Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9637b9a-1601-4649-988e-129242e8ed63/6addf528892353e9bbee8374e965e2b909e770d4.roa
File:                     6addf528892353e9bbee8374e965e2b909e770d4.roa (raw, json)
Hash identifier:          zA8QSyjfZfY284PtOwacJqqPUpmK7UiZpbXFhSIyjDY=
Subject key identifier:   70:4B:B6:2C:52:BB:BD:10:14:65:B1:2A:48:95:45:D0:52:70:9A:89
Certificate issuer:       /CN=6c6abe556edb1aa4b4b3686da974eefb141a89fd
Certificate serial:       04C3D2
Authority key identifier: C7:8B:89:89:72:E0:D4:52:FD:0E:C8:EE:96:16:95:E4:DE:BD:B4:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c6abe556edb1aa4b4b3686da974eefb141a89fd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9637b9a-1601-4649-988e-129242e8ed63/6addf528892353e9bbee8374e965e2b909e770d4.roa
Signing time:             Thu 06 Jan 2022 17:58:27 +0000
ROA not before:           Wed 16 Jun 2021 03:00:00 +0000
ROA not after:            Thu 16 Jun 2033 03:00:00 +0000
asID:                     264619
IP address blocks:        181.191.220.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312274 (0x4c3d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c6abe556edb1aa4b4b3686da974eefb141a89fd
        Validity
            Not Before: Jun 16 03:00:00 2021 GMT
            Not After : Jun 16 03:00:00 2033 GMT
        Subject: CN=6addf528892353e9bbee8374e965e2b909e770d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:75:73:a1:92:0e:b3:d7:0a:85:1f:62:8e:81:
                    4d:33:5f:1d:45:6e:c1:90:60:2b:7c:fb:e3:ff:e1:
                    e5:38:01:32:7b:73:71:5b:23:cc:03:59:92:e1:ea:
                    90:15:b4:ab:d5:5b:9a:41:89:fd:11:56:f5:75:cd:
                    07:60:78:16:dd:21:6c:2a:8f:b4:61:cb:16:fa:fa:
                    3c:11:fe:b3:7f:f9:29:c8:b5:55:ba:65:63:16:a2:
                    74:cd:ca:fb:46:14:e1:c6:75:97:50:79:9c:bf:50:
                    ce:de:3f:4d:4b:db:4f:27:58:18:17:f8:13:cb:84:
                    9a:97:4f:5d:aa:26:2d:0a:29:8c:03:29:91:08:25:
                    5d:7d:2c:b3:08:81:00:04:af:ed:b6:4f:8f:e4:24:
                    78:fa:c0:eb:74:d8:57:ba:a4:46:4d:a2:e2:ec:ae:
                    a7:19:5a:87:a4:5f:84:40:08:aa:96:2d:aa:5d:c3:
                    d9:8c:42:3f:cb:9e:a3:e9:59:3a:bc:36:93:53:25:
                    68:b0:35:21:13:74:fb:ac:c3:e1:0f:89:e9:ee:bb:
                    46:71:92:5e:93:1d:90:24:f2:2c:ca:07:ed:27:8e:
                    ac:cf:01:f0:f3:5e:04:d0:e9:d4:f8:e9:22:aa:fd:
                    0c:94:70:56:2e:ee:6d:c6:e2:38:d5:d1:96:05:f1:
                    0b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4B:B6:2C:52:BB:BD:10:14:65:B1:2A:48:95:45:D0:52:70:9A:89
            X509v3 Authority Key Identifier:
                keyid:C7:8B:89:89:72:E0:D4:52:FD:0E:C8:EE:96:16:95:E4:DE:BD:B4:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c6abe556edb1aa4b4b3686da974eefb141a89fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9637b9a-1601-4649-988e-129242e8ed63/6addf528892353e9bbee8374e965e2b909e770d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9637b9a-1601-4649-988e-129242e8ed63/6c6abe556edb1aa4b4b3686da974eefb141a89fd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:bb:02:57:fa:e8:7a:23:53:a2:46:7d:23:ce:62:1c:37:de:
         17:5e:97:66:03:ab:65:b4:dc:93:08:1d:53:3b:4b:74:d9:c8:
         00:6c:65:7a:70:ef:1b:1f:fa:d8:9b:91:30:98:fb:d4:cc:dd:
         5c:a3:0d:44:7f:a1:8f:30:c1:78:c1:a4:fb:7d:3b:48:c4:92:
         e5:a6:6b:b7:f4:4f:ee:b7:b5:5b:3d:3b:a0:2f:26:c1:0b:fd:
         df:c3:84:e8:e6:4a:5d:67:26:92:10:1c:da:c8:4f:34:c6:d4:
         83:70:a8:74:72:b5:04:31:c9:62:0b:aa:2b:76:4c:7a:c4:94:
         5b:08:e0:27:c8:36:40:e6:13:f7:ce:c1:2b:a1:0b:cb:10:94:
         8b:17:fd:05:f6:d9:2f:d2:c8:ba:97:fc:06:a2:5c:97:6f:6e:
         7c:d4:36:19:91:f1:ec:4a:d0:4d:7b:8d:b9:ac:01:13:1c:39:
         79:fb:c6:01:20:87:95:11:ab:9c:f4:4b:8c:91:b7:25:32:41:
         c1:c0:27:72:52:b3:a8:1d:77:07:64:e3:4a:9f:63:90:bd:b2:
         44:95:a0:1d:c5:f6:be:2d:5a:10:d2:90:50:48:c2:ba:03:07:
         84:12:08:10:97:ff:0a:9a:7d:26:7e:68:04:b2:15:9c:ec:89:
         9b:c3:66:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----