Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/b14f6bb9d29e567c9c3e8715ab4aa60f08854151.roa
File:                     b14f6bb9d29e567c9c3e8715ab4aa60f08854151.roa (raw, json)
Hash identifier:          UbJmFGBkSsFwtHt2Co1AKcWGDWdNOWq/pNOJOf+nLEE=
Subject key identifier:   0C:5E:DD:A9:76:56:DC:AC:F2:A5:10:11:2D:D8:60:19:DB:80:E5:C1
Certificate issuer:       /CN=7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb
Certificate serial:       0D3EEC
Authority key identifier: 8C:3F:2F:C5:60:AB:01:83:D8:2F:8E:F9:94:22:B9:E0:85:67:45:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/b14f6bb9d29e567c9c3e8715ab4aa60f08854151.roa
Signing time:             Wed 24 Mar 2021 14:41:31 +0000
ROA not before:           Wed 24 Mar 2021 14:41:31 +0000
ROA not after:            Tue 24 Mar 2026 14:41:31 +0000
asID:                     264668
IP address blocks:        160.20.164.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 868076 (0xd3eec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb
        Validity
            Not Before: Mar 24 14:41:31 2021 GMT
            Not After : Mar 24 14:41:31 2026 GMT
        Subject: CN=b14f6bb9d29e567c9c3e8715ab4aa60f08854151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0d:85:ee:db:88:f4:3f:72:19:e2:3f:ab:83:
                    20:af:2e:4a:12:43:7c:9a:ec:de:7f:7b:57:d3:3a:
                    7e:04:44:2d:50:00:55:65:d1:3a:78:03:4f:30:ee:
                    67:8c:57:40:a4:51:f9:30:73:b2:43:58:e2:4f:1f:
                    a1:b2:06:60:e3:f1:d3:a6:db:ef:36:8f:a2:75:82:
                    eb:c5:28:21:cd:8d:d6:c6:8b:f1:73:b5:73:56:c6:
                    cd:f0:66:81:8d:25:8b:c2:36:67:2a:4c:71:1a:d1:
                    67:39:aa:c9:52:7b:cf:77:de:6a:c6:87:19:c7:ae:
                    d8:24:5f:4e:9f:5b:9c:f4:47:41:b6:a9:d4:a1:f6:
                    a9:22:ec:ce:e7:12:f2:60:0f:bd:f7:17:62:c8:c1:
                    aa:92:cd:9c:18:3d:b0:73:db:97:89:9f:e7:21:ed:
                    57:bc:d4:4e:b9:a3:68:40:64:09:8b:c0:72:88:c8:
                    07:91:c2:1a:f7:98:3f:f8:46:a1:3e:2a:b0:bf:de:
                    32:5b:d8:e0:98:5b:d1:f7:d3:02:fc:3e:6c:a2:a8:
                    f7:fb:7d:f5:54:f9:7b:56:15:e2:23:93:2a:d1:f0:
                    e1:4d:24:37:27:f1:58:16:19:52:a8:33:25:bf:e5:
                    63:bc:b6:b4:f8:ad:84:ae:e0:cc:1c:35:ee:ba:31:
                    3f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5E:DD:A9:76:56:DC:AC:F2:A5:10:11:2D:D8:60:19:DB:80:E5:C1
            X509v3 Authority Key Identifier:
                keyid:8C:3F:2F:C5:60:AB:01:83:D8:2F:8E:F9:94:22:B9:E0:85:67:45:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/b14f6bb9d29e567c9c3e8715ab4aa60f08854151.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:82:de:8f:db:b7:98:13:f4:68:69:89:30:90:e9:b6:08:78:
         7f:41:a5:fe:91:da:08:54:e0:7f:16:94:5f:76:3d:bb:67:2c:
         7e:6b:64:5a:ea:a2:99:c7:87:9a:fe:72:98:ea:e3:b8:12:2b:
         55:6b:1b:0a:7b:fa:b9:fb:47:31:d5:bc:bc:29:9c:e4:73:d6:
         a4:2d:17:ec:c5:a5:2a:f3:82:f4:ad:c3:3b:2d:f6:b8:1e:89:
         07:0a:9e:1c:a3:b6:25:c6:4f:7d:50:e4:89:cd:09:ba:70:bd:
         07:e9:76:0b:64:0b:77:d4:21:87:d1:f8:64:26:c7:48:d0:ee:
         a5:ae:07:b3:8b:68:2c:89:73:1f:f8:2b:12:e8:7a:a9:91:3d:
         07:79:dc:10:83:dd:d0:9b:fb:e5:25:7a:83:62:5f:64:f2:99:
         36:8e:75:db:ce:88:d8:59:7d:5a:5d:38:21:0e:08:f8:65:ad:
         6c:b9:96:0c:6d:0a:d7:f3:83:2b:f2:28:12:0f:d5:9c:5c:c4:
         d2:c3:46:27:5c:8d:7f:67:b8:9f:c2:86:01:12:dc:a3:7a:f4:
         9a:71:e6:b1:f7:b6:c9:3c:d4:06:7c:56:d4:23:81:28:45:10:
         2c:72:fa:ce:f7:11:8b:e6:e9:1e:43:af:a2:be:02:40:c6:ff:
         b7:cb:92:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----