Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba3719ef-e327-489c-a545-54f5ae5c0a8d/7f6fd7113eb532abd1d2f3e58c5bf2194c06ef00.roa
File:                     7f6fd7113eb532abd1d2f3e58c5bf2194c06ef00.roa (raw, json)
Hash identifier:          wOD1sbBEGzIBiFnSTRpkTXaq2CDyoNgWt1/ng7vrkg8=
Subject key identifier:   6E:03:18:22:C5:DC:95:96:A7:85:C1:80:69:0F:85:A1:3C:E5:09:A4
Certificate issuer:       /CN=8ec75d0ca59e365a5c0a68c7f4ea3709b805a441
Certificate serial:       09E2A7
Authority key identifier: 12:96:28:D8:49:3C:C6:4B:7E:44:C0:23:24:58:62:CA:E6:F8:97:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8ec75d0ca59e365a5c0a68c7f4ea3709b805a441.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba3719ef-e327-489c-a545-54f5ae5c0a8d/7f6fd7113eb532abd1d2f3e58c5bf2194c06ef00.roa
Signing time:             Wed 24 Mar 2021 22:50:37 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     264795
IP address blocks:        170.238.40.0/24 maxlen: 24
                          170.238.41.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 647847 (0x9e2a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ec75d0ca59e365a5c0a68c7f4ea3709b805a441
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=7f6fd7113eb532abd1d2f3e58c5bf2194c06ef00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:53:23:51:7d:e7:fa:70:29:f0:ea:f3:8b:
                    14:21:61:a1:19:44:3c:6a:6f:2a:28:ca:4c:e3:5d:
                    bc:8d:36:f0:8e:d7:2d:d6:8c:0e:d0:97:1f:9c:32:
                    b1:a1:e0:17:17:b8:73:2e:e5:7a:22:bd:ab:dc:2f:
                    ff:b5:cc:19:cb:75:62:5a:0f:7e:0b:f4:d8:68:4c:
                    b7:05:11:6b:82:bb:e9:d3:e2:07:f1:4b:2b:d9:50:
                    ea:ce:8a:5b:75:50:88:a3:02:a8:5c:ee:bd:c4:a9:
                    9f:d0:c7:b7:4e:35:c9:7d:45:39:0d:c3:e5:34:66:
                    5a:9d:03:68:d1:2e:66:da:ea:db:8b:31:f2:41:88:
                    b1:1a:ad:d9:6f:dc:7d:ee:8a:1b:0b:4f:6f:c4:06:
                    8a:6f:d6:f4:95:de:33:eb:11:31:d6:c5:f5:f4:89:
                    bc:75:c2:7c:d2:45:58:3c:ee:b1:74:02:3f:ef:ee:
                    74:78:e8:85:a8:6b:f6:e7:5f:c8:3d:0b:8d:f3:82:
                    0a:ca:aa:03:1b:fb:07:52:d6:00:05:5b:63:5d:b7:
                    1f:5e:dc:32:b4:6c:c8:aa:34:a2:b3:0b:09:c4:57:
                    ff:dd:8f:1e:7e:2f:40:60:16:1d:77:45:6c:8e:a0:
                    81:4b:d4:d0:41:dc:57:f4:bc:23:4f:72:ff:49:fe:
                    29:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:03:18:22:C5:DC:95:96:A7:85:C1:80:69:0F:85:A1:3C:E5:09:A4
            X509v3 Authority Key Identifier:
                keyid:12:96:28:D8:49:3C:C6:4B:7E:44:C0:23:24:58:62:CA:E6:F8:97:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8ec75d0ca59e365a5c0a68c7f4ea3709b805a441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba3719ef-e327-489c-a545-54f5ae5c0a8d/7f6fd7113eb532abd1d2f3e58c5bf2194c06ef00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba3719ef-e327-489c-a545-54f5ae5c0a8d/8ec75d0ca59e365a5c0a68c7f4ea3709b805a441.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:c3:18:a9:c9:b9:3e:96:29:04:41:69:66:6f:f6:db:44:c6:
         fc:f1:67:29:79:80:7c:2b:60:9f:7b:0c:53:11:04:97:fd:e0:
         ae:31:c7:6f:27:e7:97:94:24:8d:f0:0c:96:60:b7:0e:23:25:
         be:f6:6d:e7:13:b6:da:79:e8:aa:8f:a8:ca:7d:2c:10:c9:f8:
         a5:68:66:ab:fd:78:66:6c:64:f3:6b:92:7d:5d:2e:c4:09:c6:
         b2:75:82:5c:f2:b4:50:d1:8b:b1:08:03:a9:4f:29:59:99:d9:
         62:00:cf:9d:2e:71:8c:02:de:00:58:e9:f3:e5:5b:6f:9d:24:
         64:60:28:75:8f:f7:59:d9:c1:d5:e6:57:7a:e1:3d:f2:16:9f:
         cf:9e:78:70:ff:b7:aa:b6:95:01:da:6f:7f:bf:6e:24:1c:f4:
         f4:79:eb:68:2f:ad:e9:f5:eb:54:f9:09:e0:96:88:34:66:d6:
         bc:49:bf:aa:bc:d1:ab:99:17:cb:c2:3a:7b:47:49:b2:b8:da:
         eb:0c:c2:dc:1a:c9:65:45:27:9e:e4:77:5b:39:86:ec:b8:f7:
         e2:68:25:2f:19:90:a3:ca:68:06:86:2e:90:d9:45:73:84:8b:
         08:44:e5:f1:73:1a:c1:72:cf:55:82:8d:10:2d:c0:9e:c3:9b:
         8b:16:84:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----