Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/7c9118cf614fc60183ca555ee6387a6ced8fd698.roa
File:                     7c9118cf614fc60183ca555ee6387a6ced8fd698.roa (raw, json)
Hash identifier:          QA9FZWaQtlsO0yLp3Y8wQOpxOWtMREnExWyJc2nZrCU=
Subject key identifier:   29:8C:19:C4:68:13:4A:C2:D5:78:66:00:5D:ED:E4:84:FD:DF:ED:FD
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0E86B0
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/7c9118cf614fc60183ca555ee6387a6ced8fd698.roa
Signing time:             Wed 24 Mar 2021 14:29:29 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.236.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 951984 (0xe86b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=7c9118cf614fc60183ca555ee6387a6ced8fd698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ff:50:d4:39:9f:3b:48:13:2c:f9:93:04:79:
                    75:57:19:5e:1a:8b:59:d3:a1:01:24:1f:5d:1f:f2:
                    52:b9:69:9e:fe:93:32:4c:11:f8:95:de:38:54:01:
                    d8:73:99:92:1a:32:f5:0a:70:3b:c9:59:1d:f6:4e:
                    10:df:34:40:c9:70:b6:2c:cc:4f:d4:85:aa:bc:2f:
                    7e:93:4a:fd:de:38:ce:ed:d4:74:1c:51:51:e4:18:
                    86:fe:23:57:51:74:7a:ad:be:78:93:99:46:ac:1c:
                    74:4e:a9:82:d1:10:50:46:6b:5a:a4:f2:8d:cf:96:
                    b6:b8:a7:30:d6:ce:bd:5a:0f:12:28:08:99:12:aa:
                    74:15:9e:80:d9:a5:45:69:49:c9:05:94:28:40:b8:
                    e2:2b:a3:f2:7d:95:1d:c2:c4:24:f2:04:8a:cc:0b:
                    40:e4:02:b8:9a:1e:8c:9a:53:63:c1:52:22:84:d7:
                    8a:f6:65:aa:ef:70:4f:41:a3:7a:55:f2:c2:6b:5b:
                    46:79:ca:40:38:52:4c:5e:fe:a4:b9:0e:b8:6e:40:
                    bf:ca:8a:f3:cb:7c:27:34:0c:86:83:65:53:41:d1:
                    3e:e4:f2:85:e6:02:9f:9a:03:52:18:bd:04:ca:c1:
                    e2:04:fd:97:f8:2b:5b:d2:96:47:38:5f:c7:33:fa:
                    e8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8C:19:C4:68:13:4A:C2:D5:78:66:00:5D:ED:E4:84:FD:DF:ED:FD
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/7c9118cf614fc60183ca555ee6387a6ced8fd698.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:53:f1:6c:71:66:9c:62:84:98:61:2d:23:0b:7b:fe:ae:43:
         7c:0e:4f:93:f1:9d:89:7f:19:cd:78:fc:31:a5:e6:ac:85:99:
         1a:62:26:57:84:f2:70:a6:04:2d:0e:fb:54:15:33:50:fd:77:
         5c:ed:5e:4b:f5:5f:34:0a:d0:fe:2a:2a:72:e9:02:bf:21:89:
         eb:29:b1:be:3f:66:c6:3a:9f:cf:ce:7c:d0:46:48:d7:4c:80:
         d8:b6:14:6d:96:83:70:99:6a:4c:e5:bd:76:a0:fd:62:54:2f:
         f1:02:8f:8f:d3:ff:f5:ff:f7:18:8d:7f:4e:eb:87:ab:b1:d6:
         26:ef:5a:7b:d7:4f:4f:c4:51:9f:ca:ad:3d:ca:d5:e6:56:82:
         3a:b3:f4:04:cf:ad:1e:fd:b9:ad:a2:2c:74:3b:92:22:71:3f:
         a0:d1:df:36:dd:3a:35:b7:e8:9e:ff:f4:83:44:d7:7f:44:ab:
         15:fc:85:6d:63:f3:9d:4a:33:4e:7a:4a:ab:a4:b2:07:84:83:
         2e:c5:90:4d:de:b8:24:1d:8d:0b:2c:66:eb:7d:ee:34:03:b9:
         d3:cd:64:ac:b9:7b:0b:65:ca:55:eb:54:b2:23:7c:7e:f9:fc:
         4e:da:50:e5:5c:a5:95:3a:97:e8:df:09:ff:a2:c1:65:99:68:
         ca:7a:9a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----