Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d37891fe-eea3-48a1-a501-257aaa18d4bc/7c939edff979263673265b17bc3ac53551ba7d9f.roa
File:                     7c939edff979263673265b17bc3ac53551ba7d9f.roa (raw, json)
Hash identifier:          CjkEmfz6+Yi89gJVdqI6DI9tmzyrb9HfggempEksZTE=
Subject key identifier:   6B:3C:F0:93:63:DC:D2:75:AD:86:5E:F9:27:48:A4:F4:8D:18:A8:E2
Certificate issuer:       /CN=82de3982dc3fe10698e2213ddec20b8ab75df7bf
Certificate serial:       0D8B61
Authority key identifier: AD:2C:98:FD:25:51:E2:8A:30:65:C7:48:5B:5F:46:44:46:B9:7F:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82de3982dc3fe10698e2213ddec20b8ab75df7bf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d37891fe-eea3-48a1-a501-257aaa18d4bc/7c939edff979263673265b17bc3ac53551ba7d9f.roa
Signing time:             Wed 24 Mar 2021 14:40:36 +0000
ROA not before:           Wed 24 Mar 2021 14:40:36 +0000
ROA not after:            Tue 24 Mar 2026 14:40:36 +0000
asID:                     14522
IP address blocks:        181.175.0.0/16 maxlen: 24
                          186.66.0.0/17 maxlen: 24
                          186.66.128.0/17 maxlen: 24
                          186.68.0.0/15 maxlen: 24
                          186.70.0.0/15 maxlen: 24
                          190.10.128.0/18 maxlen: 24
                          190.10.192.0/18 maxlen: 24
                          190.154.0.0/17 maxlen: 24
                          190.154.128.0/17 maxlen: 24
                          190.155.0.0/17 maxlen: 24
                          190.155.128.0/17 maxlen: 24
                          200.25.128.0/19 maxlen: 24
                          200.25.160.0/19 maxlen: 24
                          200.63.192.0/19 maxlen: 24
                          200.63.224.0/20 maxlen: 24
                          200.63.240.0/20 maxlen: 24
                          200.69.160.0/20 maxlen: 24
                          200.69.176.0/20 maxlen: 24
                          201.217.64.0/19 maxlen: 24
                          201.217.96.0/19 maxlen: 24
                          2800:9a0::/29 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887649 (0xd8b61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82de3982dc3fe10698e2213ddec20b8ab75df7bf
        Validity
            Not Before: Mar 24 14:40:36 2021 GMT
            Not After : Mar 24 14:40:36 2026 GMT
        Subject: CN=7c939edff979263673265b17bc3ac53551ba7d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:56:25:48:f3:3d:86:aa:43:df:c0:8c:98:1c:
                    5f:f0:ef:a5:bd:be:f7:f8:a7:c3:de:b0:2e:04:6b:
                    84:a0:9c:2d:bb:dd:8a:d7:ed:3f:7e:96:c0:d2:44:
                    95:80:49:cc:5a:dd:f1:e5:9c:a9:9d:a5:9b:0b:a5:
                    6b:bd:c9:f6:fa:74:20:d2:98:24:9c:51:3c:e9:2e:
                    bc:0a:9a:56:bc:19:2c:f6:18:f2:a5:99:18:78:dc:
                    92:a5:04:70:1a:d2:68:17:b8:b7:e6:de:16:88:db:
                    4f:fd:27:90:b5:6f:f0:fa:8f:fc:13:fa:fa:72:74:
                    96:2c:6d:64:c3:3e:81:d8:51:88:32:97:1f:54:f2:
                    5d:0c:83:88:99:cf:89:eb:4d:bf:cc:0f:16:f4:b1:
                    a7:8e:76:32:92:42:36:1c:38:00:95:80:f3:e0:c9:
                    b8:e1:71:5f:a3:43:f9:08:90:be:b3:f6:7c:e2:df:
                    cb:ac:bd:6b:0e:9f:09:c0:aa:57:f5:d7:bf:a3:7a:
                    1e:5d:16:5e:97:32:94:d5:9a:f8:e6:1b:51:81:1e:
                    ba:3e:2f:9f:41:17:7f:c1:de:69:67:85:ec:d3:65:
                    2d:51:f3:9d:2e:a9:1a:1e:54:d4:fc:34:33:ab:8f:
                    76:d0:05:47:8e:05:44:2e:67:b8:4e:89:9d:7d:8e:
                    0a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3C:F0:93:63:DC:D2:75:AD:86:5E:F9:27:48:A4:F4:8D:18:A8:E2
            X509v3 Authority Key Identifier:
                keyid:AD:2C:98:FD:25:51:E2:8A:30:65:C7:48:5B:5F:46:44:46:B9:7F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82de3982dc3fe10698e2213ddec20b8ab75df7bf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d37891fe-eea3-48a1-a501-257aaa18d4bc/7c939edff979263673265b17bc3ac53551ba7d9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d37891fe-eea3-48a1-a501-257aaa18d4bc/82de3982dc3fe10698e2213ddec20b8ab75df7bf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.175.0.0/16
                  186.66.0.0/16
                  186.68.0.0/14
                  190.10.128.0/17
                  190.154.0.0/15
                  200.25.128.0/18
                  200.63.192.0/18
                  200.69.160.0/19
                  201.217.64.0/18
                IPv6:
                  2800:9a0::/29

    Signature Algorithm: sha256WithRSAEncryption
         4a:36:8b:d6:9c:7e:6d:44:c6:3f:70:d8:c6:7f:b0:3a:86:9c:
         4d:f0:1a:f2:7f:bc:73:cc:54:c4:71:8d:2e:b5:c3:9c:be:4b:
         fc:cb:e4:01:ae:19:fc:7a:0b:00:b2:3d:2a:49:05:24:db:33:
         c3:3d:4a:80:9a:af:d7:30:2b:38:35:9b:3f:54:86:c0:d9:31:
         00:ef:04:44:17:c1:4b:d3:b1:ce:2e:81:f4:8d:1a:9d:02:bc:
         b7:7c:2e:54:7f:fc:69:86:5f:c3:e4:f6:05:d2:85:7b:67:7f:
         58:6b:a1:48:a3:61:38:c9:7a:7a:85:51:6d:89:b3:6c:22:c5:
         85:b4:b7:62:d4:de:24:f1:a6:15:a3:e9:39:68:12:2b:32:a5:
         7d:b8:b3:56:ea:89:cf:bc:fb:de:b8:0c:22:c9:80:bd:9b:54:
         71:9c:3c:6b:9b:dd:5c:7e:14:20:8f:c1:ac:46:04:e3:60:14:
         f3:f5:07:ad:e9:7f:b4:e0:0c:57:8f:a4:4c:86:fa:c6:15:2e:
         22:ac:be:00:ff:64:55:12:09:fb:87:27:e9:e3:e7:7a:94:43:
         c8:2e:53:02:9a:da:2d:23:c1:9a:22:63:6c:a7:68:c8:9d:b1:
         e6:3a:58:65:9c:4f:d8:96:03:0f:6d:8a:7c:3c:b8:dd:58:10:
         aa:f0:6d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----