Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/5a42d3251c78bec8059d5e27b759e109e087a79c.roa
File:                     5a42d3251c78bec8059d5e27b759e109e087a79c.roa (raw, json)
Hash identifier:          UnQBLt05nUtA+h+sBgAjwTxwjuvN9iYrLgFkf78tmuQ=
Subject key identifier:   8E:DF:1F:D7:22:1C:84:C3:67:FA:33:D8:8A:A3:BF:C4:4E:20:40:CD
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0EC0A3
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/5a42d3251c78bec8059d5e27b759e109e087a79c.roa
Signing time:             Wed 24 Mar 2021 14:29:31 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     269752
IP address blocks:        181.16.170.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 966819 (0xec0a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=5a42d3251c78bec8059d5e27b759e109e087a79c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8b:d5:f4:fb:32:db:df:7c:99:34:1f:ca:39:
                    65:70:2e:96:74:5c:bb:38:58:35:2b:ab:b7:b6:c2:
                    04:a2:14:c6:7b:c3:95:aa:ca:1b:62:a0:bb:8e:3a:
                    71:ae:88:88:75:19:0b:69:fa:91:6b:05:31:b5:b3:
                    eb:15:fc:63:08:92:4c:bb:6b:79:b3:26:8c:81:23:
                    47:8c:2c:ef:3b:2a:66:0b:60:ec:ec:43:2b:f5:93:
                    f7:03:7f:6d:4a:cb:f8:85:47:ea:a6:4a:c6:aa:b1:
                    8e:6d:aa:c6:5d:0c:bb:4e:a5:0c:e5:c5:e4:3f:67:
                    fb:ef:ae:e4:32:aa:19:13:a1:a6:91:70:62:bc:01:
                    6e:01:8a:a8:9b:80:a4:8d:db:f2:fc:66:46:88:de:
                    91:67:80:dd:56:08:7d:c6:0c:33:0a:c3:3e:0c:92:
                    93:16:5a:67:3a:d0:bc:b2:6d:42:82:42:83:3f:f0:
                    fc:96:ae:b5:fa:de:2c:0f:e2:f7:70:72:37:55:b7:
                    55:3a:46:e2:65:fe:bd:e2:22:2e:b3:3c:a0:5d:c3:
                    48:a2:bb:f6:35:6c:2a:7a:a3:45:9d:d2:91:3e:66:
                    eb:ad:65:67:70:7e:64:19:7e:d4:e6:25:7b:ed:8b:
                    66:d9:6c:d7:a5:ce:5d:1c:91:ad:4d:3d:04:b7:9b:
                    04:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DF:1F:D7:22:1C:84:C3:67:FA:33:D8:8A:A3:BF:C4:4E:20:40:CD
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/5a42d3251c78bec8059d5e27b759e109e087a79c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:1b:2c:33:e6:1f:0d:3b:5c:ef:a3:e7:d5:90:a7:ba:13:27:
         7e:b9:97:56:78:da:f3:de:d9:c4:61:9b:d1:20:24:60:8a:e4:
         a8:d2:ae:42:e2:ba:58:64:06:eb:13:a0:9c:27:3f:82:9f:61:
         18:dc:e5:ea:99:72:79:bf:d5:f6:8d:c2:34:8c:19:55:c1:38:
         ad:81:e0:5c:f8:1b:79:45:53:3d:c7:bc:c2:82:f4:69:81:4e:
         d4:5e:3a:75:0e:63:d5:df:39:8f:16:96:74:95:c7:ff:51:99:
         5c:72:53:04:90:22:82:69:7e:b4:71:fd:79:07:38:33:a6:16:
         62:36:a5:e2:1f:3c:4e:85:fc:2a:87:92:46:20:0f:e0:52:55:
         26:22:76:24:61:1d:32:a0:b7:80:79:a7:ff:33:78:d8:58:02:
         2d:78:18:12:38:a7:d1:49:51:31:cd:db:eb:ed:2a:f5:87:47:
         28:47:d6:15:c2:92:bd:42:c3:98:4c:3a:2b:45:68:ea:2a:72:
         b4:81:3d:b7:3c:15:d3:7b:c9:5c:39:9c:ca:9c:9d:11:03:d0:
         45:ce:b3:4c:d4:9a:f1:62:75:84:e1:2d:d8:0a:52:b9:cd:8b:
         9c:cc:8b:fb:da:f0:09:7c:9b:f2:44:c3:8f:35:df:d1:81:ea:
         77:18:d7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----