Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ee7fc18b-ea25-4f3c-b4f8-842956bd348c/1bfb15b8dbcf9f258964fd8f3c5a71255180e166.roa
File:                     1bfb15b8dbcf9f258964fd8f3c5a71255180e166.roa (raw, json)
Hash identifier:          Fo3XiYLUUa9MBgxyb+IsAet59OGBDrbJOmE2XM2p8VQ=
Subject key identifier:   EF:F8:CB:70:95:B9:46:4E:44:73:27:37:0D:9E:2F:CA:27:88:C4:73
Certificate issuer:       /CN=fd9f8eac7d0df0e975176ef49038eea9d65b8651
Certificate serial:       A0C4
Authority key identifier: 52:D3:A4:44:E7:25:65:98:22:2C:55:E7:62:40:E8:DB:00:87:71:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd9f8eac7d0df0e975176ef49038eea9d65b8651.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ee7fc18b-ea25-4f3c-b4f8-842956bd348c/1bfb15b8dbcf9f258964fd8f3c5a71255180e166.roa
Signing time:             Fri 23 Apr 2021 14:51:01 +0000
ROA not before:           Fri 23 Apr 2021 03:00:00 +0000
ROA not after:            Sun 23 Apr 2023 03:00:00 +0000
asID:                     28005
IP address blocks:        164.163.244.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41156 (0xa0c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd9f8eac7d0df0e975176ef49038eea9d65b8651
        Validity
            Not Before: Apr 23 03:00:00 2021 GMT
            Not After : Apr 23 03:00:00 2023 GMT
        Subject: CN=1bfb15b8dbcf9f258964fd8f3c5a71255180e166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:df:45:ef:a7:a5:07:eb:60:5f:08:a9:da:
                    4c:a4:55:c6:b9:87:ad:8e:34:da:27:30:85:1b:42:
                    eb:d5:ed:5e:80:26:fb:87:7b:7a:3d:16:b8:d5:c1:
                    7c:e4:a7:d6:5d:5a:ad:a2:d9:bb:1e:b8:f4:fc:2c:
                    4c:99:e2:0a:7f:de:05:77:27:28:1c:f2:05:9e:17:
                    fc:a3:50:72:1d:42:b4:20:06:ec:6a:42:c9:0b:98:
                    d9:f9:b3:77:40:c6:b3:37:46:31:02:bb:04:df:b9:
                    17:1e:fd:86:b0:7f:f1:7b:6c:10:ac:a1:16:a0:ce:
                    fa:3f:c7:9f:01:76:dd:6e:fc:e7:15:e3:2f:29:42:
                    de:8a:b0:33:e7:8b:73:bc:eb:08:7c:34:2a:52:a8:
                    32:52:96:86:61:bb:f3:0c:47:c1:14:f8:14:87:4f:
                    63:eb:2c:10:85:c4:f7:6a:bf:4e:70:bb:cc:b8:3b:
                    d7:45:5f:f0:f2:ed:d6:22:3e:ad:b7:8c:45:40:1c:
                    1e:66:3e:c7:a4:3c:a8:2b:72:0a:bf:fa:b7:1a:96:
                    09:34:90:1c:ae:bc:08:19:a7:77:50:c9:f1:05:f4:
                    c3:b2:82:03:0d:04:9a:9f:68:33:66:9a:e6:e5:56:
                    f7:84:88:c6:f0:5b:01:0d:18:32:79:05:c4:2c:db:
                    5d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F8:CB:70:95:B9:46:4E:44:73:27:37:0D:9E:2F:CA:27:88:C4:73
            X509v3 Authority Key Identifier:
                keyid:52:D3:A4:44:E7:25:65:98:22:2C:55:E7:62:40:E8:DB:00:87:71:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd9f8eac7d0df0e975176ef49038eea9d65b8651.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ee7fc18b-ea25-4f3c-b4f8-842956bd348c/1bfb15b8dbcf9f258964fd8f3c5a71255180e166.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ee7fc18b-ea25-4f3c-b4f8-842956bd348c/fd9f8eac7d0df0e975176ef49038eea9d65b8651.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:36:a3:d8:33:56:59:e8:4b:51:e2:3a:17:aa:9d:69:3e:30:
         46:a1:78:c3:fd:85:f7:7c:a2:74:2c:be:be:dd:4f:af:14:ed:
         b9:d1:bb:82:cb:b9:b4:d3:a6:00:7b:9e:e7:6b:ec:4c:0b:24:
         66:f8:c0:5f:29:ed:88:bd:18:b8:b2:69:4a:b0:66:bd:14:10:
         ad:e8:7f:28:3c:25:73:4a:05:1e:fe:15:4a:5a:e8:89:25:1a:
         14:ea:fa:f0:d2:aa:ed:9d:db:f2:4a:84:36:04:02:7c:81:e1:
         77:2e:db:2c:cb:1b:2f:bd:84:dd:f9:1a:b0:16:ac:d7:0d:d2:
         12:14:2f:85:e8:43:3a:8d:07:0b:94:8b:98:f8:0b:7b:ce:b4:
         d5:11:d2:44:2c:c2:b2:1d:ae:af:f1:84:36:2b:60:1b:0f:35:
         1d:f8:b1:fb:64:4f:f8:03:c4:e7:f8:95:24:2b:d0:ee:76:79:
         13:82:c5:1d:f1:4f:5d:5a:fb:44:ed:7d:22:0f:90:66:e7:ca:
         6a:94:e3:e2:9c:99:00:d4:8f:00:44:94:d7:d5:4b:21:81:82:
         7e:9c:60:d5:c0:5b:66:73:c9:ee:b7:28:d9:12:df:d6:b7:d2:
         2a:3e:06:30:8b:11:11:8d:99:83:bd:3b:3b:60:05:2d:fb:02:
         72:a6:21:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----