Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d737c8e5-cb41-4fb2-b6cc-3ca701e3900d/229c229df7c0828970be021f66a8b4a00608054d.roa
File:                     229c229df7c0828970be021f66a8b4a00608054d.roa (raw, json)
Hash identifier:          mn+lwQ6l7jHhh1psJY+AEP+HfyeEOK2iyeWJWz+0Q/c=
Subject key identifier:   20:D9:2B:4F:D4:2A:BE:30:1C:88:3F:C8:E7:1D:DE:FB:6E:08:03:AC
Certificate issuer:       /CN=291eabb216c39d9d6cc2d1dc5a50ad142670df98
Certificate serial:       A0C1
Authority key identifier: 76:83:39:AA:60:E0:A5:33:3C:70:15:93:6C:55:82:64:03:14:EC:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/291eabb216c39d9d6cc2d1dc5a50ad142670df98.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d737c8e5-cb41-4fb2-b6cc-3ca701e3900d/229c229df7c0828970be021f66a8b4a00608054d.roa
Signing time:             Fri 21 May 2021 16:12:08 +0000
ROA not before:           Fri 21 May 2021 03:00:00 +0000
ROA not after:            Sun 21 May 2023 03:00:00 +0000
asID:                     52468
IP address blocks:        131.255.16.0/24 maxlen: 24
                          2803:2410::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41153 (0xa0c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291eabb216c39d9d6cc2d1dc5a50ad142670df98
        Validity
            Not Before: May 21 03:00:00 2021 GMT
            Not After : May 21 03:00:00 2023 GMT
        Subject: CN=229c229df7c0828970be021f66a8b4a00608054d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:07:3a:e2:6d:e2:a8:40:2e:af:43:28:25:61:
                    f0:c8:7b:8a:7e:4c:ad:23:af:dd:da:0e:27:f6:c6:
                    49:f6:79:33:84:5f:9a:2b:4c:bb:a4:65:96:e0:2e:
                    ff:1f:d0:93:e7:e1:a1:fb:93:1a:81:bc:48:91:51:
                    cb:eb:b0:0a:57:d3:03:53:3c:36:5a:36:d6:d6:9d:
                    e6:36:35:15:56:fc:27:95:5a:09:67:57:da:fa:a3:
                    24:5c:7d:29:59:9e:3d:ab:78:b1:58:e3:21:88:c4:
                    be:1d:55:c8:42:2f:98:d5:02:4e:8d:a5:15:b6:d4:
                    83:e5:ce:81:2d:72:83:f3:c4:db:fd:51:d2:fb:33:
                    89:f6:5e:af:40:c4:b8:a2:a9:73:0c:0d:b1:b0:df:
                    2f:1c:a1:c9:bf:bc:41:df:22:77:a6:ce:a8:4b:ed:
                    d8:f2:76:d5:bb:c9:a2:fe:66:85:c8:d3:d0:43:fa:
                    73:a2:13:b9:a3:fb:3e:5f:f3:cc:a7:3f:21:80:da:
                    96:b1:e7:a1:1b:bf:bd:2f:a5:dc:46:df:f4:e4:78:
                    6b:32:0f:2e:e2:76:6b:b5:ca:8f:3d:f9:6e:c0:22:
                    64:28:12:00:d6:54:c8:f9:d5:d5:1d:34:66:5b:1b:
                    26:ec:86:d5:fb:c4:c7:b0:e8:74:41:ea:a9:6c:2e:
                    83:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D9:2B:4F:D4:2A:BE:30:1C:88:3F:C8:E7:1D:DE:FB:6E:08:03:AC
            X509v3 Authority Key Identifier:
                keyid:76:83:39:AA:60:E0:A5:33:3C:70:15:93:6C:55:82:64:03:14:EC:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/291eabb216c39d9d6cc2d1dc5a50ad142670df98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d737c8e5-cb41-4fb2-b6cc-3ca701e3900d/229c229df7c0828970be021f66a8b4a00608054d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d737c8e5-cb41-4fb2-b6cc-3ca701e3900d/291eabb216c39d9d6cc2d1dc5a50ad142670df98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.16.0/24
                IPv6:
                  2803:2410::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:32:15:ad:0a:8a:c9:d7:c4:fa:1f:ad:66:a1:89:4b:2c:1e:
         88:f4:68:a2:71:ae:07:ef:9d:54:9e:49:c3:a1:d9:78:27:57:
         42:9d:b9:7e:79:cb:e3:d4:6e:b5:e6:d1:08:36:f3:9b:df:12:
         16:22:d9:00:3b:d5:71:74:16:50:04:72:21:0e:49:40:1a:c4:
         92:e7:a7:72:fb:12:76:fb:5a:7f:61:e9:3e:eb:b3:81:18:45:
         9d:d7:6e:f4:a1:9a:52:12:33:21:2d:ce:70:5f:49:97:88:59:
         b7:21:6a:89:8d:fc:97:68:fb:0f:66:b9:56:b4:15:1d:0e:c6:
         67:6a:19:18:5c:93:12:73:91:24:76:ef:f0:85:1b:b9:2c:1b:
         15:1d:e0:a3:5a:18:48:80:a0:58:71:8f:08:9e:42:67:44:69:
         f7:f3:15:5a:20:53:7a:98:74:fc:aa:bd:d8:5b:43:26:f0:2c:
         40:6e:bd:09:3a:3d:f6:d6:6d:05:6e:6e:eb:b8:80:58:9f:85:
         72:cb:a0:97:08:60:af:aa:1d:00:73:09:c6:6f:ef:ff:34:f5:
         e8:11:c6:d7:15:4f:3f:3f:61:3c:c9:5d:e1:f4:4a:7d:4e:5a:
         2a:97:16:81:eb:31:96:b4:1b:f2:f5:6d:03:10:da:17:31:6a:
         9a:ad:b5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----