Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/0e43781ef8687351205bab11c02c42773592fa5e.roa
File:                     0e43781ef8687351205bab11c02c42773592fa5e.roa (raw, json)
Hash identifier:          07S4hZXtaAIPhrGWR7tgSYLZ9PfV2hqxrZ9y2xH7Fx8=
Subject key identifier:   72:81:80:BE:52:3E:C2:2F:5E:08:37:D2:36:9B:98:DE:49:FC:F5:B6
Certificate issuer:       /CN=703bede159efdf3fd85e6b49bded6c79dc525307
Certificate serial:       0DA4F7
Authority key identifier: 79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/0e43781ef8687351205bab11c02c42773592fa5e.roa
Signing time:             Wed 24 Mar 2021 14:47:31 +0000
ROA not before:           Wed 24 Mar 2021 14:47:30 +0000
ROA not after:            Tue 24 Mar 2026 14:47:30 +0000
asID:                     23007
IP address blocks:        150.185.128.0/18 maxlen: 18

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 894199 (0xda4f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=703bede159efdf3fd85e6b49bded6c79dc525307
        Validity
            Not Before: Mar 24 14:47:30 2021 GMT
            Not After : Mar 24 14:47:30 2026 GMT
        Subject: CN=0e43781ef8687351205bab11c02c42773592fa5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:93:4a:e9:f8:be:29:b0:50:48:cf:be:dc:ca:
                    d0:f9:52:2d:77:13:50:76:5f:9c:4d:eb:b4:d3:7c:
                    f1:c1:9a:80:95:ec:60:c3:65:5c:79:15:37:75:7f:
                    39:b1:42:af:13:16:99:3e:fc:a5:7e:48:f4:6b:62:
                    9a:2b:6f:4f:2d:71:2f:fe:a7:cf:b9:b2:34:18:1a:
                    19:70:3a:41:c8:37:25:2e:a3:4b:80:7f:5c:86:9b:
                    8a:fc:b2:e6:18:68:ac:1a:67:a5:80:98:34:4f:cf:
                    1b:d9:0a:b5:97:64:4b:bf:83:6b:25:bc:30:96:c7:
                    d9:f1:51:46:b9:a2:f1:60:a0:78:5c:a0:ba:3f:d4:
                    c9:35:70:5a:74:f6:cc:fa:f4:5d:f3:7c:13:84:96:
                    eb:76:8e:05:56:a8:e0:aa:6a:93:ba:74:ca:55:87:
                    c1:96:80:04:22:7a:ce:e3:8e:7b:8d:56:80:10:b9:
                    2f:6c:9e:c8:61:40:20:28:c7:b9:46:b2:94:e9:6e:
                    ce:a9:c9:e9:32:d7:0a:ad:ab:1e:2d:d8:92:66:d0:
                    4e:9f:df:0e:0a:54:24:15:9d:93:f1:43:ea:8a:b7:
                    f8:48:ce:fc:fc:a9:97:91:d2:3d:78:9d:0a:6d:05:
                    e8:73:8b:15:0f:22:ba:94:d1:62:0a:91:07:4d:2b:
                    e5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:81:80:BE:52:3E:C2:2F:5E:08:37:D2:36:9B:98:DE:49:FC:F5:B6
            X509v3 Authority Key Identifier:
                keyid:79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/0e43781ef8687351205bab11c02c42773592fa5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/703bede159efdf3fd85e6b49bded6c79dc525307.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.185.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         52:11:ba:e6:e9:93:cd:9d:52:84:ee:60:d3:0e:ac:68:61:c1:
         10:c8:0d:ec:1c:66:2f:b6:8b:4a:4e:b4:c8:73:35:9d:2e:ac:
         53:a1:c9:51:d8:c9:ed:01:45:8d:ae:29:8f:d2:b4:d2:a0:19:
         a8:28:3e:07:cf:6b:dd:11:86:c5:c6:1b:c3:41:94:1f:52:fd:
         c9:65:be:a6:0e:bc:3a:f2:d2:b8:8a:19:19:7e:cd:52:69:85:
         5a:4c:b4:4e:e8:70:0c:75:2d:db:af:98:e4:32:8f:34:92:86:
         9a:d1:a3:bf:09:60:2e:89:3e:f1:70:d8:15:0e:a5:f4:8b:fe:
         7d:b5:68:55:c7:39:86:86:9f:16:4f:b1:8f:d7:0f:b7:83:34:
         c7:c1:af:42:61:74:0d:48:6e:27:1b:3b:60:29:4d:93:4e:68:
         9f:cb:f9:34:e3:c9:a2:ff:ec:c5:1c:b4:c1:3b:bd:7a:48:2e:
         34:3b:06:09:66:3e:0b:c2:d8:a5:7b:2f:4b:65:17:a0:65:9a:
         27:e3:63:fb:5d:93:1c:1a:ae:fc:da:77:53:c2:50:69:54:af:
         3d:4f:60:de:98:19:31:8b:8a:97:95:57:77:20:a4:c2:86:d5:
         ee:29:63:b5:96:c6:a1:11:fe:0d:0a:86:e7:b4:43:c2:48:70:
         55:e8:c8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----