Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bd7e366d-725f-4ab3-9652-857e4a39f4d6/9cccb273001465d9ef0d372fb7fff661b0cb5e4d.roa
File:                     9cccb273001465d9ef0d372fb7fff661b0cb5e4d.roa (raw, json)
Hash identifier:          5+3dt5BCEKF+3IT7j10LsDTaIeWq5kDFkdylFy30uMU=
Subject key identifier:   C6:6D:A8:40:FD:E3:FC:18:4E:61:3F:C2:60:CD:4D:DB:13:49:F9:2A
Certificate issuer:       /CN=406959ed89b2c2889660cebedf0db49b63c24ea7
Certificate serial:       0D3D78
Authority key identifier: FB:77:B8:46:A1:91:C8:5B:6E:19:8F:D0:0A:75:B5:BA:3D:DA:45:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/406959ed89b2c2889660cebedf0db49b63c24ea7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bd7e366d-725f-4ab3-9652-857e4a39f4d6/9cccb273001465d9ef0d372fb7fff661b0cb5e4d.roa
Signing time:             Wed 24 Mar 2021 22:51:59 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     265696
IP address blocks:        131.196.214.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867704 (0xd3d78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406959ed89b2c2889660cebedf0db49b63c24ea7
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=9cccb273001465d9ef0d372fb7fff661b0cb5e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a6:69:63:45:89:df:e4:7b:3a:f0:12:83:1a:
                    98:04:ae:a3:3b:6d:02:68:93:8f:9f:ca:88:20:6d:
                    84:4d:1b:7b:af:6c:05:1b:c4:89:ef:7d:56:3f:2c:
                    84:83:f0:30:4b:8e:96:51:fa:15:b2:f8:3a:05:f6:
                    f1:f9:15:52:a8:23:82:a0:a1:83:2c:bd:cc:a7:04:
                    90:0b:d8:d0:4e:d8:48:fb:62:36:df:b6:d2:54:d2:
                    e1:d8:80:01:c2:6e:8a:e6:5e:62:88:41:27:7f:db:
                    4f:14:a9:d8:74:ac:b1:50:55:7f:28:d9:14:0d:12:
                    36:56:21:91:22:0d:cd:e7:1f:08:a7:40:96:fb:ee:
                    03:5b:1c:ac:db:8e:da:16:a1:f7:7b:4f:10:9e:d3:
                    e6:76:be:fb:2d:f7:4a:43:90:59:61:89:62:21:65:
                    c3:62:0e:e4:96:98:2e:7c:a7:a0:79:05:37:23:05:
                    57:b8:49:16:23:0e:cb:8c:d8:1b:bc:a0:6e:1e:8c:
                    0c:18:bc:72:b9:24:02:6b:d7:dd:74:b7:2d:1e:96:
                    c1:c9:fb:b2:1e:a2:7d:70:4a:68:f4:e8:a1:09:30:
                    98:71:d8:ab:6a:ba:12:05:6c:e0:00:b1:a0:15:e7:
                    ee:29:34:0d:e3:fe:ec:81:e2:c1:75:12:23:39:a5:
                    02:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6D:A8:40:FD:E3:FC:18:4E:61:3F:C2:60:CD:4D:DB:13:49:F9:2A
            X509v3 Authority Key Identifier:
                keyid:FB:77:B8:46:A1:91:C8:5B:6E:19:8F:D0:0A:75:B5:BA:3D:DA:45:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/406959ed89b2c2889660cebedf0db49b63c24ea7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bd7e366d-725f-4ab3-9652-857e4a39f4d6/9cccb273001465d9ef0d372fb7fff661b0cb5e4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bd7e366d-725f-4ab3-9652-857e4a39f4d6/406959ed89b2c2889660cebedf0db49b63c24ea7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:29:4a:24:12:a2:0f:fe:98:30:25:a5:29:a0:4f:08:65:d2:
         2b:2f:d4:cd:42:85:71:ab:88:17:9c:5d:95:d0:ce:70:48:a0:
         ea:5a:39:25:a6:d5:bc:46:04:90:7e:48:94:2b:3d:9b:5c:8a:
         d9:e4:e3:5d:dd:9b:c8:e9:49:fa:46:80:6e:15:d6:8c:7f:72:
         d9:8d:60:22:86:59:c6:93:50:cc:88:18:54:9d:fc:61:1e:7b:
         80:a8:b6:c3:58:66:11:37:77:34:51:38:36:77:54:79:4b:4f:
         28:3e:99:d1:ff:55:b0:5d:85:2d:8d:e7:b8:78:43:00:37:80:
         d2:0b:d1:30:76:85:b0:5c:8e:69:cb:e6:60:b5:89:ec:4c:fe:
         e7:40:5d:6f:41:ea:84:e4:0f:15:c6:f3:ae:ab:76:00:0b:24:
         66:22:3c:11:2f:14:0d:8b:60:40:d1:ce:15:63:0f:77:76:b0:
         b2:88:1e:8b:c5:e4:8e:5a:fd:3b:c7:ed:49:60:6f:02:59:2a:
         9a:0e:76:69:b0:3e:ed:6c:56:ce:52:15:6c:28:de:fb:88:72:
         13:fc:12:77:43:83:b6:0f:cb:0d:18:cf:3d:6a:d0:5e:c5:f8:
         52:ac:70:7e:f1:9f:0c:a0:c0:44:ec:67:07:16:80:64:47:fa:
         e7:e1:8d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----