Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e65946f6-1f47-409f-a11c-7e3505bebf3a/2d189504f85333bcf4e86acf8c0070cabd094cca.roa
File:                     2d189504f85333bcf4e86acf8c0070cabd094cca.roa (raw, json)
Hash identifier:          o5rR7XCvqR0gT5g9EWwnqYdUxQ22smARyq+kzP7DP7E=
Subject key identifier:   49:F2:6C:FE:93:55:6E:6F:CA:A4:A8:D8:57:42:0E:0D:94:E3:C7:15
Certificate issuer:       /CN=4c1e2a981bc2f6315b444fd175be279aa44a75a8
Certificate serial:       0D6E2F
Authority key identifier: 56:07:63:52:05:47:55:03:BF:8E:96:ED:36:2F:9F:EE:43:05:59:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c1e2a981bc2f6315b444fd175be279aa44a75a8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e65946f6-1f47-409f-a11c-7e3505bebf3a/2d189504f85333bcf4e86acf8c0070cabd094cca.roa
Signing time:             Wed 24 Mar 2021 14:29:14 +0000
ROA not before:           Wed 24 Mar 2021 14:29:14 +0000
ROA not after:            Tue 24 Mar 2026 14:29:14 +0000
asID:                     52328
IP address blocks:        190.211.64.0/20 maxlen: 24
                          201.159.216.0/22 maxlen: 24
                          2803:4980::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880175 (0xd6e2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e2a981bc2f6315b444fd175be279aa44a75a8
        Validity
            Not Before: Mar 24 14:29:14 2021 GMT
            Not After : Mar 24 14:29:14 2026 GMT
        Subject: CN=2d189504f85333bcf4e86acf8c0070cabd094cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:46:fc:4d:79:49:20:7f:5a:b3:d6:4e:65:34:
                    58:7e:ef:c0:1a:cd:36:6a:ff:7d:d7:27:60:26:ce:
                    60:59:7c:6a:ae:a3:49:a7:88:9f:c1:7f:94:cf:2a:
                    43:f8:1c:80:2a:9f:f1:89:e7:58:a9:5b:74:84:26:
                    31:80:c8:ac:9d:6f:a8:bf:6a:e8:04:40:22:bd:47:
                    a3:72:5c:53:c2:66:ea:3d:45:5d:16:b9:d6:6c:2a:
                    ad:97:bd:df:f9:ae:64:24:ab:7a:e6:81:88:ae:fe:
                    a2:01:7f:2a:3e:4e:50:bc:d8:6f:9c:c3:60:ea:b5:
                    e0:32:fd:b9:9e:d7:1e:ed:9b:33:be:99:1f:d0:78:
                    da:3f:73:62:a4:c8:4a:59:39:96:6d:f5:ad:a9:9c:
                    14:8e:00:0d:e9:4f:fd:2d:c6:82:18:fc:37:1f:02:
                    a3:00:75:1d:0f:4b:48:1d:9a:01:03:14:a9:a5:61:
                    18:c4:ab:79:80:63:b7:4c:35:94:9d:d3:e3:d9:11:
                    75:2f:a6:2b:db:c7:38:9c:91:a3:81:27:72:41:6d:
                    d2:06:93:a7:b9:e8:ca:6d:9d:de:ce:5a:70:5c:1f:
                    59:13:69:74:32:33:21:d4:06:3e:fd:a9:81:58:ba:
                    ef:57:bf:f5:06:ca:5f:19:94:0b:30:50:8b:92:97:
                    84:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F2:6C:FE:93:55:6E:6F:CA:A4:A8:D8:57:42:0E:0D:94:E3:C7:15
            X509v3 Authority Key Identifier:
                keyid:56:07:63:52:05:47:55:03:BF:8E:96:ED:36:2F:9F:EE:43:05:59:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c1e2a981bc2f6315b444fd175be279aa44a75a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e65946f6-1f47-409f-a11c-7e3505bebf3a/2d189504f85333bcf4e86acf8c0070cabd094cca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e65946f6-1f47-409f-a11c-7e3505bebf3a/4c1e2a981bc2f6315b444fd175be279aa44a75a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.64.0/20
                  201.159.216.0/22
                IPv6:
                  2803:4980::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:6e:fb:8a:33:b5:35:e2:c4:f5:0e:6b:42:10:02:de:ee:70:
         b5:21:53:74:37:a7:4a:00:26:19:09:ee:50:35:09:93:3c:72:
         56:ed:e6:6f:40:48:d0:1a:7e:5c:6c:13:ba:90:b2:31:af:07:
         95:62:d8:fc:75:8d:12:ce:8f:f9:c1:2d:64:09:72:0c:70:cf:
         6a:89:06:3f:d4:1e:c4:61:a4:83:2d:aa:c6:69:e2:0a:63:e4:
         66:30:b9:c5:1a:42:68:f7:1c:79:33:86:4a:a1:01:ac:9f:cd:
         c3:0e:0c:0a:74:71:85:63:fc:15:5c:b0:c9:d1:05:1f:a8:fb:
         61:bd:ba:58:9c:30:6e:70:8e:c5:45:ea:bc:a8:cd:99:32:bc:
         f1:a7:69:bf:00:6d:e5:01:4e:25:ed:3c:5d:4b:60:f0:11:32:
         7d:76:fd:1a:6e:4e:06:73:c1:c8:cc:05:5d:53:df:ff:29:b3:
         91:08:30:83:57:13:28:82:b5:f8:08:32:1c:ce:a6:41:d9:fd:
         12:88:b5:ec:b2:38:3a:ca:07:f3:fe:0b:ba:e2:c1:a5:da:37:
         1a:84:e5:6e:f9:33:fb:fc:5e:c1:da:4d:66:ee:fb:33:d6:34:
         f5:57:ac:b2:5d:bb:b5:cd:43:c4:d0:fc:b6:f0:ba:01:4e:55:
         bb:c0:7d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----