Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/cbb1985f9c6f6a4a4e949fe0e12d472de2a878fb.roa
File:                     cbb1985f9c6f6a4a4e949fe0e12d472de2a878fb.roa (raw, json)
Hash identifier:          l10sc95kml3mNVavlfupfPZH9O5ZXUsdXiYHFBjk54E=
Subject key identifier:   57:CE:5C:9A:5D:13:A5:1F:68:7B:E9:B9:C2:44:20:50:B0:0C:46:DE
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       14DAF5
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/cbb1985f9c6f6a4a4e949fe0e12d472de2a878fb.roa
Signing time:             Tue 23 Nov 2021 15:26:52 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     52323
IP address blocks:        181.16.224.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1366773 (0x14daf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=cbb1985f9c6f6a4a4e949fe0e12d472de2a878fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:37:83:dd:34:84:27:fa:1a:8d:0c:c6:f9:cd:
                    06:87:49:42:c4:9a:2b:3f:2c:aa:25:0a:6b:78:de:
                    a8:62:3a:c8:f8:23:0b:17:80:2c:a8:67:5e:1a:43:
                    3e:c0:da:a5:de:bc:20:e5:ee:1d:43:05:c0:f4:a8:
                    04:17:4a:80:5a:20:7f:0c:03:97:91:69:a5:13:14:
                    c1:c9:b1:4c:8c:dc:16:05:94:cc:57:51:29:e7:25:
                    2c:3b:d0:e0:1a:32:30:5f:98:1a:9f:6f:75:11:f7:
                    ef:6a:58:8e:ad:99:a1:35:87:0c:b6:43:92:80:0b:
                    d8:81:53:f2:82:af:19:c2:04:4e:42:cd:25:f3:00:
                    3a:f2:cd:59:53:86:64:56:92:eb:07:20:b9:4e:45:
                    27:13:1d:2a:6d:38:2b:5b:85:ed:98:65:0d:64:5a:
                    ce:94:f9:e1:c9:22:0f:9a:26:18:21:7a:be:e3:16:
                    b2:21:ad:62:e6:2c:a6:75:42:15:5c:ce:40:46:b6:
                    aa:18:93:83:06:b9:fe:19:a8:ef:5e:e5:09:c5:8f:
                    96:f8:a3:d3:89:74:b2:20:71:03:66:14:39:c7:a2:
                    3b:56:df:79:8d:21:74:a4:da:7a:9f:07:41:e4:f9:
                    f6:d1:23:fe:bd:e5:23:3e:b7:fa:3e:a0:6b:b4:e8:
                    f1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CE:5C:9A:5D:13:A5:1F:68:7B:E9:B9:C2:44:20:50:B0:0C:46:DE
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/cbb1985f9c6f6a4a4e949fe0e12d472de2a878fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:37:2b:46:f7:08:f2:99:74:77:d8:03:52:09:3a:a9:ce:99:
         b6:98:dd:1c:60:cf:e4:20:b7:11:d0:fa:4e:99:be:70:f3:3b:
         87:7f:e1:e3:86:46:28:67:2a:ba:6f:68:17:c0:99:9d:08:fa:
         2d:d8:cd:31:e9:7e:f7:65:a2:94:6c:13:26:34:08:e8:11:2e:
         42:a8:1b:f7:63:94:89:54:e7:b5:9e:1d:42:98:ed:89:1c:f8:
         69:86:24:4f:7f:25:0a:66:ce:87:e4:4a:e6:23:f6:43:ae:9e:
         15:d9:a4:5e:7f:bd:c5:88:f0:be:2b:f0:21:d6:e3:5c:3e:a4:
         ef:dc:7b:90:bd:61:7d:28:ca:1d:05:4a:a1:1c:e8:94:0e:d2:
         c7:2e:ad:a3:a6:f1:f5:7e:05:1a:49:5b:b0:09:7d:33:d7:4d:
         82:18:8f:6d:14:c8:b1:5e:62:7e:a4:ba:ac:54:cd:d4:7a:2c:
         99:6b:53:2a:c1:56:af:5d:a8:4b:c0:ca:01:29:bc:59:3b:51:
         71:e5:f3:a5:df:eb:78:75:98:19:64:cc:d1:8b:7c:bd:dc:fe:
         fe:c3:ca:c7:79:b4:9f:4b:a0:2e:d6:af:85:a9:41:ff:b5:7b:
         f8:ca:c7:68:ab:93:15:45:e8:0a:62:38:66:20:43:94:5b:c4:
         04:39:86:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----