Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/27841dcd8e6b8f3692b33cc41adba42354db2846.roa
File:                     27841dcd8e6b8f3692b33cc41adba42354db2846.roa (raw, json)
Hash identifier:          5Pxwhkd6LTG84GCzV7IideQFNa0rPLOB8276oxRFYWo=
Subject key identifier:   97:4E:01:CA:E4:E1:DA:50:56:C8:96:BC:C7:A1:41:10:1F:64:27:C0
Certificate issuer:       /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial:       02442B
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/27841dcd8e6b8f3692b33cc41adba42354db2846.roa
Signing time:             Wed 24 Mar 2021 14:48:09 +0000
ROA not before:           Wed 24 Mar 2021 14:48:09 +0000
ROA not after:            Tue 24 Mar 2026 14:48:09 +0000
asID:                     264628
IP address blocks:        161.22.37.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148523 (0x2442b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
        Validity
            Not Before: Mar 24 14:48:09 2021 GMT
            Not After : Mar 24 14:48:09 2026 GMT
        Subject: CN=27841dcd8e6b8f3692b33cc41adba42354db2846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8e:dc:5d:ce:d5:8a:ab:c4:94:5c:c4:42:65:
                    82:b9:41:fc:6e:e4:71:4a:32:1b:30:07:ca:a5:4d:
                    b1:bf:87:d0:e1:a8:00:2c:8a:4d:e0:86:a7:59:f3:
                    36:d7:84:57:70:9f:f9:21:ec:75:25:5a:61:c7:08:
                    24:fb:00:8c:a1:fe:c8:ff:8b:3d:7a:ce:ce:a7:b2:
                    f6:4c:63:86:dd:17:ff:ee:a8:34:5f:4c:97:45:b1:
                    85:83:4f:43:d2:4c:b2:48:01:fb:16:bc:a3:5a:55:
                    4e:74:7b:2a:52:d5:c2:26:ae:fa:c9:17:4e:92:3b:
                    38:13:eb:08:12:dc:10:2d:ee:50:69:33:ce:78:6e:
                    60:1d:9a:65:16:72:96:d8:ca:bb:80:7f:db:70:fd:
                    40:f9:d0:07:24:0f:6b:5c:23:b1:1e:d0:0c:fe:29:
                    86:c6:5a:23:50:84:e7:f3:25:1f:85:01:7a:01:a0:
                    09:6f:59:6a:d6:ca:e0:c2:eb:23:5f:47:04:1b:fb:
                    de:fd:c4:b3:17:74:86:e1:ef:53:32:4c:39:69:8a:
                    89:4d:76:d9:ce:2c:f9:ed:0a:29:75:41:28:45:a0:
                    b8:6d:ff:d1:21:c4:55:f8:d2:a9:4b:0c:b8:67:20:
                    d2:7b:51:bf:3e:04:df:67:53:f0:24:48:67:de:6e:
                    26:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4E:01:CA:E4:E1:DA:50:56:C8:96:BC:C7:A1:41:10:1F:64:27:C0
            X509v3 Authority Key Identifier:
                keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/27841dcd8e6b8f3692b33cc41adba42354db2846.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:4a:d1:6c:85:b2:70:c7:77:ad:12:3a:a8:a4:26:6c:ac:d0:
         d9:67:fe:aa:f4:5c:01:00:06:ac:0a:e3:15:f4:68:ca:22:c7:
         12:1f:43:a7:4c:4c:b4:2d:03:4b:98:98:f9:99:20:d8:de:ec:
         dc:0e:f2:cc:55:ee:49:61:97:b0:18:96:a1:51:b0:f8:a8:74:
         99:8c:73:04:fa:5b:28:a5:b9:ab:d8:54:b3:fc:94:37:b9:8a:
         9c:8d:b2:6a:8c:a7:77:52:f3:46:ec:18:41:22:1f:e8:8c:ea:
         b2:32:91:bf:d7:85:13:66:d7:f8:20:ab:11:14:da:bb:e4:e1:
         be:81:c0:40:49:73:38:8b:ff:5f:10:75:19:0d:98:3d:5c:1c:
         c7:55:8f:4b:ea:ca:f4:b0:b2:b4:7d:9f:b4:d5:d1:31:d1:2b:
         9a:cd:42:9a:7e:d0:ef:8d:f6:f9:ae:2e:69:87:ca:b7:e7:f7:
         5c:3c:d1:15:fd:12:23:5e:0f:55:ae:39:9e:bd:af:fe:ae:26:
         2b:e0:26:ac:68:c7:9b:0d:47:82:5c:b9:58:e4:de:9c:34:a8:
         23:4b:c8:94:1d:59:9f:2d:53:41:79:af:fc:eb:6b:01:c2:03:
         0c:00:da:71:b5:fc:8f:37:85:5c:b3:13:ef:f9:9c:88:14:7b:
         17:5a:e0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----