Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/606abb4637e56af18bc60008a525dbfce649c78b.roa
File:                     606abb4637e56af18bc60008a525dbfce649c78b.roa (raw, json)
Hash identifier:          s4NQ1d6qRJF8ny4Dad/Xjhlxqv674TuBmC8pUdEbU3U=
Subject key identifier:   2D:DD:45:A8:E8:A0:A2:0A:6C:99:ED:51:21:36:A2:8D:A7:7F:D3:82
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       0A2BD5
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/606abb4637e56af18bc60008a525dbfce649c78b.roa
Signing time:             Wed 24 Mar 2021 14:43:21 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     28548
IP address blocks:        189.202.230.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666581 (0xa2bd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=606abb4637e56af18bc60008a525dbfce649c78b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ba:f0:41:74:af:ae:dc:69:db:79:d6:cd:30:
                    31:81:89:c6:16:a3:fd:42:d8:a7:ee:9f:72:a2:e1:
                    19:d1:d2:ce:c1:94:66:07:a4:b0:f5:c9:3a:f3:b3:
                    62:1a:6c:4d:4a:6e:0a:86:51:bb:ba:42:9c:76:c3:
                    c5:38:34:14:f8:b2:94:44:87:2c:1b:3e:fd:ba:1d:
                    1f:ec:f1:3c:11:57:a6:84:f8:e7:a3:8c:8d:d7:0f:
                    f7:87:86:a0:ea:da:e5:e4:81:8a:36:40:df:54:af:
                    5c:23:b0:94:4e:35:4c:5b:60:93:e0:13:ad:33:db:
                    24:52:41:05:52:28:7c:c0:52:56:7c:f6:9e:ce:31:
                    d6:43:5d:1e:94:5f:a4:30:9c:67:71:7c:06:d3:3c:
                    15:c3:be:0e:35:3f:35:ae:4b:59:e3:2b:9e:f1:14:
                    34:06:c3:6c:e2:a1:42:9d:b3:2c:8e:fd:12:6b:68:
                    88:60:07:44:3b:72:e3:67:9c:8b:23:0f:56:a9:7e:
                    ce:7d:5b:32:84:de:9b:d0:ca:da:dd:c4:cd:2e:91:
                    b3:b1:e4:27:dc:cc:e9:a0:6f:03:e0:48:b0:d4:cd:
                    fe:41:dc:42:bb:59:88:b5:99:be:97:b7:fd:58:a7:
                    25:e2:3a:dc:5c:9e:80:90:03:74:50:1e:ba:61:29:
                    b8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DD:45:A8:E8:A0:A2:0A:6C:99:ED:51:21:36:A2:8D:A7:7F:D3:82
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/606abb4637e56af18bc60008a525dbfce649c78b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.202.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:d0:95:17:57:9f:82:5b:4f:34:69:d3:21:cd:06:27:9a:dd:
         1d:13:7c:4e:1b:e9:3a:0e:d6:38:dd:8a:23:53:36:20:46:4c:
         da:c6:a0:e4:55:78:cb:b8:75:15:bf:a7:5f:c3:cd:9b:c5:ef:
         09:16:c9:10:81:80:35:04:47:6c:df:73:b3:61:13:bd:85:f8:
         d8:d3:87:dd:39:c9:45:a5:95:6b:9f:72:37:15:ba:bd:64:3e:
         ff:16:dc:bc:50:bd:a1:24:1e:d1:d1:e8:73:8d:71:8d:f4:80:
         be:6a:5a:f9:de:0d:0b:b7:2a:87:6e:f8:0a:30:c2:8c:b2:5f:
         c1:b7:c2:22:cd:81:db:88:10:07:01:00:a0:74:93:35:0b:5c:
         44:05:f7:31:f7:b2:47:03:c3:c3:21:31:1d:46:53:83:f0:3a:
         c2:00:23:27:d8:4b:06:52:b4:8c:dd:cc:f3:64:01:48:74:16:
         28:87:76:71:17:32:c9:6a:e6:7e:48:66:6e:a7:7b:85:38:99:
         5f:58:1f:c3:9b:8a:53:09:18:4b:6a:b0:c6:4e:58:38:35:8f:
         42:35:4f:89:ce:25:33:d4:e7:6d:1e:fc:4e:a2:a2:1e:5c:9f:
         da:a5:37:f1:cd:bf:03:bb:56:c5:e5:03:dd:e5:b4:f1:b5:be:
         37:c5:c2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----