Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/cc679d21d4ef1a1eda476ac145822b13886bcfde.roa
File:                     cc679d21d4ef1a1eda476ac145822b13886bcfde.roa (raw, json)
Hash identifier:          uco5fps5/O48Z9yNWKFjLnL8dkRjxPJGHkSJuboWRR0=
Subject key identifier:   95:F3:4F:B0:D1:AD:0B:55:A9:0C:AD:58:6F:4D:6B:FE:93:3B:4D:AD
Certificate issuer:       /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial:       01DABB
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/cc679d21d4ef1a1eda476ac145822b13886bcfde.roa
Signing time:             Mon 29 Nov 2021 18:08:14 +0000
ROA not before:           Mon 29 Nov 2021 03:00:00 +0000
ROA not after:            Wed 29 Nov 2023 03:00:00 +0000
asID:                     27768
IP address blocks:        201.217.0.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121531 (0x1dabb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
        Validity
            Not Before: Nov 29 03:00:00 2021 GMT
            Not After : Nov 29 03:00:00 2023 GMT
        Subject: CN=cc679d21d4ef1a1eda476ac145822b13886bcfde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f9:16:b2:9c:02:d3:49:a7:f5:bd:be:72:e9:
                    72:6a:96:0f:aa:b3:63:73:90:b1:4d:33:1a:57:32:
                    92:5c:43:13:bf:fa:d5:f4:83:00:27:36:36:40:5b:
                    24:a9:07:80:d3:c8:77:7e:92:9a:53:94:c8:80:7d:
                    d1:d9:4a:dc:18:40:50:95:b3:bf:5e:64:7e:87:1c:
                    38:8f:cd:3c:56:cf:b5:dc:b2:b7:f4:16:48:8e:d6:
                    04:15:92:51:1c:09:26:41:c9:bc:54:06:fa:ef:22:
                    df:93:dd:82:65:37:70:18:ba:97:06:11:fe:b3:26:
                    d1:77:5e:94:d3:0d:aa:02:9f:e9:e7:db:b4:9c:8b:
                    44:98:8f:c0:12:f3:ca:fe:e1:6e:53:ff:61:fb:1b:
                    a9:fd:77:3d:3a:a9:7c:b6:8c:90:13:9d:c8:13:f1:
                    08:81:93:21:63:11:e6:41:d4:09:72:9a:d3:71:7e:
                    5e:62:1f:7b:b4:82:c0:29:bc:2f:23:16:20:f4:b9:
                    22:49:99:96:39:aa:a6:73:1d:da:73:c6:60:50:2f:
                    6c:e8:be:bb:2b:9d:61:25:ad:bb:c4:f9:a7:2f:2f:
                    7a:b5:51:2a:e7:a4:71:1d:37:3a:a1:dc:d4:60:58:
                    e7:1e:ea:b0:69:d2:2b:ed:17:cc:9f:2c:40:7f:56:
                    db:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F3:4F:B0:D1:AD:0B:55:A9:0C:AD:58:6F:4D:6B:FE:93:3B:4D:AD
            X509v3 Authority Key Identifier:
                keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/cc679d21d4ef1a1eda476ac145822b13886bcfde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         62:d6:8e:ca:c9:ad:89:b2:e7:df:29:8b:20:98:95:aa:09:58:
         7b:f3:a7:3e:82:e6:72:e8:39:5e:76:ed:4a:7b:3b:ff:a6:00:
         23:de:10:13:42:3b:56:2a:d1:7c:c7:cd:08:7c:39:5b:f5:f0:
         4c:5d:83:a4:4f:0f:22:80:a6:a5:02:21:e2:b5:58:23:22:a6:
         5c:c6:41:83:bf:4e:bc:a2:73:f1:92:4b:e6:a2:78:dd:a2:a4:
         48:89:8d:c6:a1:06:8f:7f:c1:f9:7f:89:46:00:68:3f:28:c6:
         e7:ac:34:39:95:2e:6a:f3:57:a1:e6:8a:e2:e2:82:9b:3f:90:
         af:12:9a:fa:4c:1e:35:62:07:0c:37:e5:ca:6f:e9:ea:59:b2:
         07:fd:ef:a2:6f:ee:bd:5d:6f:52:0b:2e:91:7e:0a:98:a9:ba:
         bd:0d:68:e2:d5:f2:ad:6f:08:1d:0f:45:0d:d5:ec:d4:36:be:
         75:c0:cf:98:8b:75:69:f1:b5:ad:3f:03:2e:5b:7a:1e:db:75:
         cc:82:d7:b1:05:d3:87:a2:ff:31:17:bd:03:b0:41:d8:47:ca:
         aa:be:5e:08:47:99:df:cb:50:4b:a2:6d:96:e3:e9:bf:9a:1e:
         a6:b5:10:30:ed:5b:6e:63:ff:15:9f:7f:9f:a4:b5:72:dc:9a:
         39:45:72:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----