Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/12cc98f4cca4782bc650b9c52bed804def0dcf81.roa
File:                     12cc98f4cca4782bc650b9c52bed804def0dcf81.roa (raw, json)
Hash identifier:          8jPjONmWCGE/GPBgzeYFdTaXwCcYOM+IuWhfGJcoRJg=
Subject key identifier:   CC:97:B7:85:D4:F1:4A:0D:35:B8:E7:A4:A1:08:54:4E:1B:48:EC:EC
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       0D9101
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/12cc98f4cca4782bc650b9c52bed804def0dcf81.roa
Signing time:             Wed 24 Mar 2021 14:35:13 +0000
ROA not before:           Wed 24 Mar 2021 14:35:11 +0000
ROA not after:            Tue 24 Mar 2026 14:35:11 +0000
asID:                     19429
IP address blocks:        186.30.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889089 (0xd9101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Mar 24 14:35:11 2021 GMT
            Not After : Mar 24 14:35:11 2026 GMT
        Subject: CN=12cc98f4cca4782bc650b9c52bed804def0dcf81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ee:63:3d:b5:af:f8:03:da:73:c5:7c:ac:07:
                    f7:4b:00:d0:80:e1:54:e8:b2:c9:0d:b2:8e:7d:42:
                    b9:54:bf:2c:e6:3d:9a:df:61:8c:00:de:ab:e5:f0:
                    a9:89:ce:43:40:a3:ce:59:e6:9e:fd:82:83:d0:c0:
                    af:88:5f:69:01:8f:d8:c0:04:9a:bf:af:6f:dd:2f:
                    c0:ff:83:35:44:0e:d6:86:4e:9f:4e:54:65:65:35:
                    9a:c6:2b:99:a3:29:75:da:d2:14:79:48:fc:8c:67:
                    50:ca:6f:fe:4a:1d:33:31:ce:71:7c:a2:4d:43:be:
                    ec:3f:2c:27:e3:a9:bd:be:02:e9:17:19:c4:bf:93:
                    d4:aa:f4:d9:61:c3:85:01:a5:d4:8d:2b:97:cd:8d:
                    28:15:08:cf:8d:6d:67:73:d1:2a:f4:e1:0b:a6:4c:
                    ea:c3:63:fa:9b:ba:8e:27:00:0b:5f:37:56:2e:eb:
                    ec:5d:db:6d:00:77:a0:49:50:37:cb:45:74:82:bd:
                    83:7a:d1:c1:9e:da:92:61:e0:cf:50:f9:a9:c4:a3:
                    3d:3b:63:db:4d:80:a4:ca:4b:77:98:57:cb:ca:b0:
                    3d:a4:e1:32:d9:4c:e7:00:6a:f2:a2:84:9d:98:56:
                    71:4c:02:d7:48:d4:30:67:83:46:90:15:d9:d9:bd:
                    b3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:97:B7:85:D4:F1:4A:0D:35:B8:E7:A4:A1:08:54:4E:1B:48:EC:EC
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/12cc98f4cca4782bc650b9c52bed804def0dcf81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.30.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         70:98:04:b0:68:b3:84:f6:b2:04:c6:38:ac:cc:25:23:8d:ea:
         c3:9d:fc:24:2e:f9:41:b8:9e:51:44:22:0c:af:35:70:49:a1:
         6d:97:ec:dd:9b:bb:6c:3e:67:01:f0:13:99:0a:d9:03:a9:0b:
         7f:07:07:6e:d8:b5:25:a0:9e:6a:63:cf:88:13:fb:d4:de:c1:
         82:9f:e4:7d:00:1b:37:75:39:1c:a4:b6:f5:63:92:98:76:2b:
         4b:69:ff:ca:c5:bf:1e:91:ec:10:e1:a8:ce:7c:14:37:48:b0:
         10:f6:f7:9e:8c:2b:49:5e:77:85:cf:69:fc:61:cd:50:f5:1e:
         b4:0a:37:30:12:07:f7:6e:45:56:d0:64:5f:93:55:67:68:6e:
         c0:07:0f:7c:18:e5:ed:d5:a1:74:db:1f:56:4d:0e:7c:c9:4f:
         03:5e:46:ea:6c:ba:c6:96:00:e1:50:79:53:7d:07:74:63:9b:
         60:02:5b:28:f3:b0:82:a7:2b:94:20:f2:48:59:c9:21:66:86:
         9d:14:64:a9:3b:c8:20:07:34:cc:7c:57:3d:b0:95:30:a3:06:
         16:88:86:6c:f5:b1:5e:bd:fb:4d:35:66:62:c0:1f:85:6b:4e:
         08:c2:a1:b4:ae:b8:30:b1:61:df:06:7e:02:ce:48:55:61:15:
         52:a8:66:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----