Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/8c8e7172990e07bff6cdaade57c1345cf0a5c659.roa
File:                     8c8e7172990e07bff6cdaade57c1345cf0a5c659.roa (raw, json)
Hash identifier:          hitnuT2yPiT8mAv+F8wOVRBkzOfXgZ6rF155AvxcOJ4=
Subject key identifier:   01:F4:3E:ED:8F:88:D1:9C:E9:EC:21:72:7B:B5:84:33:8D:56:1A:F5
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       09EC47
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/8c8e7172990e07bff6cdaade57c1345cf0a5c659.roa
Signing time:             Wed 24 Mar 2021 14:43:17 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     18734
IP address blocks:        201.140.80.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 650311 (0x9ec47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=8c8e7172990e07bff6cdaade57c1345cf0a5c659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:19:68:95:c2:a8:bd:3c:50:dd:e5:42:9f:76:
                    ff:43:e2:58:89:0c:4f:c6:e2:b2:59:8c:6e:21:22:
                    fd:e6:8f:45:de:96:fc:54:4e:36:b1:25:33:c7:92:
                    0e:43:20:87:07:c4:51:48:76:96:2f:7f:f2:d7:92:
                    8b:db:c2:9d:0e:8b:24:cf:80:48:fb:fd:61:e5:28:
                    0c:ff:a3:3a:7c:12:bf:21:26:17:ba:6d:6c:a7:02:
                    df:9b:1a:77:63:3c:c4:f1:cd:80:26:d2:67:5d:9a:
                    a5:9b:82:41:c4:29:da:fd:b5:23:bc:aa:0c:41:6a:
                    35:12:ab:c1:51:84:bc:14:5d:24:fa:44:5c:1d:cb:
                    f8:84:76:c5:4a:8f:cb:16:f3:64:3e:e4:04:f8:07:
                    51:0e:ed:c5:0b:f4:9e:cd:3b:af:b8:af:aa:6b:d2:
                    60:9d:9c:49:df:33:cb:db:1f:1f:32:8c:9b:3a:70:
                    63:2b:3a:c2:c5:da:3b:03:f3:b2:9f:ec:06:0c:22:
                    9f:ed:ed:75:6e:d8:06:6b:b6:e0:1b:6b:f3:51:67:
                    ee:d3:52:97:b3:da:14:02:d2:ed:e2:e3:96:36:32:
                    2b:6f:3c:32:77:6f:49:89:41:46:37:00:ff:07:d3:
                    fa:b2:ca:67:72:ff:de:b6:f0:0e:fb:03:1d:22:08:
                    68:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F4:3E:ED:8F:88:D1:9C:E9:EC:21:72:7B:B5:84:33:8D:56:1A:F5
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/8c8e7172990e07bff6cdaade57c1345cf0a5c659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:d0:77:78:3f:4a:e0:0e:e6:f5:41:8f:1d:83:d5:f3:01:2a:
         04:77:bc:0e:17:8b:92:fb:2c:f2:b4:e5:cf:be:50:d0:68:4c:
         a6:52:ea:cb:01:2f:60:38:c4:f6:2e:b7:54:83:b8:88:a6:2e:
         55:dd:d9:21:5a:c5:04:fd:83:1b:37:7a:3b:82:ee:52:92:18:
         af:f8:2a:bc:a9:e6:54:e3:a6:d2:11:05:1a:b0:3b:e9:83:60:
         3f:8a:c0:fa:88:3c:93:55:b7:70:a0:6c:0b:c3:a7:1b:3d:28:
         19:19:15:2f:36:e0:72:97:6f:8c:b4:85:14:ed:ad:1d:ac:4c:
         fe:64:b8:7f:55:be:9e:15:0f:79:65:9a:56:85:bb:37:a2:09:
         30:15:d5:25:3b:c0:2f:71:ba:dd:ba:5c:e2:de:48:69:19:b1:
         ee:be:3d:2c:f8:e2:d0:28:f3:29:13:3e:6a:33:a5:4c:0f:d8:
         66:d7:2b:66:90:d7:1c:c1:bb:de:1a:71:d8:6e:b0:76:97:1b:
         37:6e:d3:c5:e8:93:bd:99:38:cb:e3:69:c5:e8:7d:de:a7:fd:
         ef:0d:44:ee:da:04:96:b5:47:1b:e1:d3:c3:34:13:e0:a4:b2:
         14:06:26:ba:fe:c2:00:5a:d4:06:f6:0b:64:b2:1c:f6:9c:3a:
         52:e0:63:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----