Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/aba423c634048df75ec3318c470b989744490c59.roa
File:                     aba423c634048df75ec3318c470b989744490c59.roa (raw, json)
Hash identifier:          dQcznjaEqpVryASAYyucnUHq8PrkKjJe0ga0MgWbzcg=
Subject key identifier:   11:6F:30:16:CF:3C:34:B5:7C:7E:3C:02:A6:98:01:15:71:53:F1:BC
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0E8D63
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/aba423c634048df75ec3318c470b989744490c59.roa
Signing time:             Wed 24 Mar 2021 14:29:29 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.237.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 953699 (0xe8d63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=aba423c634048df75ec3318c470b989744490c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6e:16:37:96:0a:22:5e:17:8e:4c:a5:17:11:
                    92:58:64:34:9b:b8:ad:63:9d:c3:0f:85:7c:7f:1c:
                    1e:9b:c3:b1:9e:f3:0c:bf:e0:0a:cf:29:58:0e:1b:
                    fd:c1:64:15:27:4e:2a:4a:32:46:1a:c4:44:ff:97:
                    ac:22:4b:97:bb:62:d9:30:cf:42:0b:0d:86:a1:c6:
                    fb:be:81:8b:36:a1:df:e1:ed:c4:e9:6a:06:0a:93:
                    4c:fa:a9:5c:15:bc:67:99:fd:fe:c1:6d:fd:57:ef:
                    9a:e8:5a:36:28:3f:19:7a:a4:da:59:63:1a:dd:63:
                    f2:f7:d2:de:1f:fc:e3:84:ae:ac:bf:3f:72:e6:f1:
                    fe:38:8f:ee:36:1f:d5:f7:64:1f:7f:60:6e:c7:21:
                    c6:e7:0b:4e:42:16:54:95:81:59:d1:00:f3:46:0a:
                    d2:39:96:d0:5a:32:7f:c7:50:07:3c:86:d3:0e:7c:
                    df:5a:e0:6d:74:d7:7a:57:4d:83:bf:da:8e:0f:3a:
                    b7:0d:67:95:2a:c5:a3:6d:b2:d3:75:d5:45:0d:73:
                    49:d9:e4:6c:4c:50:e3:83:07:99:fb:c0:0e:6b:f1:
                    fe:00:db:11:70:8e:4c:27:d8:50:53:de:d3:1a:08:
                    ff:68:2d:73:9b:4c:23:82:a7:ca:35:2b:4e:64:69:
                    18:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6F:30:16:CF:3C:34:B5:7C:7E:3C:02:A6:98:01:15:71:53:F1:BC
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/aba423c634048df75ec3318c470b989744490c59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:95:8e:7c:15:a5:d7:2e:c9:e7:09:49:90:84:9d:5a:43:79:
         77:a6:da:c1:67:d8:11:37:e6:e8:04:ed:f5:5c:e4:87:f9:66:
         3f:f7:0a:e4:44:30:ec:91:2d:dc:ff:ca:f5:b5:aa:d8:f7:cc:
         7e:23:43:3c:d9:4a:22:da:e1:77:5a:7d:4e:ee:c1:5f:fb:c1:
         78:05:8d:a7:9c:95:80:97:4c:cd:63:66:ad:5a:c6:57:76:11:
         5c:61:41:57:6f:6e:46:15:57:18:18:82:f2:0e:16:7d:0a:dc:
         d1:d5:76:03:57:0c:5a:ff:69:80:d3:19:d5:e6:3e:c6:1e:54:
         1d:89:c0:2b:5f:fd:57:90:b4:29:a4:80:06:4d:16:9d:78:b8:
         50:87:13:60:bd:81:09:60:e7:a7:dc:c3:c9:bd:01:e0:ff:12:
         c4:10:a9:32:b4:e5:95:2a:91:9b:cb:df:fd:8c:7d:74:9d:ff:
         d0:6e:b0:d8:08:8d:dd:3a:3d:7a:8f:69:c1:d6:b0:2d:87:55:
         e5:a9:04:09:f8:f8:54:12:df:91:95:03:ac:d4:83:9a:e8:17:
         7c:c4:0c:94:db:d0:1d:2e:ee:cb:04:6e:4c:df:83:5c:9b:49:
         1c:93:a0:8b:6b:3b:51:31:6d:be:99:d4:f2:da:16:e4:d4:29:
         fc:a8:55:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----