Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a4486ecf-5590-4e73-a29d-28083272ba5a/c1be88ad6c9e8bedd4ee032c045d7e9fe5e3aff9.roa
File:                     c1be88ad6c9e8bedd4ee032c045d7e9fe5e3aff9.roa (raw, json)
Hash identifier:          dkGSSoggxaISX8aTiSNaZBSP+2Hx3Gc/wAKiNJGwEB4=
Subject key identifier:   E3:CF:B6:10:30:99:63:9E:2B:59:EA:0B:85:6B:49:D6:18:57:1C:69
Certificate issuer:       /CN=ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8
Certificate serial:       13195C
Authority key identifier: 89:45:5B:B7:4F:80:8D:EB:D1:D4:05:DA:C8:34:E4:27:DC:2B:30:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a4486ecf-5590-4e73-a29d-28083272ba5a/c1be88ad6c9e8bedd4ee032c045d7e9fe5e3aff9.roa
Signing time:             Wed 03 Nov 2021 21:00:23 +0000
ROA not before:           Wed 03 Nov 2021 21:00:23 +0000
ROA not after:            Tue 03 Nov 2026 21:00:23 +0000
asID:                     265696
IP address blocks:        131.196.210.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1251676 (0x13195c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8
        Validity
            Not Before: Nov  3 21:00:23 2021 GMT
            Not After : Nov  3 21:00:23 2026 GMT
        Subject: CN=c1be88ad6c9e8bedd4ee032c045d7e9fe5e3aff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:15:8e:31:9b:be:5b:ba:92:21:32:a7:60:de:
                    7b:f8:6f:96:54:f8:47:25:85:9a:01:42:76:80:53:
                    c0:a1:00:c2:1b:52:c1:4c:2f:78:e9:0d:3f:59:be:
                    f7:91:9f:8d:28:9d:35:53:fe:fb:0a:8f:57:38:b3:
                    8a:ca:2d:b0:4b:f0:2c:42:84:4f:75:f1:4b:5a:92:
                    eb:ba:44:85:05:50:26:fb:6d:36:22:5c:03:ad:56:
                    f3:28:fd:62:46:5c:bd:86:32:dc:f6:ce:75:f6:98:
                    0b:a8:8e:48:ae:0a:fa:9e:cf:18:15:c8:3c:2c:cb:
                    0a:b9:37:33:0b:1b:72:d9:0f:d4:e3:17:10:9a:cc:
                    82:45:99:69:ab:2e:57:40:7c:86:4f:a3:95:85:9f:
                    73:73:8f:39:78:23:24:5e:f3:36:99:38:a5:23:ad:
                    47:df:5f:76:13:50:88:4a:56:bb:f9:d3:c2:0f:b3:
                    99:ca:04:6b:04:ab:f4:04:87:40:be:c5:46:10:fa:
                    1f:c9:fd:e1:75:e8:84:9a:f6:73:8f:65:c4:a8:28:
                    78:3b:29:03:9d:c3:84:36:9d:39:3d:6b:96:8f:45:
                    d8:48:b8:9b:8e:c2:b7:3a:8c:c7:68:b4:de:c2:3f:
                    0c:12:bb:d1:be:ed:70:a5:59:c5:51:70:65:10:33:
                    a0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CF:B6:10:30:99:63:9E:2B:59:EA:0B:85:6B:49:D6:18:57:1C:69
            X509v3 Authority Key Identifier:
                keyid:89:45:5B:B7:4F:80:8D:EB:D1:D4:05:DA:C8:34:E4:27:DC:2B:30:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a4486ecf-5590-4e73-a29d-28083272ba5a/c1be88ad6c9e8bedd4ee032c045d7e9fe5e3aff9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a4486ecf-5590-4e73-a29d-28083272ba5a/ada0a8b1b46121d8dca07b4e5e1efd20b50d60d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:09:a2:94:74:c8:c2:ff:98:c5:dd:dc:c5:a4:24:d6:bf:3c:
         33:7b:0d:2c:8a:1f:72:38:ef:c7:be:75:b9:68:a5:4c:14:16:
         3d:54:45:33:8b:18:92:82:dd:be:64:fe:f2:72:e8:ef:93:8f:
         4c:6a:b3:5f:8f:4f:5f:43:4f:d6:e7:74:e6:99:09:19:5a:3d:
         ad:20:d0:60:1c:8c:df:4e:5e:9e:68:4a:ee:05:37:54:36:ab:
         21:ec:7e:d1:7e:4d:33:27:0e:46:89:8e:91:7c:62:f9:ce:81:
         8c:94:92:84:1e:df:4f:6f:c5:c7:1e:19:c8:50:32:08:3c:d3:
         b0:7f:97:27:9d:2f:a4:0e:26:26:95:56:80:db:2f:d5:ff:a4:
         9a:3d:9c:df:d9:3a:69:cf:58:cb:3c:39:e1:02:d5:42:86:e4:
         c0:a2:84:c0:4f:01:1f:8d:5a:db:97:56:ad:47:53:8f:59:ab:
         4e:56:a9:78:71:2c:70:d3:2b:b2:36:a7:bc:e0:e2:62:e7:f5:
         28:73:02:0e:c5:be:cc:f8:b4:0f:e9:bb:6a:8d:27:15:1e:ed:
         f7:91:52:e7:cc:5e:5e:9f:da:63:d3:35:c6:78:64:58:9a:df:
         09:ee:fd:c9:d0:0b:5a:75:87:64:b4:eb:96:48:f1:ff:80:21:
         a1:65:9e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----