Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96453540-fd50-46c4-95b3-f9f7d67f9f9f/fe6c8424d02f95e14ae042b6373e28a4e80fba1d.roa
File:                     fe6c8424d02f95e14ae042b6373e28a4e80fba1d.roa (raw, json)
Hash identifier:          MGBmAAafAfjGo+7b/j2MdMhUWfuG9DS4gdlf3PNCwqc=
Subject key identifier:   3C:16:25:E0:D3:C1:41:81:84:3F:5B:E1:2C:9A:59:E1:3A:66:CF:60
Certificate issuer:       /CN=0188a1fa54e685e6dab16384784db802887cbc4f
Certificate serial:       0D6702
Authority key identifier: 8F:89:29:75:DA:D6:CC:A7:A6:48:69:18:80:6E:38:6B:88:24:B0:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0188a1fa54e685e6dab16384784db802887cbc4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/96453540-fd50-46c4-95b3-f9f7d67f9f9f/fe6c8424d02f95e14ae042b6373e28a4e80fba1d.roa
Signing time:             Wed 24 Mar 2021 14:35:08 +0000
ROA not before:           Wed 24 Mar 2021 14:35:08 +0000
ROA not after:            Tue 24 Mar 2026 14:35:08 +0000
asID:                     10299
IP address blocks:        131.108.168.0/22 maxlen: 24
                          138.122.200.0/22 maxlen: 24
                          168.227.0.0/22 maxlen: 24
                          170.81.24.0/22 maxlen: 24
                          186.27.128.0/17 maxlen: 24
                          190.1.192.0/18 maxlen: 24
                          190.99.128.0/17 maxlen: 24
                          200.29.96.0/19 maxlen: 24
                          2800:950::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878338 (0xd6702)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0188a1fa54e685e6dab16384784db802887cbc4f
        Validity
            Not Before: Mar 24 14:35:08 2021 GMT
            Not After : Mar 24 14:35:08 2026 GMT
        Subject: CN=fe6c8424d02f95e14ae042b6373e28a4e80fba1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b0:73:23:cb:d0:ad:63:e2:b3:58:a2:f9:19:
                    0b:24:49:52:b1:c4:51:a0:69:d3:87:0f:26:60:fc:
                    3c:57:fc:c2:d9:c8:00:6b:53:43:9e:20:c4:5b:9d:
                    f6:e2:57:6a:3d:cb:28:39:e4:95:3b:c2:09:cd:b0:
                    1d:fb:01:de:dc:10:65:a2:97:ae:d0:94:fa:e5:cc:
                    dd:77:16:a4:8d:df:7a:91:9e:fa:62:00:0c:a4:ef:
                    63:20:ef:2b:ba:6d:6e:4b:95:d9:12:34:6b:a2:25:
                    11:e1:25:21:20:71:94:88:22:b4:b6:72:1e:9a:b3:
                    75:4c:62:d0:ee:3b:ce:13:cf:a3:a4:0b:44:19:b0:
                    cb:b8:96:6d:53:07:02:17:6a:c3:f8:4b:7f:d5:f6:
                    70:8a:b7:0e:36:d5:71:cf:22:f4:34:7d:93:50:8f:
                    d1:b1:2a:90:31:fa:6e:4c:58:31:47:ce:5f:db:88:
                    2f:7c:a5:f0:b3:80:f8:65:33:19:23:f2:9d:60:37:
                    77:0b:56:8a:8e:28:d2:12:cf:7d:0f:67:0e:11:7a:
                    58:fc:ff:52:2b:f8:03:95:39:89:3b:81:fd:08:3f:
                    be:96:5d:cd:7d:c4:5b:4b:03:81:b5:7a:ab:84:68:
                    a5:67:69:72:94:c8:31:7e:9d:06:59:d6:d9:75:35:
                    bf:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:16:25:E0:D3:C1:41:81:84:3F:5B:E1:2C:9A:59:E1:3A:66:CF:60
            X509v3 Authority Key Identifier:
                keyid:8F:89:29:75:DA:D6:CC:A7:A6:48:69:18:80:6E:38:6B:88:24:B0:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0188a1fa54e685e6dab16384784db802887cbc4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96453540-fd50-46c4-95b3-f9f7d67f9f9f/fe6c8424d02f95e14ae042b6373e28a4e80fba1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/96453540-fd50-46c4-95b3-f9f7d67f9f9f/0188a1fa54e685e6dab16384784db802887cbc4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.168.0/22
                  138.122.200.0/22
                  168.227.0.0/22
                  170.81.24.0/22
                  186.27.128.0/17
                  190.1.192.0/18
                  190.99.128.0/17
                  200.29.96.0/19
                IPv6:
                  2800:950::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:74:90:68:8b:8a:00:f7:70:e3:c5:fb:f4:30:dc:1b:56:81:
         27:c7:be:b2:fc:48:93:9c:31:39:f3:ae:da:9a:f5:44:0d:17:
         11:24:d8:69:3a:2a:fb:99:95:4f:42:8f:8d:1a:79:ab:cc:58:
         0c:b7:9c:4f:96:c6:26:71:64:89:e9:67:f3:80:ab:eb:bf:b3:
         05:32:ab:2e:04:e9:7b:43:35:6f:fc:2a:63:e3:d0:3d:e9:78:
         96:56:e8:f5:a0:86:31:21:97:61:46:7a:2c:37:39:db:ae:f3:
         c2:d9:ea:a3:6d:ef:3f:cb:56:60:d2:3c:66:43:2e:5b:3b:d9:
         73:3c:6f:05:9a:c3:21:96:77:06:0c:3a:a6:79:3a:ef:87:57:
         a2:c3:97:82:46:e8:28:52:07:42:2b:b3:e2:ed:b4:06:20:5a:
         5f:63:47:64:d6:7d:bf:d0:ac:9a:4d:a3:4e:0f:99:6a:53:ed:
         bf:87:25:5b:16:aa:4b:a5:6c:c2:34:c3:e3:5a:69:4c:79:bc:
         3a:ec:d9:f1:73:d1:ef:7a:a6:82:89:78:ce:aa:67:1c:4b:e9:
         dd:ee:a5:f4:ee:84:d3:80:b6:a4:c2:0f:49:20:cb:99:3e:9a:
         bb:84:f9:57:eb:e2:cd:4d:7a:16:64:2c:b5:04:47:2b:a2:42:
         03:f3:11:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----