Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b2dff5f5-998f-4878-a7b2-4002a90d55b7/1411c31ad90ac438e2b36fe47258031956008645.roa
File:                     1411c31ad90ac438e2b36fe47258031956008645.roa (raw, json)
Hash identifier:          I0I9rnNoYP1dMoAVEsYT0T4Xtk+dWR2+P27nrw0hmD4=
Subject key identifier:   B7:0C:F6:B3:0C:DB:4F:0A:42:E5:B2:4E:71:20:64:5E:CC:DA:F2:35
Certificate issuer:       /CN=2530e9633e4c0fd319edd31c24cbda0c0b19490c
Certificate serial:       0D9949
Authority key identifier: 8F:74:5C:C7:98:D9:4E:C6:0E:5B:D2:9F:29:31:41:D9:84:27:A4:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2530e9633e4c0fd319edd31c24cbda0c0b19490c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b2dff5f5-998f-4878-a7b2-4002a90d55b7/1411c31ad90ac438e2b36fe47258031956008645.roa
Signing time:             Wed 24 Mar 2021 14:30:48 +0000
ROA not before:           Wed 24 Mar 2021 14:30:48 +0000
ROA not after:            Tue 24 Mar 2026 14:30:48 +0000
asID:                     266749
IP address blocks:        138.118.144.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 891209 (0xd9949)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2530e9633e4c0fd319edd31c24cbda0c0b19490c
        Validity
            Not Before: Mar 24 14:30:48 2021 GMT
            Not After : Mar 24 14:30:48 2026 GMT
        Subject: CN=1411c31ad90ac438e2b36fe47258031956008645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:31:e8:3a:93:ed:6b:37:69:18:39:62:f4:ec:
                    2d:27:b5:42:5c:9a:bc:97:c7:3b:09:8c:0a:9c:c2:
                    b9:03:60:ac:be:9a:d7:cc:03:f0:d9:25:b5:aa:f4:
                    f5:d1:98:d0:70:fb:da:f5:61:de:75:f0:99:0d:80:
                    50:7c:cf:97:54:bc:dc:9c:8c:ef:e0:50:f3:09:6f:
                    21:06:e0:a8:c4:cb:cc:ad:a0:48:86:bc:52:00:19:
                    56:6f:fa:f7:6b:37:4e:74:c8:d7:73:e4:c5:07:29:
                    d7:02:00:9f:2a:4c:8e:82:5f:7a:91:41:44:c1:90:
                    98:b6:f6:33:58:0d:ff:df:1e:76:e3:88:c6:b4:26:
                    f5:d1:b9:43:77:cf:85:f6:ea:76:a0:2c:54:52:48:
                    21:b5:e5:ed:f1:ed:18:a1:13:c2:51:4b:fc:bc:59:
                    65:7c:8f:1f:91:67:8d:51:0a:78:fe:8b:ac:e4:9d:
                    fc:7c:dc:43:3c:9f:f3:fa:84:34:ac:34:cf:5b:3e:
                    b4:48:7c:37:dc:71:ca:60:35:f9:19:3c:ed:22:bb:
                    19:d2:d7:1b:3a:d1:1e:25:69:84:08:01:bb:c8:0b:
                    cb:ec:7f:e3:0a:b2:a3:a0:04:d4:be:f8:80:16:69:
                    8c:c1:2e:f9:64:89:78:97:b0:43:c2:6b:dd:c7:10:
                    b8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0C:F6:B3:0C:DB:4F:0A:42:E5:B2:4E:71:20:64:5E:CC:DA:F2:35
            X509v3 Authority Key Identifier:
                keyid:8F:74:5C:C7:98:D9:4E:C6:0E:5B:D2:9F:29:31:41:D9:84:27:A4:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2530e9633e4c0fd319edd31c24cbda0c0b19490c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b2dff5f5-998f-4878-a7b2-4002a90d55b7/1411c31ad90ac438e2b36fe47258031956008645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b2dff5f5-998f-4878-a7b2-4002a90d55b7/2530e9633e4c0fd319edd31c24cbda0c0b19490c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:69:da:cf:3f:97:9c:6c:18:93:62:31:88:d8:14:9d:f5:3a:
         27:ab:1c:bd:90:41:b2:b5:3e:1b:b4:7c:fb:b7:fa:8b:62:8e:
         f4:7e:f4:58:6a:61:99:8c:a4:70:bb:86:ba:95:0d:92:68:0b:
         81:3e:80:8c:33:d9:94:7b:64:7c:d8:fb:5f:76:5d:ea:8d:74:
         6f:8f:b3:03:ab:c9:5b:a6:36:fd:65:62:40:ab:4c:41:79:ac:
         a5:13:0a:a1:f2:83:d7:6c:40:40:d0:da:da:60:9c:b6:0a:bf:
         42:f6:53:c2:6c:ec:9b:40:2c:8d:89:de:16:83:43:08:2e:4c:
         b6:8b:9d:11:c0:23:7d:36:f5:1f:87:3e:27:3a:4a:5b:b3:27:
         a4:f1:6d:3b:c8:1d:f0:ef:57:08:be:ac:86:74:e9:a0:db:6e:
         5a:10:39:ce:5b:be:ba:2a:cf:f8:12:24:5a:b9:ed:33:f8:a9:
         7a:3a:bd:3a:c7:14:73:7c:3e:91:e6:27:44:a9:f5:33:88:95:
         f2:a9:32:9c:44:71:40:65:d7:62:d1:b9:23:56:de:7b:33:02:
         9c:85:b7:e1:66:4e:e3:72:6b:a8:19:51:31:81:c0:a5:74:ca:
         02:7b:51:b1:6f:d7:16:4c:b4:fd:61:8d:a8:82:c3:b4:82:2f:
         df:47:9d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----