Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9c54551-1957-45aa-aad3-c1765049ba76/3cb92f82249d2ec990ba5788df1f23946509678e.roa
File:                     3cb92f82249d2ec990ba5788df1f23946509678e.roa (raw, json)
Hash identifier:          zy++WQUvh9rQdyJ2x3SJUNzWycDqqFnyFtgZ0BsVAvg=
Subject key identifier:   D3:56:43:30:4C:C7:A8:7F:6E:EB:D2:2A:45:D9:50:79:A9:4D:F8:A0
Certificate issuer:       /CN=466e43c330240907a2659f129b7552a9a8972ea2
Certificate serial:       0A01
Authority key identifier: 30:D7:9D:1F:5F:2A:04:ED:DF:25:CD:16:DC:A6:96:E5:65:07:97:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/466e43c330240907a2659f129b7552a9a8972ea2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b9c54551-1957-45aa-aad3-c1765049ba76/3cb92f82249d2ec990ba5788df1f23946509678e.roa
Signing time:             Wed 30 Jun 2021 13:38:15 +0000
ROA not before:           Wed 30 Jun 2021 03:00:00 +0000
ROA not after:            Fri 30 Jun 2023 03:00:00 +0000
asID:                     271872
IP address blocks:        128.201.224.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2561 (0xa01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466e43c330240907a2659f129b7552a9a8972ea2
        Validity
            Not Before: Jun 30 03:00:00 2021 GMT
            Not After : Jun 30 03:00:00 2023 GMT
        Subject: CN=3cb92f82249d2ec990ba5788df1f23946509678e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b5:b2:8d:ec:30:23:cf:a5:03:57:83:50:0e:
                    9a:71:93:3e:e9:98:98:37:d2:9c:d2:d9:96:46:12:
                    ea:76:29:88:59:26:43:f0:6f:28:86:70:b8:b4:cf:
                    26:a3:6c:fc:ce:11:fe:91:99:7b:05:e1:ff:9b:79:
                    d8:f0:2e:f4:47:22:94:38:b5:d2:17:33:76:0b:e1:
                    61:2f:7e:37:eb:a0:80:d2:44:dc:34:41:16:50:50:
                    70:8e:10:fd:4b:dc:9e:41:c0:d7:86:62:8a:9d:bb:
                    1f:00:9a:ab:99:9a:84:eb:d1:62:33:a1:7f:45:34:
                    40:2a:1d:89:52:70:bd:f7:59:58:ec:6d:8e:a8:61:
                    68:b9:1b:a8:03:04:c6:67:b3:f7:5e:2a:08:d5:14:
                    76:a2:37:69:cd:58:ce:a7:26:69:f2:77:5a:5d:2a:
                    87:32:86:39:5a:c5:22:c0:9d:fa:0c:df:35:44:06:
                    b9:7d:c9:6c:50:6d:a3:ba:4b:62:4a:80:42:d6:ee:
                    81:e6:81:d4:83:c0:77:be:2b:6f:88:4e:8c:07:af:
                    e2:43:93:24:f3:6d:e4:c1:b5:1b:a9:00:26:97:60:
                    ab:5a:99:24:35:de:89:ac:f9:02:7d:f8:55:f7:06:
                    53:dd:0a:f2:b0:68:53:ec:ce:6d:ea:a3:7e:ef:38:
                    1d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:56:43:30:4C:C7:A8:7F:6E:EB:D2:2A:45:D9:50:79:A9:4D:F8:A0
            X509v3 Authority Key Identifier:
                keyid:30:D7:9D:1F:5F:2A:04:ED:DF:25:CD:16:DC:A6:96:E5:65:07:97:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/466e43c330240907a2659f129b7552a9a8972ea2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9c54551-1957-45aa-aad3-c1765049ba76/3cb92f82249d2ec990ba5788df1f23946509678e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b9c54551-1957-45aa-aad3-c1765049ba76/466e43c330240907a2659f129b7552a9a8972ea2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:70:78:1e:a7:37:76:aa:b3:15:5e:dc:43:a7:e7:6d:46:03:
         e3:21:d3:a9:ea:a6:f0:b5:87:58:92:5e:5e:44:7d:2a:39:ef:
         7c:75:eb:34:0b:c4:11:67:d0:0c:c3:5c:86:4a:cc:ac:d3:6e:
         51:72:a0:e4:d8:91:73:eb:95:24:5b:72:f4:7b:b0:51:fb:35:
         e4:03:62:d0:73:a7:30:2a:d1:95:14:61:56:89:99:0a:db:07:
         5e:a2:10:5b:85:6c:9d:39:a9:b6:55:5a:49:b4:57:34:d2:97:
         34:0a:d9:c9:9e:e0:cd:bd:e4:c3:5e:62:58:62:35:9d:47:96:
         da:b4:fc:ef:3c:2c:57:e2:2a:29:70:37:ae:3c:9a:58:a4:ac:
         15:3d:dc:c7:6d:40:63:26:bc:18:06:57:0d:b0:75:cc:93:e6:
         e7:a0:e6:7e:89:d8:50:48:3e:17:86:44:59:7b:7a:b9:13:9e:
         d2:ff:0f:7a:01:fd:f3:bf:21:11:f5:67:d4:c4:c1:27:a0:d2:
         bc:7b:c8:c4:5d:ed:37:6f:dd:04:94:a8:06:bc:82:f4:91:7a:
         33:54:86:a2:ee:78:7b:fb:3b:01:d1:db:bd:6c:5b:fe:d8:c8:
         49:e3:a5:e4:94:61:a9:7f:7e:2f:19:ae:71:f2:7b:df:34:6a:
         4b:b6:b0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----