Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/46fa04ccf24e4d5535fa1e7ad4d583a704f8be64.roa
File:                     46fa04ccf24e4d5535fa1e7ad4d583a704f8be64.roa (raw, json)
Hash identifier:          oIxIn02Ki5D3gn2r5btxgFXjywCt/Ji4l9jntBKftso=
Subject key identifier:   88:BE:DF:5D:AA:FE:B6:DA:71:98:A2:CF:46:6C:D5:6F:96:7B:42:E0
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       09ED32
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/46fa04ccf24e4d5535fa1e7ad4d583a704f8be64.roa
Signing time:             Wed 24 Mar 2021 14:43:17 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     18734
IP address blocks:        201.148.0.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 650546 (0x9ed32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=46fa04ccf24e4d5535fa1e7ad4d583a704f8be64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8b:f6:2c:c5:23:9b:3b:32:05:be:16:21:97:
                    18:79:fe:69:08:c9:65:a6:5c:fd:78:e4:29:83:c4:
                    3e:56:fe:14:04:e5:08:3c:de:a6:3f:cf:e4:13:c4:
                    2d:cc:ea:8b:22:db:31:d9:5f:53:11:c9:93:ea:1b:
                    6b:f5:26:c4:c5:f1:63:90:81:d8:a1:b7:44:d8:52:
                    73:25:db:59:b9:c8:76:b4:52:79:ef:b0:a5:7c:cb:
                    3a:ee:b5:e7:3b:b4:dc:60:d6:25:0f:2e:cc:53:6d:
                    d4:c5:cb:ae:33:1c:e2:c3:56:0b:6b:32:da:b5:7f:
                    65:a3:ff:eb:c9:d6:9b:b6:50:cd:0e:d5:5b:39:a1:
                    d6:76:cf:14:b8:28:07:c1:ae:a8:f6:81:18:b0:10:
                    ef:cb:cb:c9:3e:05:63:cc:4b:e5:a4:87:d6:65:be:
                    1e:68:c2:4d:a1:67:f1:8e:b0:7d:af:6f:84:24:12:
                    86:e9:fe:8b:e4:05:f6:6b:b1:df:25:47:a1:d5:d8:
                    e0:d2:7c:18:78:b8:17:e4:72:b0:f4:40:3f:95:fa:
                    fe:14:90:a3:57:6f:e9:57:3a:cc:b2:43:45:e1:49:
                    51:43:89:38:aa:33:33:82:98:f1:99:cc:95:83:dc:
                    d4:4c:17:fe:86:59:45:88:17:1b:df:11:93:bb:c0:
                    e8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BE:DF:5D:AA:FE:B6:DA:71:98:A2:CF:46:6C:D5:6F:96:7B:42:E0
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/46fa04ccf24e4d5535fa1e7ad4d583a704f8be64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4a:5d:a5:76:94:39:14:ac:4b:fb:a0:b3:87:0c:c6:db:07:72:
         38:22:5b:cb:56:9c:24:f2:1a:36:01:34:db:34:6d:d4:16:ff:
         48:75:5b:62:66:a9:19:4d:ff:09:d7:e4:2e:26:de:fe:f2:98:
         ad:40:f3:4d:df:45:03:d9:f5:64:b5:8d:be:aa:f6:e9:5c:3f:
         8b:4f:e3:c3:3f:c0:7e:a1:a1:61:a7:ea:f7:ed:33:c6:1e:4e:
         0a:c7:7b:12:01:d0:90:01:b0:b5:f8:e5:4c:e8:62:8e:4a:6b:
         b8:c1:88:fc:96:1f:6c:e6:09:f6:ad:70:ad:9f:a8:f2:91:e0:
         79:16:61:49:b6:79:04:c1:b0:42:92:a3:26:d8:c6:53:5c:6f:
         05:7f:64:75:25:7b:84:08:69:ea:4e:b8:8d:3f:dc:1a:38:94:
         92:28:0d:aa:ec:62:36:b8:f4:5a:f7:8b:54:76:6a:97:4e:64:
         52:cc:1f:8a:5c:e1:4b:f2:b6:3d:08:98:31:66:e4:a1:c3:62:
         ea:ab:99:8f:12:6e:cf:be:81:71:f0:61:23:cd:6c:39:a2:0b:
         50:d8:3a:49:83:b2:77:38:67:97:7a:46:37:cf:e0:5d:ca:05:
         5d:43:02:62:67:17:9e:59:56:64:78:83:db:94:96:49:c8:3f:
         5a:5f:9b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----