Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb1f8f43-c52e-4042-a968-4a8d65895e94/ef350cf71f9eb61c12d3e0e44e37a3614baf2a54.roa
File:                     ef350cf71f9eb61c12d3e0e44e37a3614baf2a54.roa (raw, json)
Hash identifier:          jHmIRj1/m7/0cepAu55CX1GWdNc0gBs5GsN8Q//WASk=
Subject key identifier:   43:FD:A4:5F:8F:EB:AC:C7:22:4E:64:DE:A4:A9:29:03:B5:85:42:DB
Certificate issuer:       /CN=c1b8d6c6be85be3113453cd65ec60c702005902e
Certificate serial:       05EB65
Authority key identifier: 8C:87:14:08:62:62:2F:0E:FC:CB:38:70:9A:77:23:B5:D5:54:59:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1b8d6c6be85be3113453cd65ec60c702005902e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bb1f8f43-c52e-4042-a968-4a8d65895e94/ef350cf71f9eb61c12d3e0e44e37a3614baf2a54.roa
Signing time:             Wed 24 Mar 2021 14:31:31 +0000
ROA not before:           Wed 24 Mar 2021 14:31:31 +0000
ROA not after:            Tue 24 Mar 2026 14:31:31 +0000
asID:                     270005
IP address blocks:        187.102.242.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387941 (0x5eb65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1b8d6c6be85be3113453cd65ec60c702005902e
        Validity
            Not Before: Mar 24 14:31:31 2021 GMT
            Not After : Mar 24 14:31:31 2026 GMT
        Subject: CN=ef350cf71f9eb61c12d3e0e44e37a3614baf2a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:52:b0:a7:38:4c:43:3e:58:e5:3a:76:9d:2f:
                    76:b6:c5:fe:3c:37:8c:f6:e8:80:d4:6a:ec:7b:66:
                    22:47:17:fa:57:33:4d:56:67:ea:51:2e:b8:18:89:
                    91:c9:71:8a:38:0f:52:06:6b:ca:50:c5:df:c6:bc:
                    a1:c3:d6:69:74:f9:21:b0:a9:8d:12:74:3e:68:78:
                    21:8c:e2:f8:27:88:c6:ec:40:24:bb:92:03:b3:85:
                    65:9e:54:be:f3:ac:69:5e:70:4b:a6:65:78:b4:4f:
                    51:37:05:aa:88:15:ee:cc:4d:e3:f5:ea:1f:bf:1f:
                    9c:56:fd:4d:db:8b:ee:8a:18:c3:2b:c3:67:b3:ad:
                    d1:72:1b:ad:31:c0:7e:13:93:2b:99:07:4c:5c:2a:
                    25:fe:83:9d:f0:b5:63:f5:a0:bb:f6:2d:58:12:06:
                    32:ac:a6:fd:28:9f:1e:e5:1e:df:ab:d1:37:19:f2:
                    c0:9c:a1:de:51:f5:9e:8c:94:df:56:b6:08:a1:36:
                    4a:a2:37:d0:a8:da:fc:aa:11:a2:27:5f:d3:ca:1d:
                    d2:4d:a9:ed:7a:4b:9f:fd:f7:78:01:c1:7c:15:fa:
                    5b:df:03:dc:76:ad:3f:5c:ec:bf:15:af:ec:26:07:
                    b5:9c:02:1c:6b:58:0f:33:4d:2a:d2:22:00:f5:34:
                    dc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FD:A4:5F:8F:EB:AC:C7:22:4E:64:DE:A4:A9:29:03:B5:85:42:DB
            X509v3 Authority Key Identifier:
                keyid:8C:87:14:08:62:62:2F:0E:FC:CB:38:70:9A:77:23:B5:D5:54:59:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1b8d6c6be85be3113453cd65ec60c702005902e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb1f8f43-c52e-4042-a968-4a8d65895e94/ef350cf71f9eb61c12d3e0e44e37a3614baf2a54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bb1f8f43-c52e-4042-a968-4a8d65895e94/c1b8d6c6be85be3113453cd65ec60c702005902e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:62:61:76:fa:8f:6f:28:a2:fa:75:ef:c8:9e:96:71:54:c2:
         f7:a2:78:a2:d7:b2:e4:ac:ca:87:26:73:24:01:b0:63:41:59:
         49:a2:1d:6b:6b:85:e7:43:95:b7:db:06:59:9d:93:1a:bb:f3:
         85:5a:14:e0:d3:52:52:c5:0e:a3:54:6a:d0:f4:a5:62:b9:4d:
         a9:1e:c4:b9:c2:03:59:f2:c5:a0:57:ca:c1:16:26:ec:f2:1b:
         b7:11:5e:47:d5:70:bf:f6:4d:74:f3:d9:98:87:20:1a:9d:f2:
         90:0f:6a:d9:f4:66:38:70:82:58:fb:dc:ac:f3:4e:ed:06:37:
         d5:da:e0:ae:10:c2:56:19:99:1d:0e:66:b0:47:02:8d:78:6b:
         3f:b8:f1:12:6b:aa:34:f6:5d:43:7f:f9:7e:ca:ff:bf:0a:15:
         76:e0:0f:66:35:04:99:cd:a9:7c:b8:2e:14:a9:c1:e5:ef:46:
         db:cd:c4:28:28:22:be:23:f5:07:a3:67:85:d9:88:ee:88:e5:
         39:1e:65:e5:67:94:88:06:e4:0f:af:28:d9:2c:5e:0a:40:bb:
         f5:1b:cf:54:5e:f9:77:fc:65:88:8d:1b:ee:aa:cf:f9:45:01:
         f8:d1:fc:9b:35:96:5e:e4:d1:63:0c:bc:12:d0:1e:20:e9:16:
         79:ee:e2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----