Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/aaa12bd57a8610709777e3feb6276f3d6a328bf2.roa
File:                     aaa12bd57a8610709777e3feb6276f3d6a328bf2.roa (raw, json)
Hash identifier:          n774ayB+Ne8PR2sxqhCgRnJ3vzeYf+50BioK1tcNtOo=
Subject key identifier:   5A:47:63:CD:D7:E0:5A:E7:D4:DD:4F:D1:AF:9F:4D:7D:DD:C9:6C:6F
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       09F046
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/aaa12bd57a8610709777e3feb6276f3d6a328bf2.roa
Signing time:             Wed 24 Mar 2021 14:43:17 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     18734
IP address blocks:        201.140.96.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 651334 (0x9f046)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=aaa12bd57a8610709777e3feb6276f3d6a328bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9f:d8:f2:50:28:ba:10:b8:7c:20:b6:11:8b:
                    2d:f6:4c:e0:9f:f2:51:92:67:9e:f2:b5:a3:88:5d:
                    b1:14:9d:30:f7:e8:5b:e0:39:fd:c2:73:60:33:9d:
                    05:b3:0a:93:d2:eb:62:ad:99:2f:8b:63:63:9f:84:
                    d3:ce:2b:dc:20:bc:44:19:c2:3d:6e:2f:d3:e6:e1:
                    be:f6:b0:39:f3:67:8a:74:6e:83:aa:0b:bb:cb:cc:
                    a8:0b:87:d6:c3:c1:ce:a0:0c:c1:5c:b0:f2:73:25:
                    96:6b:ed:40:8a:35:5b:2f:95:bc:fb:30:e5:50:e1:
                    02:c6:e4:60:17:0c:61:1a:fd:6d:48:0a:aa:c8:92:
                    bf:c9:98:84:f1:c1:a0:c4:8d:71:a0:2a:29:cc:ea:
                    ee:e3:00:88:30:dc:34:59:2e:e0:dc:eb:1e:1a:04:
                    78:78:86:ce:7e:97:10:9d:66:38:4d:1f:28:14:74:
                    9b:73:95:36:1b:69:5e:82:8e:a1:24:3a:b2:df:6d:
                    eb:26:93:4d:eb:f7:a4:2c:9b:f5:46:d1:5d:42:c7:
                    6c:71:7f:67:3d:2d:2c:8b:59:3b:21:d0:08:a5:5f:
                    c9:a4:ef:97:05:4c:f8:8c:72:91:bb:a3:f3:af:aa:
                    38:36:ff:29:63:7e:b2:ac:c0:08:5e:27:23:30:db:
                    8a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:47:63:CD:D7:E0:5A:E7:D4:DD:4F:D1:AF:9F:4D:7D:DD:C9:6C:6F
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/aaa12bd57a8610709777e3feb6276f3d6a328bf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6a:db:d1:88:2e:6b:b5:12:d4:b6:3e:7c:9a:20:c6:fb:35:15:
         70:3a:fa:fc:76:58:85:ad:49:64:f4:53:cf:cf:3a:f5:f8:ff:
         9d:95:04:a0:bc:a4:69:89:03:5e:51:a6:0a:be:22:75:e0:25:
         83:cb:a8:3d:88:0d:6d:5e:51:7d:36:80:97:8f:35:ce:6e:91:
         e6:dc:0d:23:6a:50:ab:2b:f5:e1:c2:64:3a:91:f8:4e:62:82:
         40:a0:26:e5:d5:41:dd:5e:ac:13:6b:4a:94:b6:e3:e5:52:52:
         bc:88:f7:c9:4e:70:ad:6d:1c:1f:70:a9:46:6f:23:4e:50:ef:
         ef:3d:71:79:d9:1a:8a:a8:8c:70:e5:7b:7b:12:64:55:89:58:
         19:aa:4d:71:5d:97:55:30:17:a3:3c:84:a4:75:23:38:91:81:
         77:5f:c8:c7:c1:7a:89:9d:e4:5a:25:3a:85:aa:db:a8:d9:46:
         47:2f:b8:b3:82:bc:69:65:44:41:44:54:72:a6:cf:b0:9d:aa:
         e9:98:4c:ec:eb:ea:35:a2:c8:11:a2:3b:1a:02:a8:95:63:16:
         98:d8:97:c6:0b:63:74:64:13:bb:6d:0c:50:a0:59:66:86:e8:
         94:0e:1c:4d:7a:d7:f2:84:9e:f4:2c:ca:7f:b7:fa:bb:db:e9:
         b3:a1:fc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----