Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/a9c23a10ffdaa0dc91e7bdd4c75b520d4752c744.roa
File:                     a9c23a10ffdaa0dc91e7bdd4c75b520d4752c744.roa (raw, json)
Hash identifier:          OAe2ulRUwGHvSTlexhSdxc1QtwGlTAKemMjaxf2N1LQ=
Subject key identifier:   79:FE:51:26:21:B5:DE:38:7B:A6:FA:29:69:4A:E9:9A:0A:C1:FE:F3
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       1093B1
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/a9c23a10ffdaa0dc91e7bdd4c75b520d4752c744.roa
Signing time:             Mon 18 Oct 2021 19:22:32 +0000
ROA not before:           Mon 18 Oct 2021 03:00:00 +0000
ROA not after:            Wed 18 Oct 2023 03:00:00 +0000
asID:                     269862
IP address blocks:        138.99.179.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1086385 (0x1093b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: Oct 18 03:00:00 2021 GMT
            Not After : Oct 18 03:00:00 2023 GMT
        Subject: CN=a9c23a10ffdaa0dc91e7bdd4c75b520d4752c744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:72:ba:67:99:74:a7:60:22:53:bb:d0:51:51:
                    13:c8:f4:8e:e5:f2:d0:ce:ab:66:73:64:80:55:f2:
                    9c:7b:78:e3:ba:c0:61:87:e2:c9:01:c3:84:62:c8:
                    c0:0c:ae:aa:fd:79:b8:c9:01:30:25:a5:86:bd:48:
                    a0:b1:a6:25:b7:78:e0:e4:4c:08:42:e3:97:5b:c1:
                    25:41:a2:2a:74:17:86:76:b7:2c:7e:c9:7b:1e:e3:
                    03:76:f0:b0:7d:da:33:63:8c:d1:35:de:d6:46:19:
                    02:40:a6:6e:24:67:a3:f8:83:5a:cc:0e:b8:16:f3:
                    00:18:d7:e0:d5:f3:5c:0a:12:a3:6d:de:f6:b5:57:
                    51:2a:d7:27:ae:09:ff:aa:bd:f2:17:fc:aa:4b:93:
                    33:d1:ca:8c:67:f4:d9:35:ec:d0:94:24:c0:8c:7f:
                    29:e1:36:44:fb:c6:16:28:3c:6b:6f:54:ee:69:3f:
                    74:d1:0c:fa:04:74:d6:a5:2c:fd:01:a8:ef:1b:43:
                    77:c1:72:8f:32:f6:aa:36:a7:07:f6:00:6c:93:9f:
                    b0:79:ef:74:9e:2d:e9:d9:69:f7:17:28:03:7f:cb:
                    61:91:96:d7:09:60:e3:ab:60:88:15:dd:ef:95:50:
                    b6:bf:6c:19:ef:3b:c2:b4:80:97:09:54:3f:c3:55:
                    c6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FE:51:26:21:B5:DE:38:7B:A6:FA:29:69:4A:E9:9A:0A:C1:FE:F3
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/a9c23a10ffdaa0dc91e7bdd4c75b520d4752c744.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:16:65:39:81:38:85:52:4a:10:7d:ed:2f:70:b5:80:29:cf:
         2d:9a:52:08:ae:72:31:20:12:af:44:b5:60:ab:56:9b:da:cb:
         99:0c:96:82:78:dc:f2:8c:a6:14:8e:37:16:da:12:1a:51:fc:
         fe:34:8d:7d:83:ed:18:0e:df:f0:61:fb:19:03:ad:6a:ed:8b:
         36:a5:37:f5:57:00:03:11:96:06:eb:79:21:8e:55:a4:e8:a8:
         a6:ef:00:0f:2a:1d:57:a7:01:86:68:df:b6:74:f1:a0:cd:2a:
         ee:c5:f0:b5:e2:61:d4:1d:2f:9b:7b:28:f8:92:56:e7:9e:71:
         5b:da:d2:85:08:d7:0c:9d:9a:09:68:65:cf:80:b4:8a:20:a5:
         cb:00:dc:0a:dd:cf:3d:59:09:3a:b8:84:a0:5d:8f:52:c3:12:
         43:50:be:57:80:c9:71:2d:96:d8:f6:eb:56:d8:75:44:8e:c6:
         39:7a:70:45:44:fc:88:7e:05:f3:00:88:eb:c6:9e:9f:1a:03:
         85:64:12:a5:a6:11:fc:b6:d9:0a:7c:2b:9c:55:fd:e6:cc:7e:
         09:95:82:bd:51:53:02:c0:cf:87:92:5a:cd:4b:da:cf:8d:13:
         95:1f:4e:f0:d8:54:74:7d:26:ca:21:8a:39:8f:bd:eb:16:a2:
         21:8c:88:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----