Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/ec3e15be1874d46158083ad902edd0747627a522.roa
File:                     ec3e15be1874d46158083ad902edd0747627a522.roa (raw, json)
Hash identifier:          qvaQcO1ZyMI3E7ToDnDFSlUAofD/wuKvjH+YGcf59E4=
Subject key identifier:   CF:FF:0B:0A:DF:A3:10:EB:4C:17:9D:CD:B9:14:5E:CB:8E:F3:3C:65
Certificate issuer:       /CN=c00a39f3545eb5fa299c3bd8174e9fc35444dfc0
Certificate serial:       05D2
Authority key identifier: 6D:56:B7:08:09:7B:88:F7:1B:F3:F1:07:90:15:07:C4:49:17:AD:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c00a39f3545eb5fa299c3bd8174e9fc35444dfc0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/ec3e15be1874d46158083ad902edd0747627a522.roa
Signing time:             Tue 01 Jun 2021 15:37:21 +0000
ROA not before:           Tue 01 Jun 2021 03:00:00 +0000
ROA not after:            Thu 01 Jun 2023 03:00:00 +0000
asID:                     28409
IP address blocks:        168.121.60.0/22 maxlen: 24
                          2806:21e::/32 maxlen: 128

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1490 (0x5d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00a39f3545eb5fa299c3bd8174e9fc35444dfc0
        Validity
            Not Before: Jun  1 03:00:00 2021 GMT
            Not After : Jun  1 03:00:00 2023 GMT
        Subject: CN=ec3e15be1874d46158083ad902edd0747627a522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9c:2b:25:18:d3:37:48:de:34:90:53:e0:d8:
                    87:b0:5c:7e:08:11:cd:79:61:6d:26:05:16:64:4d:
                    7b:fd:f4:3a:d2:04:a5:26:2a:8a:f0:d0:20:f0:bf:
                    10:95:92:13:3a:4c:40:1c:45:3b:b7:3d:50:5d:28:
                    92:29:36:01:20:8f:fa:0d:08:a5:ce:bc:da:46:2d:
                    a5:46:0b:78:cd:e4:7e:b1:4a:13:a2:a8:7a:c1:9f:
                    98:1c:52:dc:4f:34:9f:2c:65:be:c6:0b:ec:1e:2c:
                    6b:75:23:34:67:f2:38:06:4d:a8:7b:c7:7c:ba:ea:
                    ca:6f:95:34:f2:2a:8d:7b:8a:d3:26:42:6a:4e:bc:
                    26:75:bf:c2:7a:bd:da:76:a2:a7:59:09:de:42:65:
                    43:9e:6b:bf:46:4f:92:6d:6f:aa:33:6a:71:c9:a7:
                    a9:6c:48:b3:90:6b:93:48:fc:f4:9d:eb:a3:e0:29:
                    72:38:11:25:02:ec:c0:e8:c8:39:0f:a3:d0:bc:ca:
                    3c:41:2a:f2:d7:d0:e5:e9:e0:25:cd:fd:73:53:5a:
                    53:60:32:e4:87:ff:e4:6a:b1:48:11:68:0d:59:aa:
                    5d:58:85:33:ae:1a:6c:de:4d:b2:16:43:ea:d2:94:
                    af:d4:78:3e:08:9d:fc:17:15:07:2d:a3:65:a4:da:
                    d3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FF:0B:0A:DF:A3:10:EB:4C:17:9D:CD:B9:14:5E:CB:8E:F3:3C:65
            X509v3 Authority Key Identifier:
                keyid:6D:56:B7:08:09:7B:88:F7:1B:F3:F1:07:90:15:07:C4:49:17:AD:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c00a39f3545eb5fa299c3bd8174e9fc35444dfc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/ec3e15be1874d46158083ad902edd0747627a522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/c00a39f3545eb5fa299c3bd8174e9fc35444dfc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.60.0/22
                IPv6:
                  2806:21e::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:35:53:fc:2a:bf:12:69:ba:e8:e2:87:58:2b:d6:77:8f:1e:
         76:56:6d:d1:a8:25:89:a7:12:e3:96:a7:98:0c:86:f8:fd:3b:
         79:6e:26:46:21:45:cc:98:60:3c:3d:23:35:b5:32:ad:7f:f2:
         c3:ba:58:d6:9e:19:cf:e9:c5:13:83:42:13:37:c7:f9:a7:31:
         af:b7:ad:21:fc:5b:99:4e:6e:ab:19:fa:2c:ae:74:20:b0:8b:
         b3:a3:41:a4:27:8b:9f:b5:7f:2d:d0:aa:79:af:a4:f5:f2:3b:
         bf:5d:07:61:3e:dd:29:02:fe:10:0c:e6:6e:71:6c:65:36:24:
         d2:a6:91:e1:5f:5c:36:a9:2c:f2:36:08:6b:48:ce:64:4a:5c:
         89:64:9b:c4:da:a0:b0:21:40:3d:36:e0:91:41:b1:1e:77:db:
         3e:fb:30:e8:54:c6:c2:87:36:81:aa:b9:78:ca:71:72:b9:8d:
         f6:f9:14:20:27:55:0d:d1:f3:31:c5:5e:3a:83:45:95:57:a3:
         c6:8f:86:c2:92:c5:6f:a9:ba:b9:ea:61:a6:d0:d2:1a:b8:83:
         d3:f0:6b:64:ca:aa:26:4f:dc:1a:fa:18:f5:46:86:f1:4b:18:
         bd:f6:6c:ed:ce:6a:08:14:a8:62:e0:1c:6b:04:63:20:69:f7:
         dc:83:eb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----