Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/21f522eae1be0a4c2090b0a77d59f73de89cf5b2.roa
File:                     21f522eae1be0a4c2090b0a77d59f73de89cf5b2.roa (raw, json)
Hash identifier:          p85skWRs2oE4jzZVVY1o89N1hTq9ldoESqFFQOeE5ac=
Subject key identifier:   8E:02:04:8E:78:FE:85:02:78:4F:1F:84:DB:5F:8E:C2:6F:CC:32:FD
Certificate issuer:       /CN=8634873a21a0af40a01354647ad4978d3847d365
Certificate serial:       0D9A0C
Authority key identifier: 0E:F5:92:02:65:D1:AB:93:52:AE:4F:BC:7F:A3:27:34:6C:68:BF:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8634873a21a0af40a01354647ad4978d3847d365.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/21f522eae1be0a4c2090b0a77d59f73de89cf5b2.roa
Signing time:             Wed 24 Mar 2021 14:41:01 +0000
ROA not before:           Wed 24 Mar 2021 14:40:58 +0000
ROA not after:            Tue 24 Mar 2026 14:40:58 +0000
asID:                     28058
IP address blocks:        179.60.48.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 891404 (0xd9a0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8634873a21a0af40a01354647ad4978d3847d365
        Validity
            Not Before: Mar 24 14:40:58 2021 GMT
            Not After : Mar 24 14:40:58 2026 GMT
        Subject: CN=21f522eae1be0a4c2090b0a77d59f73de89cf5b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4f:78:22:c9:bf:2b:80:21:6b:a0:bb:a4:6c:
                    44:d2:b5:f3:a4:bd:15:bf:6e:26:e0:32:52:1c:8e:
                    96:49:17:88:d3:d4:ae:01:c8:11:19:7a:0a:96:e7:
                    3f:67:33:85:3e:9f:5a:3e:22:87:fb:c3:c9:88:82:
                    4e:1c:61:c3:42:e4:31:59:1b:1b:9f:67:ef:26:e7:
                    e1:86:a0:05:52:61:44:d4:b2:08:b0:9a:9c:42:1b:
                    41:d7:9e:b2:10:64:c7:0e:b1:0b:34:cd:d1:b5:6f:
                    c9:27:80:25:34:a8:d6:d5:c5:b9:45:ca:8c:b5:33:
                    33:d5:23:4f:27:b6:7e:50:30:a2:84:02:10:4a:26:
                    08:6f:34:72:77:82:ef:bc:45:15:e4:a5:25:30:a3:
                    75:74:88:fc:7a:d6:67:f5:9e:82:44:c9:0b:ff:bc:
                    c3:9d:a5:a2:ca:dd:ee:ce:9c:87:83:53:57:d7:17:
                    a4:65:78:40:78:0c:2c:96:b7:22:4c:88:e5:64:6c:
                    2e:91:9a:7d:39:c2:61:a3:81:f0:9e:35:3a:de:ea:
                    1c:91:ae:62:5b:c0:b1:81:1c:ee:2a:21:cf:fb:d7:
                    b4:7b:cf:ae:82:72:96:ee:e4:0d:08:ff:7f:c9:41:
                    99:b8:f2:dc:8d:b8:88:47:d2:06:0f:29:39:f0:2f:
                    4b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:02:04:8E:78:FE:85:02:78:4F:1F:84:DB:5F:8E:C2:6F:CC:32:FD
            X509v3 Authority Key Identifier:
                keyid:0E:F5:92:02:65:D1:AB:93:52:AE:4F:BC:7F:A3:27:34:6C:68:BF:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8634873a21a0af40a01354647ad4978d3847d365.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/21f522eae1be0a4c2090b0a77d59f73de89cf5b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/8634873a21a0af40a01354647ad4978d3847d365.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:3e:a3:fe:fd:0c:9b:7b:c8:6e:a6:fd:b0:33:9f:70:f4:78:
         83:3f:32:30:fb:c5:02:dd:c5:4f:9b:32:9b:96:e2:35:79:59:
         d5:65:2e:e0:03:31:bd:c2:fe:65:a8:60:74:45:ea:da:a1:8e:
         21:3b:f7:d5:9d:0b:0e:30:c3:b2:74:b5:1a:e3:02:4e:4e:23:
         ca:58:7d:e6:36:6d:61:5e:7e:27:30:d0:6b:1b:fa:87:6b:54:
         18:04:2c:4f:59:91:5c:0f:23:eb:60:a7:14:af:fe:50:a2:fa:
         62:e8:9e:40:97:20:3c:75:0f:1e:25:04:a4:44:e3:7d:06:6e:
         23:b7:0b:c1:1c:17:29:e1:6e:f4:f7:47:dc:44:ae:d2:6c:43:
         0f:6c:8b:1a:ec:eb:60:9a:a4:cd:6f:c9:44:58:3e:0a:cc:03:
         7c:67:69:a2:b4:f7:18:b6:d3:8b:df:f6:69:5b:37:67:22:d8:
         e6:a4:bb:64:0f:78:fc:7f:44:18:75:92:bd:19:d4:8f:21:7f:
         59:87:33:f6:40:da:30:ff:45:74:a9:64:cd:22:1a:7b:bd:70:
         05:c8:20:29:f9:19:22:6a:90:48:20:06:bb:c3:e7:3c:d8:5f:
         ae:a7:ff:5b:99:2f:95:91:21:22:a4:e3:e3:4e:cc:e8:6a:7b:
         b1:21:83:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----