Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/e0d8f8ca63906455e1d48a29db450e4645a2d961.roa
File:                     e0d8f8ca63906455e1d48a29db450e4645a2d961.roa (raw, json)
Hash identifier:          P35TpMbfd+qYhaHK0q8iCVMkYYXe0FG67kBuWJUipCE=
Subject key identifier:   1F:16:6E:4D:85:84:76:6B:5A:D6:FE:B6:3B:55:E4:9F:56:2C:13:FA
Certificate issuer:       /CN=fd59a2161d14de91096d6cf6cd532d586f95771c
Certificate serial:       0B5BA8
Authority key identifier: 45:61:FF:81:E1:21:65:FD:CB:8B:02:06:F2:A5:43:43:B3:F5:59:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd59a2161d14de91096d6cf6cd532d586f95771c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/e0d8f8ca63906455e1d48a29db450e4645a2d961.roa
Signing time:             Wed 25 Aug 2021 18:11:41 +0000
ROA not before:           Wed 25 Aug 2021 03:00:00 +0000
ROA not after:            Fri 25 Aug 2023 03:00:00 +0000
asID:                     269924
IP address blocks:        207.191.164.0/22 maxlen: 22
                          2803:12e0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 744360 (0xb5ba8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd59a2161d14de91096d6cf6cd532d586f95771c
        Validity
            Not Before: Aug 25 03:00:00 2021 GMT
            Not After : Aug 25 03:00:00 2023 GMT
        Subject: CN=e0d8f8ca63906455e1d48a29db450e4645a2d961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b3:7d:bf:32:e2:d0:b5:13:eb:7e:77:5a:24:
                    86:f2:98:6e:96:a4:b2:99:a1:ca:99:1d:0b:52:0c:
                    9c:a8:9f:b4:d2:20:fe:ea:b4:9a:42:e9:e6:92:2e:
                    59:a5:26:2e:75:93:17:6e:01:ec:15:07:fe:51:f4:
                    b1:43:92:45:82:ad:ec:e7:2e:19:87:da:3e:0b:1d:
                    2c:09:8d:7e:1f:f8:5c:ca:6b:c9:99:fa:fd:d6:62:
                    57:dd:e9:7d:8e:5b:08:bd:15:c3:73:c5:4c:7c:1f:
                    40:70:bd:05:7f:f4:f2:f1:ca:85:66:12:b5:fb:7d:
                    64:5b:1a:d9:ae:d1:d7:82:e8:0e:40:6e:70:82:de:
                    bd:53:2b:6c:51:dd:a7:ad:8d:bb:37:ad:f5:c1:df:
                    ba:5c:7b:b4:05:71:2e:52:56:e0:af:1e:36:ae:5b:
                    c6:6f:fb:08:2b:60:68:f8:23:e5:11:79:4e:28:11:
                    a6:cf:99:c7:dd:41:15:75:fa:5a:b1:e0:57:89:b8:
                    d1:e5:61:e1:b3:e1:fa:d9:5d:89:1d:db:d3:1b:08:
                    ac:af:60:86:41:a1:55:24:e8:96:c1:8b:49:2f:a9:
                    13:6a:03:77:af:1d:c7:40:ec:57:8d:7d:a1:b9:f4:
                    10:cd:03:80:44:cb:49:37:8d:21:24:20:79:57:ef:
                    fd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:16:6E:4D:85:84:76:6B:5A:D6:FE:B6:3B:55:E4:9F:56:2C:13:FA
            X509v3 Authority Key Identifier:
                keyid:45:61:FF:81:E1:21:65:FD:CB:8B:02:06:F2:A5:43:43:B3:F5:59:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd59a2161d14de91096d6cf6cd532d586f95771c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/e0d8f8ca63906455e1d48a29db450e4645a2d961.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/fd59a2161d14de91096d6cf6cd532d586f95771c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.191.164.0/22
                IPv6:
                  2803:12e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:42:57:58:36:a8:95:b2:7b:7c:b4:4e:75:72:20:87:16:51:
         82:fa:8e:b4:83:68:e6:ba:7d:38:ae:1b:90:02:38:7a:53:5a:
         ad:d8:37:6f:d6:2f:4c:f0:6c:12:a1:83:41:9b:a2:9a:e0:1c:
         37:df:00:25:11:93:eb:bd:2b:f1:86:8b:6d:e3:2a:97:c7:e5:
         56:ed:97:3a:e0:b8:02:a6:c3:ab:c7:f4:f4:6b:18:30:07:dc:
         91:c5:c9:b2:d7:28:ea:1d:d5:62:b3:b3:d0:21:91:4f:4e:d3:
         55:9e:21:b3:b8:82:c3:27:0e:e2:de:51:bc:b7:a8:48:e8:1f:
         a4:94:d4:7c:3d:8d:fb:c1:b1:69:3f:e5:19:d3:47:24:68:ca:
         e4:e4:27:e5:f0:19:b8:0f:0c:b1:41:5b:61:f1:b1:6b:31:bc:
         c3:10:40:bf:79:f5:63:4e:28:3a:d7:ee:8d:f8:82:9f:5b:42:
         18:ca:f8:f9:e4:5b:67:49:32:94:fb:41:29:92:1a:24:86:06:
         b8:6f:ae:77:b7:fd:58:9a:91:18:da:be:a3:0f:0f:52:36:88:
         e1:a0:37:01:5d:f1:77:94:d9:fc:12:1a:92:04:e6:74:e6:5f:
         2a:ba:6c:eb:a6:da:fa:06:55:c8:52:68:c7:b4:9e:60:b0:e6:
         14:53:1c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----