Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/6f6d2ec4522789ad9e8fe7684c95a06cac1dc499.roa
File:                     6f6d2ec4522789ad9e8fe7684c95a06cac1dc499.roa (raw, json)
Hash identifier:          XQZvOYCE1T+zSYd9aP+cIbjYYmCTtJh+aafnSU1J5zw=
Subject key identifier:   D3:09:23:1E:FB:21:29:F7:62:F9:BA:CF:34:65:8B:31:06:46:F9:59
Certificate issuer:       /CN=415bbdadc090f33ec878e16eb6264e70c552a90c
Certificate serial:       0DBE8F
Authority key identifier: 75:66:62:AA:0A:9F:9C:45:99:93:29:65:92:C3:1F:6A:6F:23:CB:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/415bbdadc090f33ec878e16eb6264e70c552a90c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/6f6d2ec4522789ad9e8fe7684c95a06cac1dc499.roa
Signing time:             Wed 24 Mar 2021 14:41:14 +0000
ROA not before:           Wed 24 Mar 2021 14:41:13 +0000
ROA not after:            Tue 24 Mar 2026 14:41:13 +0000
asID:                     27947
IP address blocks:        186.33.152.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 900751 (0xdbe8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415bbdadc090f33ec878e16eb6264e70c552a90c
        Validity
            Not Before: Mar 24 14:41:13 2021 GMT
            Not After : Mar 24 14:41:13 2026 GMT
        Subject: CN=6f6d2ec4522789ad9e8fe7684c95a06cac1dc499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2a:2b:c5:12:f1:01:7e:e3:a3:20:86:a9:db:
                    fc:91:f4:ef:6c:15:d8:54:21:c3:9b:b3:50:11:29:
                    9d:35:44:78:4d:d2:cd:df:eb:c3:ef:0f:2d:cc:2b:
                    5c:ec:80:c0:99:fa:24:64:0f:a1:5c:18:b1:70:09:
                    cd:a3:e3:21:cf:a7:4f:34:3e:e2:97:b8:25:66:3a:
                    7a:b4:4d:65:8a:46:a8:ed:5a:d9:df:ee:c3:7e:02:
                    e7:88:a5:74:f5:22:ba:3f:bb:65:3f:16:ee:e4:73:
                    aa:df:47:9f:81:bb:62:70:85:99:34:6c:a8:33:85:
                    07:8e:dd:b7:10:3e:36:33:76:49:13:75:6a:c1:dd:
                    13:51:d0:b7:4f:94:31:31:ac:62:00:1d:5a:33:71:
                    77:2f:45:13:88:33:66:81:02:e0:4a:33:bb:6b:a4:
                    fb:18:00:4c:1c:4d:8f:b0:62:b5:1e:3b:74:70:ce:
                    f0:f1:38:d7:fb:d7:8c:d0:3d:5f:70:94:94:2c:fb:
                    9b:fb:51:b7:cb:a5:9a:60:e0:d3:8c:48:71:a5:4d:
                    99:68:3d:a6:e2:6f:6f:69:a8:95:95:bd:77:0c:8e:
                    f4:44:e8:b7:28:c7:25:55:6e:e0:82:43:e2:f8:96:
                    c7:8f:19:4c:24:04:af:d3:5a:fe:8f:fd:02:52:54:
                    3c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:09:23:1E:FB:21:29:F7:62:F9:BA:CF:34:65:8B:31:06:46:F9:59
            X509v3 Authority Key Identifier:
                keyid:75:66:62:AA:0A:9F:9C:45:99:93:29:65:92:C3:1F:6A:6F:23:CB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/415bbdadc090f33ec878e16eb6264e70c552a90c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/6f6d2ec4522789ad9e8fe7684c95a06cac1dc499.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/415bbdadc090f33ec878e16eb6264e70c552a90c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.33.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:b4:5e:af:89:3a:47:6e:19:e1:29:28:62:e1:9b:a2:8b:df:
         e0:4d:a9:44:60:d4:41:4b:88:d7:bb:ab:bc:62:af:5b:62:3e:
         84:4d:b1:a3:93:e1:89:0d:3a:db:71:6d:65:fe:df:a3:d0:5c:
         07:b6:04:fd:21:ae:55:ba:81:f2:7d:1d:25:d8:f8:65:be:f4:
         1e:90:76:f2:05:8e:6a:47:f7:ea:7d:57:fb:36:db:6a:cd:a6:
         37:85:f6:34:5a:ba:a1:12:e1:b4:fc:05:9b:1d:3a:17:17:40:
         b7:7a:03:9d:b4:72:11:9d:17:9b:66:f9:57:c8:e2:53:ab:38:
         5d:cc:40:2a:fd:20:01:12:ed:eb:4f:1d:28:07:b6:09:58:c8:
         55:df:04:2e:58:6f:05:49:ff:13:6e:2d:0e:0e:ae:0f:04:3e:
         45:7e:31:8d:7a:af:cf:e8:98:31:ed:38:4e:92:fb:4e:a4:2b:
         e5:f7:7c:95:01:d7:8f:12:bf:66:3b:cf:ae:3b:c6:22:56:44:
         66:ed:26:50:85:7a:3c:0c:f6:5e:70:7a:05:26:e6:73:9d:b3:
         b8:8b:05:e0:55:74:56:7f:01:b1:08:a6:72:e7:9d:79:3d:9f:
         f3:57:89:a6:62:af:f2:ec:3a:18:32:68:fb:97:88:3c:a1:ee:
         0c:b9:78:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----