Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/a7fe3a8dd505439734a39602d2756ab36bdd741b.roa
File:                     a7fe3a8dd505439734a39602d2756ab36bdd741b.roa (raw, json)
Hash identifier:          qC+cfQ3JC/Xrb9rxQQUjNLRgU9ZxrEkBQYSjgpF/qkw=
Subject key identifier:   72:1E:B9:5D:CE:E7:33:51:CE:27:1F:E9:A8:13:12:C9:C5:20:9F:6A
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0EB2B6
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/a7fe3a8dd505439734a39602d2756ab36bdd741b.roa
Signing time:             Wed 24 Mar 2021 14:29:30 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.255.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 963254 (0xeb2b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=a7fe3a8dd505439734a39602d2756ab36bdd741b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0f:76:3e:84:2a:b1:df:cc:55:3e:d8:1e:4e:
                    93:e2:14:b6:96:ac:da:83:10:af:a3:73:5e:7c:69:
                    9e:48:65:72:a4:db:dc:30:a6:7e:9c:5e:fa:bd:f0:
                    c0:14:3c:3a:5a:f6:4d:83:76:40:26:8e:3a:68:2a:
                    5c:e3:77:5f:67:5b:12:69:b7:86:14:c7:1a:c2:9e:
                    a6:b4:d3:1e:dd:72:d2:27:90:2a:fa:ca:98:48:32:
                    d8:1b:d4:cc:5b:e1:07:b9:d1:a7:d2:ab:3e:11:ca:
                    b1:ae:f6:92:b2:9b:6f:b2:91:b9:39:2d:19:a7:33:
                    8f:85:14:62:c8:e2:06:8d:1c:ab:a8:b7:42:81:14:
                    50:04:d0:dc:37:ac:ca:46:f8:1d:da:25:3a:f3:dd:
                    74:80:10:7d:a9:68:58:49:a8:a7:8a:fc:99:88:e3:
                    f1:45:1c:04:ad:e2:55:55:7c:3e:dc:e1:47:bb:45:
                    4b:48:3a:76:99:97:bd:19:17:95:a1:39:4f:c6:95:
                    28:7f:c1:12:0e:27:29:5b:98:d2:45:1f:bd:23:4f:
                    44:99:87:74:1b:e4:32:d4:b2:2d:08:62:4c:b3:0a:
                    4b:eb:08:fb:04:6a:37:f8:1a:cb:12:a4:28:02:6e:
                    35:a8:11:d2:84:3e:84:ba:57:e1:b4:79:72:5d:e4:
                    b9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:1E:B9:5D:CE:E7:33:51:CE:27:1F:E9:A8:13:12:C9:C5:20:9F:6A
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/a7fe3a8dd505439734a39602d2756ab36bdd741b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:56:f0:4e:f4:c1:b9:84:dd:7f:69:16:25:53:70:b8:b2:cc:
         1f:6b:34:52:56:53:09:23:e3:2e:c3:e7:e6:73:60:ec:f8:21:
         eb:ba:e0:fd:c2:11:cd:4b:6b:62:2c:1f:56:e8:37:be:4d:50:
         f3:28:4c:48:aa:b0:87:2d:3a:1e:a0:cf:71:49:52:12:61:5c:
         d7:0c:8f:89:af:b3:84:a2:d1:44:81:35:5e:9a:93:ed:81:02:
         c3:79:a3:78:35:0a:80:5b:39:d9:db:60:14:df:81:6b:73:bc:
         8c:0e:69:86:8c:c1:4d:a5:00:93:60:c3:78:8b:77:35:e8:af:
         fe:75:27:7a:9b:4e:88:ea:ee:38:5a:e6:f6:05:c6:d9:bd:63:
         7e:66:06:38:35:5e:c1:cd:93:bc:91:93:15:2c:74:c8:ac:28:
         e5:56:41:3f:e1:4d:ef:b3:99:3b:38:7b:d4:a0:53:a1:a3:52:
         62:cb:88:5d:34:88:9f:8a:8b:d0:be:6b:ce:56:74:0a:31:6b:
         9f:5f:93:03:2b:c2:b0:5d:09:e4:30:a7:89:5e:02:fb:77:51:
         a6:8d:97:1e:ed:62:47:ee:a8:6f:99:08:13:a9:6f:d9:e8:35:
         62:6b:c4:07:0b:13:4b:7d:3c:ed:13:ad:1a:70:88:68:96:56:
         67:9c:42:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----