Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/378eb47ca7758747cf321251f6cac648532011e0.roa
File:                     378eb47ca7758747cf321251f6cac648532011e0.roa (raw, json)
Hash identifier:          b7a5BiF/jIMlndEkCyxcDJ399vekX9DiFBtYFZPM1Ew=
Subject key identifier:   89:4D:96:44:E8:A9:81:5F:BE:AE:6E:67:67:4E:03:F1:3B:A5:0C:84
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0EACEC
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/378eb47ca7758747cf321251f6cac648532011e0.roa
Signing time:             Wed 24 Mar 2021 14:29:30 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     269752
IP address blocks:        181.16.207.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 961772 (0xeacec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=378eb47ca7758747cf321251f6cac648532011e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b7:f5:b9:b7:0c:8b:ef:93:61:c2:70:31:83:
                    87:1c:9a:fc:d2:99:0b:90:1d:6f:43:5d:92:c5:45:
                    f7:8a:5e:83:da:af:09:75:6e:af:34:80:53:de:c2:
                    1d:30:59:2e:f7:6c:6b:0e:7e:d5:14:3b:92:a7:54:
                    f3:fc:72:68:9a:d2:8c:46:65:45:60:d7:dd:1e:01:
                    60:51:d3:dd:d2:fd:44:8b:59:c6:52:71:9b:c4:ed:
                    3d:5a:04:d6:6d:69:ea:11:36:9e:02:e5:11:98:c9:
                    12:47:c0:c9:e8:16:fd:20:1a:92:21:78:93:57:69:
                    63:90:ec:56:52:37:25:7d:88:76:03:23:93:a4:1e:
                    4d:1d:7d:0f:57:16:17:3e:0c:cb:d7:a8:83:a6:5c:
                    aa:75:67:2c:40:d4:07:11:0f:72:8a:ac:fb:7d:ee:
                    9b:1d:b8:cf:65:e8:3c:3a:f5:e5:f5:5e:af:36:3c:
                    dc:37:dd:2d:07:87:59:43:55:98:0d:a8:5e:78:93:
                    b1:f2:03:35:3f:11:fe:fb:60:96:2d:e5:d0:2a:60:
                    dc:36:72:76:50:fa:8b:73:2b:06:36:60:fb:45:f6:
                    49:04:d0:36:4b:d2:a1:ad:c8:f4:f2:b4:d9:93:83:
                    47:25:95:3d:73:4d:a4:df:6f:03:9d:81:37:44:25:
                    6d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4D:96:44:E8:A9:81:5F:BE:AE:6E:67:67:4E:03:F1:3B:A5:0C:84
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/378eb47ca7758747cf321251f6cac648532011e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:e3:b5:69:5e:70:2a:32:e3:1a:06:e7:24:55:02:3a:9f:54:
         74:38:8a:aa:5a:ff:d2:be:7a:06:27:e2:f5:07:ae:bd:87:37:
         1f:ca:3a:95:73:d4:93:5a:84:81:6f:3f:da:de:c6:30:42:83:
         39:12:35:ed:77:69:09:c3:f3:52:0e:9c:73:b7:9b:62:30:1f:
         97:4e:9c:49:95:28:f0:77:25:6b:cf:77:e9:02:5b:58:4f:43:
         c4:6f:2d:54:d3:1b:fb:1a:38:b4:a4:26:96:2e:4a:5b:ce:89:
         34:66:70:d4:40:d0:83:c0:2a:52:7a:d2:e0:4c:40:59:a6:eb:
         38:55:0d:8d:55:d9:aa:3e:77:82:36:0e:d0:ab:78:b9:6b:29:
         22:bd:4a:3f:d2:8a:86:97:05:00:4e:b9:d1:dd:67:3e:50:d8:
         31:08:9d:11:f3:40:bd:29:b5:57:b1:00:a4:3d:80:ec:d1:2d:
         88:d1:0e:2e:b1:38:49:fe:42:4d:70:63:ae:ed:97:fd:23:d0:
         e7:56:17:17:71:7d:5d:18:10:6d:fe:13:da:62:8c:2b:d4:38:
         00:f0:48:15:cc:b7:b7:e5:32:35:67:5e:07:62:c4:7c:06:60:
         85:76:9b:e3:6b:fd:5d:61:43:c8:c2:1d:db:46:8d:63:fb:17:
         6b:23:74:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----