Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/923d3b0f69946719395bf307260c00a5d17fddd1.roa
File:                     923d3b0f69946719395bf307260c00a5d17fddd1.roa (raw, json)
Hash identifier:          JVy6sQYl806uDqS+p+hA3N32B5VcB9IlvgBeNhcFws8=
Subject key identifier:   CD:97:79:8E:02:FF:4E:0B:1A:D8:93:64:E1:E2:3D:1F:FC:C5:4C:5F
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       0DDC28
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/923d3b0f69946719395bf307260c00a5d17fddd1.roa
Signing time:             Wed 24 Mar 2021 14:34:59 +0000
ROA not before:           Wed 24 Mar 2021 14:34:57 +0000
ROA not after:            Tue 24 Mar 2026 14:34:57 +0000
asID:                     12956
IP address blocks:        190.66.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 908328 (0xddc28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Mar 24 14:34:57 2021 GMT
            Not After : Mar 24 14:34:57 2026 GMT
        Subject: CN=923d3b0f69946719395bf307260c00a5d17fddd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bf:d2:bc:16:3a:30:2b:a7:96:07:3b:f1:0e:
                    06:c9:ca:ae:bf:ba:0c:24:69:5c:bf:53:f0:29:f7:
                    f8:ee:2a:b2:55:de:76:6f:1b:4a:14:5e:4d:6a:e3:
                    e6:7a:65:86:36:40:0b:61:c3:37:4f:10:cd:25:df:
                    25:7b:d9:b5:0e:8c:ad:93:f6:fe:4c:83:0b:fd:89:
                    ac:f8:25:dd:44:11:84:14:48:23:60:5c:e8:8c:a5:
                    86:fa:05:7a:bd:dd:49:e8:57:f6:41:ed:97:d2:b8:
                    61:ec:fe:a6:03:40:21:6b:d3:6c:78:43:23:33:ec:
                    2b:ae:dc:4e:f8:85:99:c0:94:91:40:90:f9:a4:3c:
                    30:d3:9d:3a:71:42:78:8d:d7:f1:6c:26:fe:aa:15:
                    73:16:69:de:97:8c:ce:7b:21:56:e8:1e:7b:f9:43:
                    3b:c2:f9:38:70:66:e4:dc:93:0b:78:d3:49:45:c9:
                    9b:84:0a:2a:52:a4:a5:a4:02:20:cd:89:dd:f2:8f:
                    23:f7:11:7c:6a:e0:c5:21:33:fb:b8:a6:97:c2:2c:
                    05:4d:91:d1:d2:fc:30:de:25:18:34:52:ca:6f:53:
                    db:8b:2a:c6:bf:c0:bd:5f:d5:b6:70:39:a2:20:ce:
                    e5:ce:94:3d:09:f6:d7:c5:33:05:75:bd:d9:11:6a:
                    f8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:97:79:8E:02:FF:4E:0B:1A:D8:93:64:E1:E2:3D:1F:FC:C5:4C:5F
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/923d3b0f69946719395bf307260c00a5d17fddd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.66.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:b2:7d:f9:72:56:28:8a:1a:f6:60:34:4c:93:1a:83:96:a9:
         42:9b:ce:26:96:76:16:2c:35:a9:3f:3f:16:73:9c:c2:4d:df:
         ae:49:fc:a7:f9:cb:9a:eb:d1:fc:cf:8a:ef:aa:24:d2:6b:2a:
         9a:dd:89:4d:dd:2b:76:2d:e9:2b:b8:97:48:37:16:dd:20:15:
         98:df:10:63:2b:9d:84:d9:25:24:e7:3f:93:fa:76:39:2b:15:
         b4:b1:cd:87:ef:ac:be:34:97:ef:2e:5b:37:ab:8a:db:c5:7a:
         a6:a0:32:84:7c:9a:6b:ec:2a:c1:09:81:d3:ed:08:7b:57:ac:
         b2:8d:f7:9e:aa:58:87:b3:9f:90:c1:b2:23:d8:97:98:9c:e5:
         1a:18:d9:06:37:65:f4:2e:f9:cc:02:aa:e1:22:ab:c6:8f:c3:
         70:48:e2:0a:de:54:b9:27:e3:d6:85:81:9c:77:a6:d8:b4:da:
         87:77:66:08:4d:ab:95:72:25:ba:4e:eb:fe:27:71:4c:ed:e6:
         c9:4a:cd:4f:14:2b:9b:bd:8a:ac:4c:19:76:40:53:dc:5e:70:
         65:53:1e:91:93:09:aa:b6:a7:77:2e:4b:b1:1d:7b:3b:d0:e5:
         52:f5:8b:db:0d:87:ad:d7:ea:90:e9:6b:d4:87:b3:6c:38:b0:
         8a:3e:6f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----