Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddfa43a-8de8-459b-9f67-047bd64242a8/2fdcebac83757f6109ba16081fda1fdf06a81564.roa
File:                     2fdcebac83757f6109ba16081fda1fdf06a81564.roa (raw, json)
Hash identifier:          O1maz/svG6dY9Khu33cafvNsxvfUXRS3kJnKSA9KDCc=
Subject key identifier:   D4:75:A2:A1:E8:3F:D4:D8:F7:3E:3D:01:3B:F1:84:F8:0C:14:AD:43
Certificate issuer:       /CN=ba813dbb0a3aeaa7f650c31656aa4e97e4295496
Certificate serial:       04FFEC
Authority key identifier: 38:B9:B7:EB:0E:96:FC:96:21:A8:9C:71:29:F1:D6:95:5B:67:3B:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba813dbb0a3aeaa7f650c31656aa4e97e4295496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddfa43a-8de8-459b-9f67-047bd64242a8/2fdcebac83757f6109ba16081fda1fdf06a81564.roa
Signing time:             Thu 08 Apr 2021 18:48:15 +0000
ROA not before:           Thu 08 Apr 2021 03:00:00 +0000
ROA not after:            Sat 08 Apr 2023 03:00:00 +0000
asID:                     27883
IP address blocks:        190.114.192.0/19 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327660 (0x4ffec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba813dbb0a3aeaa7f650c31656aa4e97e4295496
        Validity
            Not Before: Apr  8 03:00:00 2021 GMT
            Not After : Apr  8 03:00:00 2023 GMT
        Subject: CN=2fdcebac83757f6109ba16081fda1fdf06a81564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fd:e6:0e:75:3c:cb:4f:07:5e:0f:7d:a2:18:
                    18:c3:8f:65:34:2d:30:e7:f2:38:86:fd:0d:78:1c:
                    6d:b8:6b:64:0b:02:09:57:8a:fe:55:1a:36:c3:01:
                    f2:ba:b1:19:e0:25:49:da:8a:99:fe:41:ea:3a:27:
                    cd:38:3e:1b:66:b9:ed:17:02:e7:62:70:de:b2:5a:
                    a5:b8:87:ff:1d:c3:3c:be:05:be:fb:e9:16:65:98:
                    93:64:4b:a1:71:01:1f:b5:c0:8f:43:d2:99:e2:a1:
                    90:ed:30:ae:df:d6:f9:54:03:13:76:91:1c:d8:4f:
                    a5:a1:81:19:eb:c2:f9:2b:d0:84:ad:f2:89:14:53:
                    69:a2:70:5e:27:c2:76:eb:f6:3f:16:ed:c3:bf:e1:
                    66:56:c6:27:ba:b0:fa:a6:96:9a:d7:6e:d6:61:fe:
                    41:58:3c:e0:d7:b9:2a:a6:a3:8c:e4:82:97:a6:76:
                    8a:b5:44:d9:f9:30:52:3f:f4:eb:74:66:74:1e:dd:
                    67:17:bb:e7:3b:90:5c:59:75:94:1d:a8:23:2a:05:
                    8d:09:5f:fb:72:a4:f5:a5:7d:70:5e:c5:f9:6d:f1:
                    95:99:07:3b:40:3e:4a:30:10:33:ba:bb:82:61:9e:
                    e4:a8:8d:0f:66:c2:0b:d1:60:97:bb:22:ca:7f:9f:
                    31:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:75:A2:A1:E8:3F:D4:D8:F7:3E:3D:01:3B:F1:84:F8:0C:14:AD:43
            X509v3 Authority Key Identifier:
                keyid:38:B9:B7:EB:0E:96:FC:96:21:A8:9C:71:29:F1:D6:95:5B:67:3B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba813dbb0a3aeaa7f650c31656aa4e97e4295496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddfa43a-8de8-459b-9f67-047bd64242a8/2fdcebac83757f6109ba16081fda1fdf06a81564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddfa43a-8de8-459b-9f67-047bd64242a8/ba813dbb0a3aeaa7f650c31656aa4e97e4295496.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a4:24:c5:0b:22:d6:4e:c6:95:4e:fc:a8:47:24:55:57:be:33:
         e0:9a:cf:05:a3:86:a7:75:d0:42:7b:22:d8:14:93:c4:25:ba:
         32:e9:db:fc:1f:45:a8:91:1a:32:1f:cd:55:7c:95:42:b0:e7:
         1c:b7:a8:f3:ba:67:eb:b9:a0:ec:8a:53:6a:2a:f5:8d:fa:83:
         86:4c:81:d1:85:0f:a0:f7:a9:bd:df:31:0a:fa:14:dc:92:25:
         6b:73:b5:c8:74:52:27:5e:44:ab:7c:15:fe:13:a0:82:6e:c6:
         6c:c5:1d:f8:6e:45:f1:8e:2f:04:5f:3c:d9:44:db:e3:47:1a:
         93:94:b5:a7:e3:64:22:34:9d:c9:90:29:4f:63:d8:13:67:2c:
         a2:57:b7:4b:1c:82:0b:4c:4b:f7:2c:72:e6:5a:dc:2d:22:74:
         3f:20:9a:1f:d1:dc:f1:c1:0e:37:41:9d:78:30:a1:3e:65:eb:
         a0:2e:a1:f5:1e:2e:08:d9:54:55:54:fb:e1:c4:0c:5d:5e:63:
         44:28:12:1b:34:ac:12:76:8d:a5:bb:6b:f9:45:99:32:9b:56:
         cc:54:f9:b1:bf:3a:ba:b7:50:9a:bb:72:6e:da:ee:24:09:a6:
         03:e5:a9:12:bd:9c:ac:aa:f3:27:fc:4c:cf:f4:17:22:a6:dd:
         c3:f6:ab:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----