Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/1fdee3f4d87d54d913f8726db0a521dec1ca38e8.roa
File:                     1fdee3f4d87d54d913f8726db0a521dec1ca38e8.roa (raw, json)
Hash identifier:          ZvAZdq3Exm2Pugf9fAnbHCQcC3uF1ddUd+DL/9VZ13Q=
Subject key identifier:   49:5F:6F:77:60:8F:AA:C2:F2:04:98:A6:EF:C0:20:40:B7:6D:95:AE
Certificate issuer:       /CN=0a6ca410e9d4d6609a966809763133d36a922b82
Certificate serial:       12A92E
Authority key identifier: 61:C9:65:C6:9A:7F:33:31:54:6E:E9:D0:48:29:82:DF:45:9C:76:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a6ca410e9d4d6609a966809763133d36a922b82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/1fdee3f4d87d54d913f8726db0a521dec1ca38e8.roa
Signing time:             Fri 15 Oct 2021 03:19:37 +0000
ROA not before:           Fri 15 Oct 2021 03:00:00 +0000
ROA not after:            Sun 15 Oct 2023 03:00:00 +0000
asID:                     270009
IP address blocks:        201.182.240.0/23 maxlen: 24
                          201.182.242.0/24 maxlen: 24
                          2803:8420::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1222958 (0x12a92e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a6ca410e9d4d6609a966809763133d36a922b82
        Validity
            Not Before: Oct 15 03:00:00 2021 GMT
            Not After : Oct 15 03:00:00 2023 GMT
        Subject: CN=1fdee3f4d87d54d913f8726db0a521dec1ca38e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c0:4c:8e:ac:f8:b4:58:53:be:d4:b1:aa:40:
                    65:df:a5:a5:03:31:b8:4f:c2:6a:28:51:fd:8d:d7:
                    13:c8:d0:d0:83:5b:c4:f6:87:b7:6b:19:44:0c:f5:
                    9e:90:8b:0b:9f:b3:94:c6:12:9c:af:70:cb:5b:f5:
                    4f:4b:4c:9c:e8:6f:aa:cd:93:7e:07:13:be:50:a1:
                    f7:fe:de:75:32:ad:e6:35:84:f8:7b:3b:f4:4a:96:
                    21:dd:a4:9c:53:c4:c5:da:c8:a9:67:12:57:03:cf:
                    42:29:cc:a5:37:17:e7:00:fb:42:ed:a0:6b:bf:95:
                    3d:39:42:e9:39:de:fa:81:12:b2:85:3e:74:7d:cc:
                    02:7c:c2:a1:69:9a:7e:86:07:96:9a:3c:5a:50:24:
                    ae:47:50:43:2c:4e:d8:eb:06:b1:5c:26:d7:7c:be:
                    1e:a9:f9:80:3d:af:29:30:04:13:fa:31:cd:e9:a0:
                    d7:0f:5a:41:a2:d0:f9:72:fb:68:92:b4:6e:09:7f:
                    b5:d1:e8:97:c4:a8:39:50:b5:15:b6:f7:40:96:7f:
                    81:28:67:2b:1f:71:12:9d:44:9e:6b:c0:13:26:32:
                    53:4d:6d:f8:5e:56:d5:a2:72:15:ea:29:07:3d:4a:
                    59:24:cc:4f:c3:2f:1c:75:ee:0c:c2:ef:b3:53:ba:
                    7b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5F:6F:77:60:8F:AA:C2:F2:04:98:A6:EF:C0:20:40:B7:6D:95:AE
            X509v3 Authority Key Identifier:
                keyid:61:C9:65:C6:9A:7F:33:31:54:6E:E9:D0:48:29:82:DF:45:9C:76:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a6ca410e9d4d6609a966809763133d36a922b82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/1fdee3f4d87d54d913f8726db0a521dec1ca38e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/0a6ca410e9d4d6609a966809763133d36a922b82.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.240.0-201.182.242.255
                IPv6:
                  2803:8420::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:6f:48:0f:b1:93:12:61:32:16:cc:ea:3c:32:13:ef:8b:3f:
         30:ea:9a:8b:a5:13:05:97:39:5e:73:9f:bf:c7:20:6f:ef:71:
         87:77:4e:0e:dc:02:a8:bf:70:23:21:97:54:67:db:92:56:5c:
         84:0a:21:1c:f2:df:c0:16:f5:9d:19:ce:07:d6:7e:2e:4c:50:
         6c:63:93:14:d4:8f:30:8a:3a:1c:41:df:4c:0e:14:aa:72:f3:
         38:e9:e1:54:c3:b0:9b:31:86:d8:ea:c9:5b:44:64:a8:a1:e2:
         ba:21:8d:9a:07:57:53:cb:1b:b0:15:cd:b4:48:32:0e:18:69:
         82:f7:f4:8e:c7:f2:4e:dc:a9:80:de:36:8d:12:02:d9:4c:c1:
         35:0b:b1:69:a1:1e:38:4b:39:fd:47:29:81:5b:2e:20:fa:14:
         28:e4:ba:0a:98:b9:e4:8e:4d:2a:07:19:60:a3:25:40:ec:bc:
         64:ea:4f:fc:e1:c7:4e:6e:ee:f6:e7:03:43:7e:02:af:d6:c5:
         4c:5a:66:11:35:c7:df:f8:ae:e1:fb:a8:4c:76:ec:f7:dd:05:
         e7:c2:84:27:1a:a3:3d:52:e5:91:c4:75:ae:90:4c:ca:e4:1b:
         8f:3d:e3:24:19:56:b1:ab:b6:aa:51:a0:e5:4b:34:15:84:93:
         41:c8:72:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----