Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/29bde3a23cf53aec6e3d1616ad37820bd904d6e3.roa
File:                     29bde3a23cf53aec6e3d1616ad37820bd904d6e3.roa (raw, json)
Hash identifier:          VGaLUmcLPdSrhfXnsSUSQmLG0MLHdT+WgwYtjeW1Pp8=
Subject key identifier:   BF:E5:46:8B:20:1E:92:07:6F:7F:90:7B:DC:4B:81:46:22:F8:21:1A
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       09F3F8
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/29bde3a23cf53aec6e3d1616ad37820bd904d6e3.roa
Signing time:             Wed 24 Mar 2021 14:43:17 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     18734
IP address blocks:        168.197.120.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 652280 (0x9f3f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=29bde3a23cf53aec6e3d1616ad37820bd904d6e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:54:e8:d0:44:e8:ec:46:c0:25:d0:10:75:8e:
                    f6:8b:7f:38:f3:55:ba:46:5a:e9:b2:51:e9:f0:d0:
                    3b:e4:54:55:3e:c8:32:37:f6:2a:0d:b9:1f:30:3a:
                    65:09:49:21:88:19:fe:34:4b:7d:40:66:19:49:7b:
                    b6:ac:89:3c:60:3b:f3:b6:00:34:49:35:e1:48:5a:
                    d5:bb:99:c3:ba:98:8d:3d:89:7c:51:d0:95:ef:88:
                    c4:7e:0e:ee:30:7e:d1:5e:08:17:63:5d:0a:e5:27:
                    5e:f4:9c:bb:e1:49:35:ff:b8:3a:5c:e6:a7:49:7e:
                    f7:f9:1b:6d:25:54:67:f7:6c:94:61:43:37:d9:21:
                    ea:b5:cf:a9:5d:13:16:01:11:0b:ab:80:73:8d:f8:
                    8c:36:24:94:4b:32:a8:5d:bd:31:61:0f:51:dc:c5:
                    5c:d9:27:99:61:65:64:8b:9d:7f:3d:c8:7d:96:34:
                    16:0b:88:5c:b9:72:b9:ae:d4:ae:eb:1f:d2:9d:dd:
                    18:a7:ba:e2:8c:32:2a:bf:8e:f4:74:bd:89:bc:78:
                    e4:93:6a:ee:b3:43:f5:69:44:d5:c9:6f:8a:3d:7f:
                    a5:ba:5f:c5:57:18:59:46:17:ba:5a:d2:d4:9b:a4:
                    07:2f:e5:21:0f:4a:16:59:ef:c2:1d:40:f2:5f:a7:
                    bc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E5:46:8B:20:1E:92:07:6F:7F:90:7B:DC:4B:81:46:22:F8:21:1A
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/29bde3a23cf53aec6e3d1616ad37820bd904d6e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:47:c4:9a:c8:82:20:71:87:c5:7b:ab:37:f9:e3:74:5f:34:
         5c:b8:d6:12:5c:eb:97:86:6f:8d:5f:8f:4e:97:df:64:0e:b0:
         cf:e6:fe:48:da:7a:f3:bb:7a:64:95:c3:ca:94:d7:aa:d7:57:
         9d:14:fe:2b:65:be:fe:04:0c:33:7d:39:58:97:b3:85:97:a2:
         17:82:32:8b:cd:44:27:15:04:47:ec:9b:e2:da:b9:b0:25:ac:
         aa:b8:06:2c:e3:2b:18:80:98:b3:09:01:d3:b8:a2:cf:b6:ae:
         fa:67:f2:73:e6:38:1b:78:0e:cc:55:fd:b7:3c:54:6c:73:4f:
         c2:f8:c3:d5:df:e1:da:82:47:00:17:6b:56:e2:3d:c7:3c:e6:
         99:34:5d:01:59:4a:08:5a:01:1a:4a:ec:9a:32:8e:06:42:ff:
         fc:53:47:73:0c:5c:78:59:0f:7a:d1:ee:b2:b0:90:96:e0:bb:
         22:d3:40:92:76:fb:25:c6:9a:b9:2a:74:e2:64:ff:25:b7:3b:
         64:1f:02:44:55:83:47:0d:ad:e1:d2:7d:e9:18:df:57:ed:44:
         ab:25:82:78:c8:ed:61:af:d8:42:68:eb:41:83:18:8b:a1:01:
         3d:2d:43:07:4c:c2:9f:f7:c4:2a:d3:3d:0e:ed:19:e0:a5:18:
         50:82:5c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----