Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/64b2c23a8177b0978eaadbcda2e855849a5d17d3.roa
File:                     64b2c23a8177b0978eaadbcda2e855849a5d17d3.roa (raw, json)
Hash identifier:          OJ/XnWyP89cMA4Xqjix7SIgCOj6lov542aFjevQiDog=
Subject key identifier:   68:CE:1A:B0:9C:61:99:88:F4:7F:C8:25:BA:EB:63:E9:41:D8:C4:63
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       09FE3E
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/64b2c23a8177b0978eaadbcda2e855849a5d17d3.roa
Signing time:             Wed 24 Mar 2021 14:43:17 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     265541
IP address blocks:        189.204.164.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 654910 (0x9fe3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=64b2c23a8177b0978eaadbcda2e855849a5d17d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a4:3e:d6:87:84:a7:04:3f:2e:6c:53:2f:a5:
                    3e:71:35:fb:32:71:ba:6d:04:77:78:2c:f5:17:cb:
                    83:c9:27:d7:67:cf:eb:58:23:c6:5c:88:57:ed:a3:
                    48:59:24:4b:4d:31:0a:9e:f8:ea:56:47:e9:73:69:
                    99:56:c3:31:9d:8b:c2:d0:a4:a0:a9:4f:d2:e1:be:
                    c0:b5:89:cf:af:7e:4f:b8:28:e7:6d:a2:c4:af:07:
                    29:ae:0d:38:35:57:a7:4b:ff:dd:7f:af:22:d4:f3:
                    af:d8:14:74:fe:7f:1c:b9:96:f8:35:bc:33:6e:fa:
                    fa:2b:72:32:fb:59:62:d8:d0:5e:44:1f:0c:e4:1a:
                    81:cc:ac:e0:3d:8e:c8:8a:25:83:48:9c:44:c8:7c:
                    65:d3:07:5e:c9:61:40:34:25:df:56:33:62:5d:11:
                    85:5d:e5:31:fb:56:7a:2c:f7:63:58:67:6d:79:65:
                    cd:7c:8b:ed:d3:f9:aa:7c:13:94:7c:48:63:4d:6a:
                    1f:78:f5:94:22:d3:d0:83:1a:7b:92:06:79:06:c4:
                    09:5d:81:4a:95:bb:9e:58:ce:dc:7f:31:3f:47:dd:
                    a4:58:48:eb:bd:aa:7e:ef:3d:6b:7d:6b:c6:a0:c0:
                    5d:7e:89:a7:21:fb:9c:41:d4:34:f9:95:7b:ad:20:
                    7a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CE:1A:B0:9C:61:99:88:F4:7F:C8:25:BA:EB:63:E9:41:D8:C4:63
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/64b2c23a8177b0978eaadbcda2e855849a5d17d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.204.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:80:33:65:da:05:f2:56:e0:4a:71:f0:5a:c0:b1:e4:06:16:
         60:ca:00:d8:6d:94:1b:d3:09:8e:8a:20:40:65:97:2f:c3:f8:
         e4:b8:ce:c9:b4:24:28:30:44:93:3a:b4:1c:bb:7e:1e:a0:30:
         37:c7:0b:3d:e2:24:18:7b:07:b7:fe:6e:70:b9:66:fe:47:fc:
         b6:8d:da:28:c7:2f:b3:6b:bd:19:9a:c2:40:54:40:c0:3e:9d:
         a2:79:f3:87:9f:a7:3d:f3:8d:64:f1:10:73:48:04:9f:a1:8e:
         47:51:3b:0e:59:1b:a2:e6:e5:d6:80:5e:27:a4:d3:a8:5c:55:
         ef:1c:78:3d:28:09:ed:83:b9:13:f0:71:2e:c5:c1:46:2f:eb:
         a2:0c:54:f1:33:f5:9f:c5:68:01:7e:c0:79:5b:16:6b:17:8a:
         5a:66:08:cf:c8:b8:ae:c4:8e:ec:07:10:6e:ab:3a:01:1b:6e:
         08:9c:4f:ed:0e:0a:d1:7a:04:9c:8a:36:18:36:a7:46:43:26:
         41:c2:57:5c:a0:9d:ce:31:f3:ce:6e:a9:ed:26:58:d6:c4:dc:
         45:e7:f4:d5:f5:a6:97:a5:69:f8:70:49:0c:8d:65:ea:0f:66:
         ed:e5:3e:d2:4d:cb:72:bd:f5:a1:30:ae:c2:e9:c3:39:fe:5d:
         68:db:a9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----