Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/5a15d1c7c775a8758654231274a7af441398720d.roa
File:                     5a15d1c7c775a8758654231274a7af441398720d.roa (raw, json)
Hash identifier:          Kub3eBse32g7I3BWfBczTT8CZfSwPa5XPn/qJXzrl64=
Subject key identifier:   72:EE:C5:E4:FB:73:21:40:1B:AA:A4:57:A7:45:26:4E:B1:AE:F3:5C
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0EBA07
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/5a15d1c7c775a8758654231274a7af441398720d.roa
Signing time:             Wed 24 Mar 2021 14:29:30 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.173.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 965127 (0xeba07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=5a15d1c7c775a8758654231274a7af441398720d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:51:c6:20:40:c4:06:4b:97:08:27:73:d9:56:
                    d6:cd:90:0b:03:6d:90:1f:ed:6d:88:f0:5e:26:cd:
                    18:c1:d1:89:78:b9:8c:5c:f2:35:2b:b9:3f:2e:e8:
                    a9:e0:98:bc:c5:b2:86:7b:f3:08:ed:73:8c:8d:b2:
                    ad:90:aa:0b:b9:c3:3d:fd:0c:e5:04:a8:d3:b1:20:
                    58:c0:76:1a:50:46:6c:a3:c6:c7:be:47:cf:64:13:
                    27:1e:28:aa:3c:6f:f0:64:81:30:45:42:13:b1:b7:
                    d0:c4:75:82:b8:31:6a:c0:ff:a6:d4:23:b5:18:c3:
                    e9:f9:51:54:65:8a:f8:cb:e7:1a:6b:0c:a6:d4:6e:
                    b2:b4:f7:d4:e4:00:8e:0f:8a:2d:9d:1d:3a:00:55:
                    3a:0a:96:37:92:47:11:35:42:d2:1a:99:96:cc:35:
                    1f:53:6d:32:2e:fc:6d:1b:ac:b0:7c:d8:65:5e:70:
                    eb:3a:87:05:0f:45:93:bb:03:ea:43:66:34:9d:77:
                    d0:d1:bb:ea:81:c9:89:52:50:db:dc:8e:71:2c:49:
                    86:46:a9:8a:95:4e:b4:f7:a2:a5:64:c7:d0:90:79:
                    8f:e2:60:cb:44:72:2a:25:df:73:ed:f7:ca:d9:4e:
                    8f:3a:4d:58:20:3c:b3:5a:11:8f:5e:70:08:3e:e0:
                    5e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EE:C5:E4:FB:73:21:40:1B:AA:A4:57:A7:45:26:4E:B1:AE:F3:5C
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/5a15d1c7c775a8758654231274a7af441398720d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:55:0f:d3:1d:57:b5:bb:02:e5:68:9b:a9:03:72:df:b8:87:
         b7:71:e5:42:14:4a:28:0b:bc:17:30:c0:a2:73:5d:e0:7f:4c:
         0b:a2:f7:8d:db:13:e1:d1:d7:42:11:f7:f9:f4:22:97:97:d7:
         16:e5:c5:a2:b0:25:b1:a2:3d:0b:99:27:63:46:54:5e:6d:e0:
         6d:cd:44:37:a7:45:83:ce:9c:82:28:55:ab:63:80:bc:c5:4f:
         c2:8a:77:92:55:6c:aa:86:67:f7:a3:7c:58:01:f7:fb:54:3e:
         f8:9e:65:6a:04:be:c7:70:41:a2:44:4a:42:66:8a:d2:22:96:
         a1:58:a6:1f:b9:3d:09:cd:b5:57:24:74:1d:1c:ed:7b:a6:b5:
         d4:5c:69:80:d0:8a:26:8d:0c:38:5a:4a:81:6f:fc:0b:88:26:
         1b:37:fb:ac:27:71:99:4a:77:b4:1c:67:d5:18:9e:93:7d:ae:
         5d:41:b5:ff:9a:e5:a9:87:c8:8e:47:c7:b7:9a:45:60:98:62:
         24:e7:ce:d0:9a:8a:f1:ed:84:ad:b8:86:49:3e:55:cd:36:98:
         84:dc:c4:eb:68:cf:6b:e0:69:38:3f:b6:ba:d2:d0:e6:98:6c:
         2c:d0:14:3a:bf:5e:ac:e4:7e:38:a1:4a:a0:7b:c0:7e:ad:8c:
         41:7c:93:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----