/6930ea902e7534388d28d0e3ac75b7e3026edd6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.96.0/22
                  181.115.128.0/17
                  190.129.0.0/16
                  200.87.0.0/16
                IPv6:
                  2800:cd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:8b:33:e5:8c:4e:f1:e5:de:03:09:91:6c:b5:49:f2:fa:c5:
         c8:c7:f7:b5:5e:60:dc:88:55:67:10:e7:8c:5e:c8:20:8b:ce:
         45:67:e6:08:c6:34:38:06:c6:de:9f:85:0f:9a:4d:7f:ed:dd:
         7c:a9:40:71:00:d2:5a:27:99:88:7e:7a:f7:03:3a:23:85:e2:
         5b:bc:26:f6:76:f1:af:8f:99:30:d7:f7:95:db:85:dd:6d:4d:
         47:92:c1:ac:05:e9:c5:64:69:c9:ab:1f:cc:ce:c9:dd:f5:7d:
         28:2c:68:fc:30:18:cb:14:96:2b:88:74:c2:ef:97:51:46:a7:
         e5:56:71:d7:80:ab:5b:b8:80:ee:d3:68:2e:26:55:75:bd:f3:
         ec:46:12:44:c9:a5:16:38:c6:5b:f4:de:24:4b:53:88:05:a2:
         77:17:53:05:10:d2:9b:0c:fd:9f:f5:60:f5:be:a9:74:ec:b3:
         b6:2c:a5:1b:c1:ed:b1:cd:5b:91:a1:48:3a:3f:11:1e:a9:df:
         ea:85:bc:ec:8f:eb:5a:dd:15:64:a3:45:d5:75:36:19:94:86:
         84:69:fb:c9:46:5a:91:9b:57:7f:e9:b0:d3:1d:4a:c5:f4:a7:
         0a:7c:69:b5:95:66:5a:c9:db:5c:16:20:15:a7:66:1b:60:12:
         1b:39:d6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----