Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b68a10c-54a0-424e-88c9-e0e7e85e5c5c/3065ea4451fb847b0c8bcdadb0da30654f4680cd.roa
File:                     3065ea4451fb847b0c8bcdadb0da30654f4680cd.roa (raw, json)
Hash identifier:          871+OOXTXKPK/t0cBiQcZhnwepUNwRhyQ6cqavmt7O4=
Subject key identifier:   07:AD:3C:B8:24:96:85:6D:21:CA:88:29:0D:38:BC:BE:44:2B:41:22
Certificate issuer:       /CN=3e089b1672b85d5b6e072fa49ac9aa7681ce1d2c
Certificate serial:       0DA9E5
Authority key identifier: C0:DF:BE:F2:49:D4:28:4F:A2:22:65:25:74:CA:A9:6B:98:D1:BD:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3e089b1672b85d5b6e072fa49ac9aa7681ce1d2c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b68a10c-54a0-424e-88c9-e0e7e85e5c5c/3065ea4451fb847b0c8bcdadb0da30654f4680cd.roa
Signing time:             Wed 24 Mar 2021 14:47:22 +0000
ROA not before:           Wed 24 Mar 2021 14:47:22 +0000
ROA not after:            Tue 24 Mar 2026 14:47:22 +0000
asID:                     63023
IP address blocks:        170.244.52.0/22 maxlen: 22
                          2803:5ac0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895461 (0xda9e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e089b1672b85d5b6e072fa49ac9aa7681ce1d2c
        Validity
            Not Before: Mar 24 14:47:22 2021 GMT
            Not After : Mar 24 14:47:22 2026 GMT
        Subject: CN=3065ea4451fb847b0c8bcdadb0da30654f4680cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bc:ce:44:e1:7e:6f:a5:2f:6a:a1:ec:41:32:
                    44:1e:c4:d4:9c:9d:f2:3b:ad:e5:f1:ac:72:02:56:
                    a5:ca:76:60:5d:4e:60:31:6e:c3:1f:33:22:eb:9e:
                    17:5b:ad:97:e1:4f:51:6b:4a:50:07:c0:5b:4e:3e:
                    4d:b1:7a:90:87:34:2f:95:08:f2:4e:f5:5f:00:5c:
                    e3:c2:d0:7a:84:f0:42:9b:18:de:71:e0:25:55:92:
                    70:c3:43:f5:43:35:2e:9f:7a:12:fa:40:ac:2e:69:
                    ab:ec:72:51:b8:bc:7b:73:37:02:cd:bc:74:b2:56:
                    04:f9:29:55:73:e3:76:05:bf:b4:c4:6b:1e:74:eb:
                    5f:18:af:5f:ec:1a:cc:92:b6:6a:7d:f3:af:27:f3:
                    d0:36:1d:dc:ad:12:42:fa:98:31:45:bb:85:09:4d:
                    83:db:7c:df:55:74:62:e8:ca:3b:4b:72:58:4a:f1:
                    07:63:b5:ad:04:7e:41:87:8f:f8:5f:fc:27:8e:97:
                    96:53:bb:27:c1:bf:da:9f:74:f4:f6:e1:ab:73:46:
                    8f:f9:e2:d8:7c:38:15:3b:29:40:4a:23:3d:dc:f5:
                    07:da:8b:32:b2:50:35:48:e0:ab:ad:21:bb:34:c9:
                    58:0e:bd:a6:81:44:72:b7:1b:e5:5a:06:aa:d4:0b:
                    6b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AD:3C:B8:24:96:85:6D:21:CA:88:29:0D:38:BC:BE:44:2B:41:22
            X509v3 Authority Key Identifier:
                keyid:C0:DF:BE:F2:49:D4:28:4F:A2:22:65:25:74:CA:A9:6B:98:D1:BD:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3e089b1672b85d5b6e072fa49ac9aa7681ce1d2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b68a10c-54a0-424e-88c9-e0e7e85e5c5c/3065ea4451fb847b0c8bcdadb0da30654f4680cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b68a10c-54a0-424e-88c9-e0e7e85e5c5c/3e089b1672b85d5b6e072fa49ac9aa7681ce1d2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.52.0/22
                IPv6:
                  2803:5ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:77:b8:76:ca:41:b9:0e:8f:47:1d:b5:7f:37:3a:41:be:45:
         30:7f:5c:3a:07:a5:06:c7:29:b7:a3:43:c3:df:26:db:b4:4d:
         5c:06:81:c7:15:4e:8b:e1:1c:42:1d:09:31:df:d4:ea:02:ec:
         e7:20:d6:aa:63:b9:89:91:9d:a3:93:1c:4f:77:1d:2a:0f:09:
         74:81:65:ca:44:88:29:35:e0:dc:80:22:04:1f:74:e1:7b:5d:
         6f:a1:1e:18:53:40:4a:55:d2:a4:a9:73:a1:0c:7a:8e:09:bd:
         bd:db:98:16:b2:b6:c1:c6:9c:2c:69:ea:3b:4e:83:a3:01:aa:
         3c:98:94:dc:79:91:b3:12:b6:8d:be:d6:d2:43:3e:ef:79:ab:
         c7:bc:90:f1:90:f4:50:91:77:6f:52:ce:70:b9:43:6f:71:ac:
         ff:c8:8a:b2:d4:a1:e1:03:2d:73:05:d8:cd:ee:74:ba:2b:57:
         a1:68:a0:f4:10:b4:77:6d:78:7e:a0:83:a1:22:a6:45:0a:84:
         e1:d8:01:38:da:df:fc:2e:d5:aa:e5:71:a6:de:a5:ed:22:e3:
         20:5d:22:53:c7:13:51:f4:89:70:f4:af:32:3e:8c:79:fe:17:
         14:53:3a:8e:60:d9:b4:2c:45:99:f6:b8:09:53:65:30:fd:1e:
         45:ff:c7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----