Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/1785f08e046daaff44443644082e42e87fcc3f6b.roa
File:                     1785f08e046daaff44443644082e42e87fcc3f6b.roa (raw, json)
Hash identifier:          1ryHrEGg9G5kchh/O9t8ImZq/2m/xg20xwN0QEmr40Y=
Subject key identifier:   F7:DF:FA:D0:B8:8D:89:47:B3:B5:B6:BC:AF:18:89:3F:8B:DD:64:95
Certificate issuer:       /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial:       017DBB
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/1785f08e046daaff44443644082e42e87fcc3f6b.roa
Signing time:             Sun 14 Nov 2021 15:15:31 +0000
ROA not before:           Sun 14 Nov 2021 03:00:00 +0000
ROA not after:            Tue 14 Nov 2023 03:00:00 +0000
asID:                     27866
IP address blocks:        201.217.60.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97723 (0x17dbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
        Validity
            Not Before: Nov 14 03:00:00 2021 GMT
            Not After : Nov 14 03:00:00 2023 GMT
        Subject: CN=1785f08e046daaff44443644082e42e87fcc3f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ff:fb:8b:0b:3d:1d:92:76:bd:f6:17:15:d5:
                    96:68:5c:5b:e7:40:6b:16:19:0d:fb:ed:00:73:83:
                    7b:f2:2a:b7:92:f2:83:1a:91:31:fb:20:74:34:9d:
                    bf:2a:cf:96:1a:58:e3:49:f2:15:02:11:5e:2d:85:
                    0a:a8:fd:ac:0f:a8:10:5b:a3:cd:25:05:5a:cb:cf:
                    cb:cc:83:61:5f:0a:3c:b6:84:31:f2:8f:a7:71:f9:
                    89:70:b6:99:f1:13:ec:62:89:69:bc:38:04:06:52:
                    8e:0b:64:a3:59:2c:64:5a:be:e4:de:0f:fe:2b:1a:
                    fb:31:56:64:9d:68:70:d6:1e:80:c6:bc:08:df:46:
                    6d:c4:a2:79:83:59:2b:3d:0a:f8:3f:11:2f:2d:a0:
                    0a:c8:39:12:04:14:12:29:0d:13:c9:f4:ce:38:8a:
                    4e:a4:a0:7e:9e:f6:42:a8:77:b9:80:61:58:e9:88:
                    fd:09:75:9f:6e:0c:0a:85:8a:74:1f:98:75:37:6f:
                    4b:e3:14:12:bf:32:9d:00:0b:e5:35:ba:52:ef:0b:
                    93:b3:b3:88:92:b8:b0:43:58:33:df:33:f5:02:bb:
                    16:81:09:4a:f5:d5:74:54:dd:1c:7b:1d:10:12:59:
                    10:98:bf:43:b5:36:6b:ba:99:55:c1:33:d0:07:ac:
                    a9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DF:FA:D0:B8:8D:89:47:B3:B5:B6:BC:AF:18:89:3F:8B:DD:64:95
            X509v3 Authority Key Identifier:
                keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/1785f08e046daaff44443644082e42e87fcc3f6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:75:d6:90:f3:2d:66:ba:8c:ed:c9:b8:3e:51:a5:24:a1:01:
         07:65:fa:04:c6:f7:f9:72:21:24:25:59:bc:cc:14:6d:31:51:
         19:1e:6d:2c:15:d9:91:d2:be:20:1b:dc:d0:80:05:60:16:2b:
         43:df:d3:3d:00:20:84:18:8e:a8:d6:6f:88:73:12:06:20:9e:
         92:37:c6:83:c9:8c:3f:5b:ab:50:cd:30:af:bb:80:a8:6a:43:
         e6:22:77:b9:30:6b:dd:7e:ab:58:04:7b:e2:e6:7e:12:64:1f:
         a6:5d:ea:f8:82:c8:5f:f5:a5:d0:8d:86:e8:41:8e:c9:d0:87:
         bc:44:4e:46:ed:7f:fb:24:2c:02:4a:a8:43:f8:62:a9:15:d9:
         b8:1f:d8:27:54:0a:f7:c5:1d:f9:4d:3e:de:b3:72:7d:e3:ad:
         08:bb:e8:92:76:0d:2e:64:40:66:fe:90:16:71:76:ea:d1:db:
         c1:55:40:3c:0d:89:44:e5:e2:b6:8e:02:d6:9b:b3:04:46:9d:
         61:84:60:cc:4c:ed:c9:a8:45:96:cf:44:f3:7c:c4:8a:fc:a5:
         68:ba:e3:73:1a:05:24:bb:ce:53:34:3f:48:4a:2a:d7:22:f4:
         24:99:c8:87:99:cb:97:d5:f6:e2:7f:c0:26:52:aa:90:e9:2a:
         c0:bc:e0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----