Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/00a15b45f90eed1989bbccbcb7370554a97a4629.roa
File:                     00a15b45f90eed1989bbccbcb7370554a97a4629.roa (raw, json)
Hash identifier:          lLPbaEtiRwYZSnXuMOaM7siH9ltffz5AqujAqv4kqps=
Subject key identifier:   11:08:D4:F7:C6:E1:6B:67:C1:11:92:01:8E:DA:DB:FA:2B:CD:08:1D
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       0DD8CF
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/00a15b45f90eed1989bbccbcb7370554a97a4629.roa
Signing time:             Wed 24 Mar 2021 14:34:59 +0000
ROA not before:           Wed 24 Mar 2021 14:34:57 +0000
ROA not after:            Tue 24 Mar 2026 14:34:57 +0000
asID:                     34991
IP address blocks:        152.204.132.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 907471 (0xdd8cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Mar 24 14:34:57 2021 GMT
            Not After : Mar 24 14:34:57 2026 GMT
        Subject: CN=00a15b45f90eed1989bbccbcb7370554a97a4629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cb:4c:7f:1c:4b:16:26:cb:40:96:99:3f:91:
                    93:aa:69:fe:42:e0:26:01:3e:eb:9d:33:a9:cf:59:
                    12:89:9f:fb:b2:ee:40:4a:4b:ab:a0:97:87:fd:d9:
                    77:50:b6:1d:07:7e:4c:eb:24:f3:13:44:fe:2d:64:
                    48:f0:16:d1:0f:84:e9:11:e2:bb:aa:75:88:92:c5:
                    0b:e0:64:f7:47:fc:db:f8:c5:92:c0:81:67:60:80:
                    29:bb:17:0c:0c:b3:f5:b6:b7:e0:4c:cd:97:94:d0:
                    4c:42:55:92:ed:3a:6b:e4:cb:2f:c3:3b:d7:d7:50:
                    08:c7:ef:6e:f1:c7:11:73:33:ea:a9:07:4a:95:09:
                    d2:89:f7:67:b2:ee:3f:a8:e1:30:93:f2:b7:5a:df:
                    b8:f9:32:7a:d9:b8:4f:0a:b8:a2:33:93:5d:6d:ba:
                    27:77:3c:24:f7:50:0c:1b:98:52:54:a7:45:a2:dc:
                    df:0a:63:5d:d1:cc:01:71:80:26:fa:de:6f:cb:64:
                    c0:51:cc:c1:68:8b:09:37:68:3a:b9:b8:12:e0:34:
                    9f:c0:d6:f9:97:66:e9:70:4a:60:20:e5:98:8d:98:
                    9d:50:5b:97:90:61:69:f2:50:c4:d8:02:fd:e6:b1:
                    98:c4:f9:5b:e6:bb:9c:8c:8e:18:70:b0:f6:64:f5:
                    76:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:08:D4:F7:C6:E1:6B:67:C1:11:92:01:8E:DA:DB:FA:2B:CD:08:1D
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/00a15b45f90eed1989bbccbcb7370554a97a4629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.204.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:04:34:23:17:b1:50:7d:f0:a0:8f:7a:43:9a:e1:28:ff:3b:
         3a:ca:d5:ba:18:8b:2b:af:27:f5:ee:31:e6:bc:e2:15:e0:5d:
         f1:de:5a:b3:7e:e6:c5:81:46:b8:ac:9b:26:1d:98:47:b7:bc:
         22:bb:ac:f6:cb:a0:e2:bc:d0:ce:b0:78:7e:89:b1:02:b8:a1:
         11:f2:78:18:0b:96:8b:0b:cb:96:87:78:86:10:32:ee:b9:cc:
         c9:d4:e9:61:35:0f:c5:b8:fd:74:ff:c7:b8:7d:51:dc:5a:5b:
         1f:4e:cd:51:48:bb:86:f9:f3:a9:96:fd:70:a5:2a:dd:21:6a:
         45:a5:3a:33:80:24:43:9e:a6:e7:98:01:6f:40:cd:fe:94:dc:
         9a:9c:32:0d:67:73:54:12:43:3a:15:2e:6d:46:7e:91:d6:6a:
         3e:e2:11:65:48:0e:0c:8a:03:c4:26:6b:c5:c5:cd:22:84:31:
         64:5a:3b:4a:2d:1d:26:47:9c:29:c3:cf:09:fc:50:5a:88:fe:
         3b:5e:d5:40:0b:9c:3d:87:ae:ab:17:9f:a7:7e:5a:21:72:2b:
         a9:cf:96:bb:7b:53:3c:14:b8:53:84:eb:66:45:49:c4:04:40:
         2b:d5:56:2d:bf:91:2a:3c:6e:f3:0d:63:29:52:5e:d9:8d:6a:
         08:14:7e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----