Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/4c83ce21f25b2842a3fd36c1c5d3cdd7a394e374.roa
File:                     4c83ce21f25b2842a3fd36c1c5d3cdd7a394e374.roa (raw, json)
Hash identifier:          Virrc1rtGkqbhN4MHtV0Bfyv1mJy6uIMFQSOqF+mZZA=
Subject key identifier:   78:3A:87:FA:AF:29:56:4F:72:64:81:B7:E8:8A:F2:79:6D:15:98:BD
Certificate issuer:       /CN=20cb7e1dbb3f418ec3ba7a98320aee5815bdb815
Certificate serial:       12A1E9
Authority key identifier: 5B:74:A0:72:2D:D3:0E:96:7E:83:EE:23:74:B7:27:F7:0C:E9:29:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/4c83ce21f25b2842a3fd36c1c5d3cdd7a394e374.roa
Signing time:             Tue 30 Aug 2022 20:05:50 +0000
ROA not before:           Tue 30 Aug 2022 20:04:06 +0000
ROA not after:            Fri 30 Aug 2024 20:04:06 +0000
asID:                     64139
IP address blocks:        167.249.29.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1221097 (0x12a1e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20cb7e1dbb3f418ec3ba7a98320aee5815bdb815
        Validity
            Not Before: Aug 30 20:04:06 2022 GMT
            Not After : Aug 30 20:04:06 2024 GMT
        Subject: CN=4c83ce21f25b2842a3fd36c1c5d3cdd7a394e374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5d:d9:fe:13:01:db:7a:c2:25:c4:23:18:b0:
                    34:7c:a5:39:df:56:c4:83:96:c1:4e:54:06:32:20:
                    d0:69:94:4b:7f:5c:a7:e1:ed:8f:84:a6:22:30:6f:
                    e8:60:b6:20:be:91:ac:0b:65:08:b8:b0:c1:bf:14:
                    99:a2:15:7f:72:43:aa:fc:65:f5:00:fa:40:e7:49:
                    87:3c:23:9d:0d:fd:d9:06:7e:82:ff:14:ca:67:cf:
                    32:4f:42:46:72:8e:eb:fc:1f:01:17:e4:31:31:48:
                    3f:8c:34:de:d1:0b:79:4c:28:75:36:2b:53:07:58:
                    b7:97:63:a3:28:4a:d7:e1:0f:22:9c:f9:6f:b7:6b:
                    05:48:f4:df:74:85:e8:54:99:86:79:8e:90:71:02:
                    78:d3:ae:12:e6:d6:11:5b:42:31:84:37:e4:52:e0:
                    fe:fe:04:46:05:a9:96:d5:0e:24:1f:1e:f0:f6:9f:
                    bf:47:bb:52:e5:c6:0c:b2:09:4e:2e:83:5c:9b:6e:
                    dc:08:87:eb:60:8e:a1:1c:ad:e3:3a:61:72:8b:c7:
                    ca:b0:f3:8d:c3:52:3f:7d:16:7b:4a:bb:1e:26:b6:
                    75:8c:c1:08:db:e5:23:3e:f5:cf:7f:d1:6d:f3:1b:
                    e0:f7:86:f3:78:57:32:a3:26:a9:80:4b:b9:a2:aa:
                    e0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:3A:87:FA:AF:29:56:4F:72:64:81:B7:E8:8A:F2:79:6D:15:98:BD
            X509v3 Authority Key Identifier:
                keyid:5B:74:A0:72:2D:D3:0E:96:7E:83:EE:23:74:B7:27:F7:0C:E9:29:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/4c83ce21f25b2842a3fd36c1c5d3cdd7a394e374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:02:a9:9d:ce:12:1a:16:b6:c5:44:7c:57:23:07:34:60:90:
         42:cc:a1:9f:57:24:9d:50:81:9c:82:59:ed:9f:1d:8b:a4:19:
         b3:47:2a:b2:4c:45:43:fd:9f:70:9c:95:6b:36:b8:cd:44:9b:
         8e:e8:73:e5:10:25:56:4e:2c:fe:ce:3d:8f:17:76:a7:c9:4d:
         6b:40:01:ca:ca:61:bd:5f:8a:ea:31:83:65:d4:00:63:45:1d:
         43:63:db:de:28:bd:8d:e1:4a:d1:2c:03:2d:b8:24:c3:83:5a:
         ca:e9:a6:d2:35:00:38:ea:9e:bd:b4:ca:35:a6:42:87:2c:9a:
         2b:e0:e5:c9:6f:ca:83:96:65:d2:3c:38:43:58:9d:38:fb:1b:
         10:4d:c8:13:88:a1:4d:3a:b4:e1:b1:98:75:1c:af:01:b9:ee:
         ca:38:be:26:39:d8:ea:48:3d:a4:9d:55:85:b2:23:8f:08:9e:
         28:ae:2c:be:9c:3e:bf:fe:87:cd:6c:06:31:91:9a:22:5a:5e:
         bc:d8:bf:9f:23:3e:91:8f:c3:50:fa:43:0b:5f:3d:77:62:fe:
         b4:94:5e:d8:1f:6b:60:c0:f1:5d:db:52:13:59:bb:ed:a1:b6:
         30:ad:e4:3a:1a:2a:09:78:6c:36:b4:48:7e:f6:8d:11:42:cd:
         10:9f:09:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----