Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/de74f287-ba77-4bcc-aed1-7ced3ade8e06/cda923535b665378676005124ddddb51cee48b44.roa
File:                     cda923535b665378676005124ddddb51cee48b44.roa (raw, json)
Hash identifier:          27sMZJFnNRWJDpeD5cfJycypy3QAiKtTOtXOCupFZZI=
Subject key identifier:   2D:EB:15:F0:0C:33:3A:80:A2:FB:30:91:52:9C:35:E4:C2:01:28:D2
Certificate issuer:       /CN=9d6c5e9533c6eb5af58cbd6336fc050db67d3be3
Certificate serial:       096C3E
Authority key identifier: D0:6D:14:AA:17:EE:99:AD:E2:40:A1:23:7D:61:18:C8:1B:5E:C5:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d6c5e9533c6eb5af58cbd6336fc050db67d3be3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/de74f287-ba77-4bcc-aed1-7ced3ade8e06/cda923535b665378676005124ddddb51cee48b44.roa
Signing time:             Thu 16 Dec 2021 17:40:27 +0000
ROA not before:           Thu 16 Dec 2021 03:00:00 +0000
ROA not after:            Sat 16 Dec 2023 03:00:00 +0000
asID:                     263801
IP address blocks:        131.221.64.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617534 (0x96c3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d6c5e9533c6eb5af58cbd6336fc050db67d3be3
        Validity
            Not Before: Dec 16 03:00:00 2021 GMT
            Not After : Dec 16 03:00:00 2023 GMT
        Subject: CN=cda923535b665378676005124ddddb51cee48b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9e:10:7b:2d:b9:c9:81:60:44:09:9e:f4:d9:
                    bc:a9:12:10:35:69:8e:71:ec:29:54:da:9b:6d:59:
                    6d:64:30:f6:0f:82:35:19:8e:83:b8:66:a3:28:80:
                    ad:42:19:fc:05:8e:0e:15:29:a4:09:e5:ef:2b:bb:
                    62:c0:45:c2:a2:0c:51:0f:0c:84:ec:a6:de:fb:b4:
                    34:0a:21:52:16:7a:66:80:25:19:fd:0a:c0:5f:eb:
                    d0:e8:20:bd:b0:05:6b:bb:ad:d4:bb:63:69:88:7a:
                    48:08:5e:a8:ed:3b:d6:f0:3b:b6:dc:ca:ad:47:d4:
                    09:e1:6e:c1:e0:f2:8a:44:cd:62:69:9e:76:95:b7:
                    b9:6c:bf:36:92:d2:7c:f0:9c:90:36:52:e9:48:30:
                    cc:86:5e:97:28:3c:37:47:c8:7e:ea:87:cd:5a:a6:
                    d4:8b:d8:80:1e:7e:03:07:e3:4a:1d:fa:32:f2:ad:
                    55:5b:3c:be:8a:8b:99:c5:4e:06:1c:be:86:52:67:
                    ff:63:5c:7f:57:1b:3b:1e:c2:f4:bf:1b:e6:02:e5:
                    05:85:42:fb:d2:59:2a:10:0f:6f:45:b3:bf:36:94:
                    65:e8:4a:47:57:a4:24:2b:ff:0f:25:6d:33:fd:da:
                    7f:5a:f9:76:22:d3:74:10:0c:2e:fb:45:43:2c:73:
                    9d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:EB:15:F0:0C:33:3A:80:A2:FB:30:91:52:9C:35:E4:C2:01:28:D2
            X509v3 Authority Key Identifier:
                keyid:D0:6D:14:AA:17:EE:99:AD:E2:40:A1:23:7D:61:18:C8:1B:5E:C5:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d6c5e9533c6eb5af58cbd6336fc050db67d3be3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/de74f287-ba77-4bcc-aed1-7ced3ade8e06/cda923535b665378676005124ddddb51cee48b44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/de74f287-ba77-4bcc-aed1-7ced3ade8e06/9d6c5e9533c6eb5af58cbd6336fc050db67d3be3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:3f:6d:ac:f7:5a:f0:19:d3:78:6f:bf:ec:e1:0d:9e:94:b7:
         3b:ec:f0:78:87:ce:fb:e1:33:24:6e:ab:fe:ef:1f:22:ae:44:
         a5:b1:3e:e5:5b:7c:9c:5a:16:a8:f3:46:ef:f1:a3:da:10:13:
         86:d0:91:d7:61:b7:e6:33:72:42:bc:97:6f:eb:d5:2b:6d:3b:
         ef:e7:27:f6:8f:d2:c9:09:b3:f1:b0:00:e2:19:f9:1d:b2:06:
         b2:e0:69:31:6d:4b:bb:ba:2b:6f:34:ec:79:69:d4:88:ff:ef:
         9a:fe:71:81:48:39:81:94:e4:0d:16:bd:ed:ea:7a:3d:3f:3f:
         1c:16:1a:86:ee:bc:a3:e6:57:62:0a:18:c7:c0:44:a2:d1:5a:
         73:a3:2d:de:51:69:42:5b:17:02:2e:11:74:47:6c:5b:ad:73:
         08:d1:31:80:5c:a3:1d:9e:1d:c0:27:c6:ee:bc:7c:4b:7d:2a:
         f3:2b:ea:73:ac:9f:04:e9:86:da:04:6a:68:5a:7b:71:60:15:
         2e:df:46:b8:61:91:19:7a:bb:28:bd:ec:06:05:c1:52:ed:19:
         ca:2d:0d:74:eb:54:00:1b:fe:02:45:72:18:c9:9a:05:83:bd:
         65:59:53:c4:21:e8:c5:b3:6f:f1:5d:f0:bc:d7:0e:a1:0a:b0:
         8a:0d:e0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----