Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bc50b573-f1df-45fa-b3bc-f128347a745f/9264a2c741f83ca02564ec7d13cce1e6007f67b0.roa
File:                     9264a2c741f83ca02564ec7d13cce1e6007f67b0.roa (raw, json)
Hash identifier:          qx7ywCNVnywqLYiAelCzYkuZJ11zN+MEua4BrFTBTLI=
Subject key identifier:   5C:AD:5A:24:20:22:6E:68:1E:B2:E9:E7:E2:AE:02:3F:EE:7B:4D:5D
Certificate issuer:       /CN=cc0e9110504275d10aa9400f136b4385d1733b3b
Certificate serial:       0C3634
Authority key identifier: FC:B1:D9:DC:8B:88:79:2D:24:C1:61:29:E3:E1:0E:09:9F:17:A1:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc0e9110504275d10aa9400f136b4385d1733b3b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bc50b573-f1df-45fa-b3bc-f128347a745f/9264a2c741f83ca02564ec7d13cce1e6007f67b0.roa
Signing time:             Wed 24 Mar 2021 14:30:11 +0000
ROA not before:           Wed 24 Mar 2021 14:30:11 +0000
ROA not after:            Tue 24 Mar 2026 14:30:11 +0000
asID:                     28100
IP address blocks:        138.59.244.0/22 maxlen: 24
                          2803:6040::/32 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 800308 (0xc3634)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0e9110504275d10aa9400f136b4385d1733b3b
        Validity
            Not Before: Mar 24 14:30:11 2021 GMT
            Not After : Mar 24 14:30:11 2026 GMT
        Subject: CN=9264a2c741f83ca02564ec7d13cce1e6007f67b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:27:06:e4:0d:fc:05:ad:21:57:db:e2:80:3f:
                    0d:23:a2:29:01:d6:9b:67:90:12:e0:ea:00:98:0d:
                    58:77:72:17:aa:41:4e:af:cc:5e:b1:b9:03:e7:5e:
                    1b:f7:04:58:12:0f:86:da:ed:6a:10:6b:0e:2f:c7:
                    06:91:f1:1c:b1:03:6b:3f:a2:72:1b:11:f6:6c:0e:
                    dc:a9:da:0b:5f:e7:5d:7b:bb:9e:a2:dd:1b:6f:77:
                    00:8f:be:85:60:c0:ef:dc:77:83:2a:3d:c8:de:6a:
                    c1:52:fa:f6:1e:61:89:a9:d4:30:e0:97:3e:cb:e4:
                    76:f9:8f:f4:f3:53:d8:8a:f6:b6:a0:af:82:9d:5c:
                    33:42:fa:c4:2c:e7:57:fa:0c:2b:07:14:13:2e:8b:
                    e3:2f:66:7f:4a:46:05:f1:0f:7c:f4:bb:33:c0:a6:
                    6e:5f:53:ce:1a:c0:3f:b0:53:4d:02:f5:80:33:c6:
                    df:08:a9:6e:0a:1a:85:ca:ef:08:bb:90:11:2a:30:
                    67:8f:6c:e6:2a:91:f6:54:11:53:e0:16:44:e7:4c:
                    a9:26:8f:6a:52:e9:f1:8d:9c:7e:3f:0e:67:f2:c1:
                    80:7c:ed:62:32:4a:7e:ea:9b:20:8d:c8:2d:2c:dc:
                    e5:f3:a5:4b:1c:18:4a:42:9e:40:21:c8:dc:f6:c9:
                    91:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AD:5A:24:20:22:6E:68:1E:B2:E9:E7:E2:AE:02:3F:EE:7B:4D:5D
            X509v3 Authority Key Identifier:
                keyid:FC:B1:D9:DC:8B:88:79:2D:24:C1:61:29:E3:E1:0E:09:9F:17:A1:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc0e9110504275d10aa9400f136b4385d1733b3b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bc50b573-f1df-45fa-b3bc-f128347a745f/9264a2c741f83ca02564ec7d13cce1e6007f67b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bc50b573-f1df-45fa-b3bc-f128347a745f/cc0e9110504275d10aa9400f136b4385d1733b3b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.244.0/22
                IPv6:
                  2803:6040::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:92:d2:78:02:d9:be:02:d2:e8:84:2e:3b:8a:6e:f3:e6:b9:
         51:eb:9c:d6:a8:46:81:07:e8:af:11:dd:10:e5:c6:f6:99:77:
         36:d7:c6:3f:4c:94:7a:da:cf:ae:f6:83:fe:3f:b3:49:9e:f8:
         db:40:ae:a6:bb:d8:67:48:13:60:cc:b7:3d:42:c7:73:88:24:
         a8:01:44:18:f7:35:c0:96:cd:d5:1e:53:5e:c3:e6:1b:a2:6b:
         24:83:d4:ae:90:d8:a8:f1:61:80:69:4a:99:35:af:ee:ca:a4:
         c6:4a:3a:0d:f9:62:90:fc:ae:19:8c:12:e1:02:8f:1a:09:b5:
         f5:e0:25:28:2b:1d:75:6a:cb:0b:0c:7c:03:d2:ae:71:7e:d2:
         b3:5f:90:ba:00:00:34:45:67:48:1b:3e:b6:ab:36:25:c0:f8:
         9e:88:f7:5d:3d:17:6f:7b:63:16:90:e5:26:2e:12:10:64:6c:
         ab:46:7c:62:bb:a8:bf:db:b5:4d:08:88:32:fc:59:c9:d3:13:
         2e:f2:9a:a2:12:6c:c5:69:2d:ae:4d:65:a6:b2:b4:eb:87:42:
         cc:b1:59:df:f4:ce:3d:70:29:c6:6d:b5:22:7b:7a:48:fa:ec:
         16:3f:11:7d:38:60:4b:72:03:8b:bf:ae:f6:bd:b6:f0:9b:0e:
         cd:3b:9e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----