Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb1f8f43-c52e-4042-a968-4a8d65895e94/baac73eee22ffe31ff0396f8bbd6c634f356c4c7.roa
File:                     baac73eee22ffe31ff0396f8bbd6c634f356c4c7.roa (raw, json)
Hash identifier:          UaVVMd+2Mo6OS0VyBDuj84cLgpRJPF/K7r3rC3r2Svc=
Subject key identifier:   D8:6B:55:21:B1:5F:6B:6D:66:43:4D:F8:A4:15:4F:4D:C0:18:E9:9B
Certificate issuer:       /CN=c1b8d6c6be85be3113453cd65ec60c702005902e
Certificate serial:       05E8BA
Authority key identifier: 8C:87:14:08:62:62:2F:0E:FC:CB:38:70:9A:77:23:B5:D5:54:59:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1b8d6c6be85be3113453cd65ec60c702005902e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bb1f8f43-c52e-4042-a968-4a8d65895e94/baac73eee22ffe31ff0396f8bbd6c634f356c4c7.roa
Signing time:             Wed 24 Mar 2021 14:31:31 +0000
ROA not before:           Wed 24 Mar 2021 14:31:31 +0000
ROA not after:            Tue 24 Mar 2026 14:31:31 +0000
asID:                     270005
IP address blocks:        187.102.240.0/22 maxlen: 24
                          2803:e1e0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387258 (0x5e8ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1b8d6c6be85be3113453cd65ec60c702005902e
        Validity
            Not Before: Mar 24 14:31:31 2021 GMT
            Not After : Mar 24 14:31:31 2026 GMT
        Subject: CN=baac73eee22ffe31ff0396f8bbd6c634f356c4c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4e:a7:56:25:10:4b:27:87:cf:b4:0a:7f:b3:
                    37:a4:eb:1a:e2:88:2c:e4:cf:19:a5:5f:b7:8e:df:
                    42:47:95:07:4c:8c:22:53:67:33:00:73:2a:cc:e4:
                    7e:a1:16:d7:95:e7:5a:0b:dc:47:94:70:d8:30:ef:
                    73:0d:81:27:9f:98:23:b9:41:29:84:9d:7d:3d:ee:
                    84:94:23:29:54:96:17:ae:15:dc:2c:2b:66:41:90:
                    b9:5b:9c:7c:dc:8e:7b:22:df:76:3f:5d:3e:2b:43:
                    8f:e1:46:a0:3f:38:20:0a:6e:30:f8:da:8f:7a:06:
                    e9:74:53:a4:36:cc:9f:45:a9:01:75:0b:cf:ef:d6:
                    3a:c3:a0:1f:e5:e1:7f:42:2c:29:7a:be:36:41:a9:
                    6e:41:8a:5c:37:5a:17:5c:c6:5e:26:51:07:7f:54:
                    4b:d2:99:b7:bd:fe:fc:f9:3c:45:db:da:95:7f:d9:
                    dd:d3:a7:32:19:62:1d:5e:43:f9:76:1b:09:a6:40:
                    c9:3e:43:99:46:d7:3a:32:8d:2f:a2:ac:8c:04:01:
                    66:ff:9a:e6:36:36:37:70:a1:b3:83:d3:4c:43:5b:
                    48:15:d1:58:ad:4a:05:d7:5c:e5:fb:b9:c0:b4:86:
                    8e:5a:9f:3c:f3:3b:26:07:59:1d:37:98:f9:f9:d3:
                    65:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6B:55:21:B1:5F:6B:6D:66:43:4D:F8:A4:15:4F:4D:C0:18:E9:9B
            X509v3 Authority Key Identifier:
                keyid:8C:87:14:08:62:62:2F:0E:FC:CB:38:70:9A:77:23:B5:D5:54:59:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1b8d6c6be85be3113453cd65ec60c702005902e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb1f8f43-c52e-4042-a968-4a8d65895e94/baac73eee22ffe31ff0396f8bbd6c634f356c4c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bb1f8f43-c52e-4042-a968-4a8d65895e94/c1b8d6c6be85be3113453cd65ec60c702005902e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.240.0/22
                IPv6:
                  2803:e1e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:06:f9:c8:b1:43:93:d7:4e:6e:a1:94:a8:84:74:46:3d:b7:
         66:d1:bd:2a:be:12:f7:6c:82:79:1f:df:45:a0:03:ee:65:62:
         91:ce:60:89:66:f9:92:79:bb:c8:9c:3b:0d:66:c0:44:d0:51:
         c7:b7:40:ef:7a:0a:a9:2a:a4:6d:fc:d9:43:09:c1:ba:61:bf:
         a9:66:6d:96:eb:b7:8d:0d:38:fb:7e:ee:e5:d4:92:89:d7:57:
         2b:35:fe:35:97:6f:07:85:fb:33:31:4d:14:64:47:73:fb:36:
         01:b5:7d:ae:64:8f:a2:f2:3b:88:3c:4b:49:0a:fd:1a:7b:59:
         16:66:c6:e0:a7:5a:44:15:27:1a:9f:f5:2a:d6:8c:3d:d7:36:
         d6:2d:67:03:64:35:5b:03:17:41:4d:21:9e:c9:e0:15:39:f5:
         ea:4f:e8:a4:97:68:a3:9e:69:88:ed:46:2f:f3:c8:4a:cc:ec:
         23:88:81:0f:9b:41:ce:d8:0a:b1:38:35:04:6e:0f:d5:4f:07:
         9e:47:fe:cb:39:ef:6b:46:f9:22:9b:1c:ba:61:3e:7a:07:ca:
         0f:17:66:75:69:fa:ee:f9:5f:dc:8a:d9:b5:97:76:a2:d3:c5:
         bf:52:bd:39:71:0b:f8:dd:f9:d1:c0:47:9a:5b:a0:31:56:23:
         39:8c:b3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----