Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1724a6f-1a4b-433c-8582-7de7e0a913e0/b0b9abe80bed702d5c7b8835d8b5a65f57142641.roa
File:                     b0b9abe80bed702d5c7b8835d8b5a65f57142641.roa (raw, json)
Hash identifier:          ouLdVirA2qIe8Fdbg1X891uNIggfH0K1jHQV/9f8y2s=
Subject key identifier:   0B:40:A2:45:CD:FB:C3:1C:2F:19:9F:B8:B9:D1:80:84:4F:5A:3D:47
Certificate issuer:       /CN=75ea5c79a4b285a7ff9304a161ca92b6cd0c8479
Certificate serial:       051C44
Authority key identifier: 5B:8E:39:32:2C:6D:5E:0D:CE:FA:18:7C:F0:90:BB:DC:03:DE:F3:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75ea5c79a4b285a7ff9304a161ca92b6cd0c8479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c1724a6f-1a4b-433c-8582-7de7e0a913e0/b0b9abe80bed702d5c7b8835d8b5a65f57142641.roa
Signing time:             Wed 24 Mar 2021 14:30:18 +0000
ROA not before:           Wed 24 Mar 2021 14:30:18 +0000
ROA not after:            Tue 24 Mar 2026 14:30:18 +0000
asID:                     19889
IP address blocks:        161.22.0.0/19 maxlen: 24
                          181.118.224.0/19 maxlen: 24
                          190.3.128.0/19 maxlen: 24
                          190.57.192.0/19 maxlen: 24
                          200.85.96.0/19 maxlen: 24
                          2800:6d0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334916 (0x51c44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75ea5c79a4b285a7ff9304a161ca92b6cd0c8479
        Validity
            Not Before: Mar 24 14:30:18 2021 GMT
            Not After : Mar 24 14:30:18 2026 GMT
        Subject: CN=b0b9abe80bed702d5c7b8835d8b5a65f57142641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:54:32:fe:4a:5d:75:21:10:cb:3d:61:a6:78:
                    b3:c4:77:7a:67:a8:a7:21:0a:d7:00:0e:34:ff:74:
                    98:6d:72:b5:6f:74:86:34:5e:b1:6a:a6:15:2f:f8:
                    72:f5:a6:bf:d1:b4:80:66:ef:a7:0c:0d:da:6c:48:
                    70:dc:d4:92:6a:20:0c:79:05:8d:9e:34:6d:93:e7:
                    04:c4:f1:8b:4b:93:25:62:98:a8:c5:d4:a5:34:c8:
                    2e:54:7f:60:0a:00:05:33:0a:55:d4:e9:ca:d1:03:
                    b1:42:d0:7a:14:11:c7:93:58:8a:53:58:c1:ac:58:
                    73:30:ab:94:74:c3:09:c4:75:bf:e0:f9:bc:f4:5b:
                    9a:9c:b8:46:68:8c:6d:fd:3c:c0:06:57:6e:f8:95:
                    51:de:aa:bb:3d:0c:18:33:e0:1a:9f:2a:2e:36:f4:
                    c2:df:69:8e:13:4c:e7:b9:7e:47:41:dd:06:ec:90:
                    2a:72:b6:97:06:53:56:61:99:c6:c0:ef:44:6d:89:
                    88:4d:28:b8:1c:ee:5a:a4:8a:7e:27:dc:0e:0b:97:
                    b5:7c:ac:ae:eb:60:8e:66:90:73:a5:e5:0d:62:a0:
                    c3:5c:a4:21:f8:73:d3:12:c2:a8:94:ac:03:a3:4c:
                    b8:e8:c2:f0:b2:b3:d1:c0:a5:73:26:64:97:4f:fe:
                    90:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:40:A2:45:CD:FB:C3:1C:2F:19:9F:B8:B9:D1:80:84:4F:5A:3D:47
            X509v3 Authority Key Identifier:
                keyid:5B:8E:39:32:2C:6D:5E:0D:CE:FA:18:7C:F0:90:BB:DC:03:DE:F3:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75ea5c79a4b285a7ff9304a161ca92b6cd0c8479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1724a6f-1a4b-433c-8582-7de7e0a913e0/b0b9abe80bed702d5c7b8835d8b5a65f57142641.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c1724a6f-1a4b-433c-8582-7de7e0a913e0/75ea5c79a4b285a7ff9304a161ca92b6cd0c8479.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.0.0/19
                  181.118.224.0/19
                  190.3.128.0/19
                  190.57.192.0/19
                  200.85.96.0/19
                IPv6:
                  2800:6d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:0e:db:bf:8f:af:5b:47:74:29:23:23:75:e4:21:c7:98:96:
         02:a8:e5:ae:fd:a9:fe:d5:8c:26:53:fe:aa:7b:40:db:9c:56:
         20:ba:2f:88:db:07:83:8d:21:82:a6:0b:05:8d:e0:d4:2f:74:
         85:ad:c3:1b:65:d1:f7:9d:dd:5b:b6:91:d9:93:7d:22:3e:06:
         c3:51:c7:87:b3:d5:de:03:cd:70:26:80:c8:c7:30:f8:24:e3:
         84:b9:d5:2e:84:63:64:e3:2d:ee:b7:47:75:53:d4:b8:48:23:
         af:7b:c6:34:fc:26:61:79:d3:c6:d2:bc:8b:00:69:34:9a:d1:
         a4:e0:38:09:6e:ff:66:f2:5f:01:fe:24:38:5d:23:f3:09:0f:
         d4:dc:0b:a2:a0:8d:ee:ca:45:09:79:54:d3:f6:8b:35:74:45:
         96:17:be:13:86:22:5b:58:7f:96:80:ee:27:cc:fd:82:22:0a:
         45:53:93:97:6f:0e:33:e8:09:6f:41:7d:dc:7d:5d:df:d7:d1:
         bc:93:41:9c:66:2b:3d:3f:2d:4d:00:11:1e:c0:c2:3d:b2:6e:
         fd:d8:bd:03:60:76:e2:54:1e:b7:f4:2a:31:9b:8a:f8:51:13:
         fd:ce:7c:bc:f2:dc:ab:39:c5:36:0b:93:ac:3a:7e:ee:bc:35:
         43:5d:3f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----