Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/493462691f94ed2ee70a72ad397683ee9b15a079.roa
File:                     493462691f94ed2ee70a72ad397683ee9b15a079.roa (raw, json)
Hash identifier:          mgemfIDog85J4/yBbpF2Kf9T6ByuJsTG5UDAfx8SqWI=
Subject key identifier:   D7:3B:9D:36:29:E7:83:A7:78:6D:2E:C7:CE:15:D3:DD:8B:91:10:8A
Certificate issuer:       /CN=0a22b2d0a072d0d716973baadd546791926ae121
Certificate serial:       088B35
Authority key identifier: 2B:C5:A8:D9:B1:F6:9A:B6:46:AA:55:5F:AF:CA:37:5E:CF:67:8D:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a22b2d0a072d0d716973baadd546791926ae121.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/493462691f94ed2ee70a72ad397683ee9b15a079.roa
Signing time:             Wed 24 Mar 2021 14:42:08 +0000
ROA not before:           Wed 24 Mar 2021 14:42:08 +0000
ROA not after:            Tue 24 Mar 2026 14:42:08 +0000
asID:                     269964
IP address blocks:        24.152.52.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 559925 (0x88b35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a22b2d0a072d0d716973baadd546791926ae121
        Validity
            Not Before: Mar 24 14:42:08 2021 GMT
            Not After : Mar 24 14:42:08 2026 GMT
        Subject: CN=493462691f94ed2ee70a72ad397683ee9b15a079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2e:f1:94:c4:24:8d:80:c7:79:25:c2:54:6f:
                    c8:ca:48:c8:6f:50:fd:5a:b8:86:61:57:c2:87:b0:
                    06:99:5f:9e:20:8c:55:b2:3d:c0:70:50:f6:44:7e:
                    78:e2:48:d5:fd:3f:e0:c6:77:de:e8:8c:2d:04:59:
                    5e:fc:a9:94:89:3e:a9:92:d0:10:c2:f1:15:4a:a5:
                    1d:f0:38:17:b1:ce:0b:a5:a2:12:a4:58:38:b7:02:
                    fe:86:8a:f5:34:5f:58:ee:b1:f9:7f:b0:ad:97:76:
                    73:3b:60:ca:fd:bf:34:24:4c:2b:8e:02:d8:91:75:
                    1c:d8:0c:c8:91:74:17:64:cd:38:82:a1:ff:9c:3b:
                    81:a1:0a:0b:d8:30:8b:03:ab:a7:a1:db:cc:81:65:
                    a9:43:78:bf:47:bc:ee:94:94:d8:30:9c:23:c1:0c:
                    39:97:c3:79:c9:37:f2:00:34:6d:d9:69:03:91:f5:
                    bb:8e:99:fc:85:cc:fa:d6:f3:d3:60:96:7e:f4:26:
                    6f:ce:58:2e:b7:83:89:d7:c6:0e:3a:4c:9a:68:26:
                    45:1e:af:e8:13:e4:f4:e8:23:ae:f3:2f:03:b4:21:
                    da:f0:00:4b:3b:bd:6f:bc:7d:a9:eb:77:17:21:24:
                    ee:33:36:59:c1:99:0e:fa:8a:f2:c7:b0:5d:5b:2b:
                    d5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3B:9D:36:29:E7:83:A7:78:6D:2E:C7:CE:15:D3:DD:8B:91:10:8A
            X509v3 Authority Key Identifier:
                keyid:2B:C5:A8:D9:B1:F6:9A:B6:46:AA:55:5F:AF:CA:37:5E:CF:67:8D:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a22b2d0a072d0d716973baadd546791926ae121.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/493462691f94ed2ee70a72ad397683ee9b15a079.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/0a22b2d0a072d0d716973baadd546791926ae121.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:2d:3d:96:cf:c8:40:57:5a:f4:0f:f5:d6:2b:eb:cb:5e:0c:
         4e:ce:3e:76:5a:01:d2:2d:54:54:e7:91:5a:df:f5:22:7c:0a:
         ee:92:b6:89:31:5d:b3:27:a5:b4:e5:8e:64:00:7b:4b:34:34:
         52:bd:24:cf:b3:cd:aa:91:71:8e:fa:7e:1c:b6:4c:fe:89:9d:
         79:13:ff:d6:e3:c1:39:fd:17:ab:60:68:c4:76:a1:82:c6:60:
         99:e2:5e:74:a7:f6:6d:49:9f:6b:02:aa:78:8f:b1:9b:06:5a:
         ab:f0:1b:6a:74:e2:09:31:e9:f2:25:31:34:35:ce:6c:59:df:
         d1:23:89:93:cc:25:98:e6:94:0b:6f:d2:96:44:50:1e:6f:b5:
         1c:23:23:e1:68:a8:75:b4:c4:1f:2e:b3:48:40:c1:b7:aa:8e:
         1b:5a:47:95:ef:f6:95:8c:03:6f:78:eb:ed:47:b9:80:07:07:
         9f:1c:94:30:cc:a4:37:24:cd:e2:59:10:90:90:81:0f:bc:28:
         98:29:61:9f:14:7b:1d:47:e2:55:bd:46:d4:23:62:03:1f:f1:
         0a:33:5f:83:38:ed:ef:31:67:d6:ed:ed:08:50:45:c0:60:4b:
         17:b5:d1:25:e7:0f:e1:4f:f9:b8:ab:6d:10:96:b7:f8:c7:2a:
         75:f6:09:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----