Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/90ba2559809e89746933c3ac9c7cba4607e746ea.roa
File:                     90ba2559809e89746933c3ac9c7cba4607e746ea.roa (raw, json)
Hash identifier:          VjQOZWPVc3T6CHeseppKCwXmL5/oGvBDfhVBgmTvHjM=
Subject key identifier:   17:F1:A9:FD:2B:89:6E:D6:D4:85:69:4D:92:34:6B:57:2A:70:E6:B0
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0EEA69
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/90ba2559809e89746933c3ac9c7cba4607e746ea.roa
Signing time:             Wed 24 Mar 2021 14:29:31 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.204.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 977513 (0xeea69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=90ba2559809e89746933c3ac9c7cba4607e746ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ac:e5:93:ac:3c:4a:4b:9a:9f:03:1b:7c:a0:
                    61:48:69:81:06:50:62:a5:d9:25:99:f2:a2:3d:79:
                    f7:a1:8b:b0:20:bb:35:72:e8:4d:c8:78:d3:1c:ac:
                    43:ce:5d:86:ec:a3:b9:1b:c7:ee:31:49:c6:7f:40:
                    d6:e4:25:17:3f:21:48:85:45:32:bb:03:59:d4:63:
                    40:b7:6b:5f:ef:ea:f7:44:39:e7:6e:1e:a1:fa:d7:
                    53:71:d1:1b:b3:8d:b3:ab:dd:a3:90:74:dc:1e:89:
                    8d:64:46:d7:c3:1c:94:da:53:80:41:1e:bc:42:5c:
                    10:45:c3:fb:e4:ca:96:78:c3:54:f1:d7:71:7b:72:
                    0a:7e:a7:ee:90:c8:4f:82:4a:b9:70:5f:1a:ff:27:
                    a5:c1:72:b7:e6:82:46:60:39:2f:b3:61:a8:e4:cd:
                    8a:5f:64:8e:44:f0:1e:d5:f7:fb:6b:b9:f4:3a:8c:
                    dd:0e:e8:c7:40:5e:d2:bd:b4:0e:da:e1:27:5c:fc:
                    4c:38:d1:f0:2c:9d:23:05:25:e0:a7:c4:7f:d0:8f:
                    e0:54:a3:80:25:96:62:b4:c9:f9:81:d1:65:39:1c:
                    6b:ad:8f:62:b8:ba:53:ab:e3:8e:f0:b7:32:75:10:
                    82:fb:ac:0f:22:10:8f:43:ec:fd:ce:54:35:f9:47:
                    55:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F1:A9:FD:2B:89:6E:D6:D4:85:69:4D:92:34:6B:57:2A:70:E6:B0
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/90ba2559809e89746933c3ac9c7cba4607e746ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:52:c6:06:38:50:e5:e3:cf:a9:6a:8e:eb:93:f0:6e:2b:fe:
         00:89:7f:9f:6c:4a:d4:f7:70:45:16:10:3f:e7:13:66:21:f7:
         60:43:00:96:c7:1d:c7:fd:a7:6e:0e:17:61:14:2d:44:04:66:
         10:4c:18:ad:bf:b1:30:4f:c5:a4:4b:45:1c:82:57:15:62:60:
         e5:ef:e5:51:ec:f0:dd:37:7e:b5:a4:a9:95:5e:9e:ad:89:f5:
         60:74:4c:2e:c6:ab:b5:a0:bc:53:c9:3c:95:1a:08:fc:50:9b:
         7e:09:78:ac:12:aa:13:3f:63:09:37:96:de:a6:51:69:56:24:
         1c:99:3c:c6:37:41:53:7d:98:a6:ca:b0:50:96:bf:c4:63:f0:
         51:b5:f9:4d:ef:31:bf:dc:8f:80:88:78:fe:47:b7:98:60:67:
         51:cf:fa:a5:aa:f9:19:30:9b:d2:03:3d:eb:a2:5f:f8:68:4f:
         6c:72:9d:84:bc:7e:f6:5e:2f:72:f8:58:9a:4f:d4:bd:7f:ce:
         76:1c:88:2c:83:4c:ea:47:9f:1e:ba:eb:42:fe:73:9d:01:50:
         eb:3e:5b:36:24:e4:08:4f:f2:f9:f8:61:88:ed:e0:e9:c1:72:
         f8:de:dd:c3:27:51:d5:fe:85:61:76:23:c9:8c:51:af:f5:84:
         bc:45:3a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----