Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/2258c8f218ef1d3f24f66e7b49ae789a816346e3.roa
File:                     2258c8f218ef1d3f24f66e7b49ae789a816346e3.roa (raw, json)
Hash identifier:          kCSS+2rmrJfwe7phFEfpZoyjzGRpPpWT7TUAKEupyws=
Subject key identifier:   A3:26:48:0C:6F:91:FB:E9:21:33:7D:60:B6:D2:1A:3A:2B:D1:0E:E0
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       0DE6B6
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/2258c8f218ef1d3f24f66e7b49ae789a816346e3.roa
Signing time:             Wed 24 Mar 2021 14:34:59 +0000
ROA not before:           Wed 24 Mar 2021 14:34:57 +0000
ROA not after:            Tue 24 Mar 2026 14:34:57 +0000
asID:                     64322
IP address blocks:        190.254.21.192/26 maxlen: 26

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 911030 (0xde6b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Mar 24 14:34:57 2021 GMT
            Not After : Mar 24 14:34:57 2026 GMT
        Subject: CN=2258c8f218ef1d3f24f66e7b49ae789a816346e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1e:a3:3c:d9:05:af:bd:0e:b6:80:57:a2:fd:
                    4c:a1:e9:ec:40:8f:b6:f1:76:6d:81:9e:d7:99:03:
                    68:f1:52:66:cb:0b:89:e9:f0:19:34:77:05:35:0a:
                    f0:41:26:29:a1:94:63:34:e1:60:e9:c3:f0:95:5b:
                    da:dd:f5:76:27:ca:16:fb:3a:e7:06:6d:f2:3d:7c:
                    c1:7b:f8:46:5b:79:73:91:c6:f6:d3:2e:99:57:e7:
                    73:09:ca:12:fa:33:f7:80:96:20:d3:1b:e7:7d:cc:
                    67:f7:4c:31:8d:ec:f0:1e:8f:81:1c:d3:78:e7:9f:
                    ee:9f:f2:6c:f2:35:d7:84:a1:60:26:30:1c:47:db:
                    5d:d4:0e:61:1e:ac:e7:9e:bb:81:49:65:64:e3:20:
                    68:bc:27:76:4b:e9:18:45:4a:01:41:f5:65:50:10:
                    b0:63:4c:06:f2:47:4c:98:d1:16:0d:67:fc:a0:2d:
                    9b:78:b4:6e:af:d3:59:8b:cf:ab:91:19:6a:d6:02:
                    67:59:a0:e7:00:e7:3d:6d:2a:8c:b6:cb:ff:d1:2b:
                    0a:8b:75:0f:d0:d0:80:96:d1:8d:2c:08:ee:44:80:
                    0b:9e:93:89:dd:12:1b:ad:aa:80:6f:84:ac:d0:88:
                    ef:ac:41:66:5e:0c:4c:97:85:d6:65:5f:4a:04:39:
                    74:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:26:48:0C:6F:91:FB:E9:21:33:7D:60:B6:D2:1A:3A:2B:D1:0E:E0
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/2258c8f218ef1d3f24f66e7b49ae789a816346e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.254.21.192/26

    Signature Algorithm: sha256WithRSAEncryption
         04:c6:29:4f:6a:07:13:53:5a:ea:16:88:c0:a1:90:71:d9:d9:
         37:05:ad:86:ca:b7:80:80:13:d6:9a:c3:87:32:93:12:d3:e5:
         61:20:8c:68:13:a1:34:07:6c:80:d7:e0:b7:c6:24:7b:f4:61:
         da:f2:04:c3:98:de:c8:36:e3:21:f3:cf:93:ea:d7:55:d5:9d:
         06:80:12:07:41:81:69:b2:26:26:a2:a3:99:86:66:3b:70:7f:
         fe:9e:f5:96:af:9d:67:ed:b7:b4:60:d7:b4:78:e4:92:d9:24:
         79:0d:74:af:ab:ce:a9:ae:66:1d:44:a0:f0:3d:3a:00:c5:46:
         89:2d:ad:95:96:7a:bb:05:dc:97:6d:8b:e6:c5:cb:73:7a:32:
         45:2f:53:e1:c5:a4:ee:5f:e2:01:c5:4c:e2:dc:8b:e1:dd:a6:
         16:b7:e4:ba:54:8a:bb:e6:ba:19:4e:28:2c:30:2f:e6:20:d4:
         dc:86:09:c5:ef:76:dc:5f:90:9a:cf:26:36:0f:ba:6b:ec:c0:
         f9:a6:eb:c8:4c:60:26:d2:20:66:fb:cf:9d:f0:b3:8c:0c:46:
         c7:a4:b7:cc:20:4e:61:09:24:99:7b:1d:5e:c8:43:03:8e:fe:
         92:9b:a1:d1:9c:59:4f:4a:f6:1c:3d:c9:77:84:63:9e:d4:9d:
         b3:f6:58:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----