Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ee9c2f01-af18-4839-9f33-1a304a7ee88c/cb481815e0ecd9a002bc16fbccf7283a61a2bd64.roa
File:                     cb481815e0ecd9a002bc16fbccf7283a61a2bd64.roa (raw, json)
Hash identifier:          U+QVZK0bVodIZxftRcfZM8n4xWW+8BcdUqaQOVrKQZA=
Subject key identifier:   F5:85:BB:DD:6B:F5:62:8A:D6:32:87:50:60:51:7B:FB:37:12:DF:C0
Certificate issuer:       /CN=819e92973b36aa90cd88dd3d3aee9b75bde9a5dc
Certificate serial:       0387B8
Authority key identifier: 6F:2B:0B:C9:D4:DC:CB:B7:20:4C:A2:45:3C:37:0D:C8:3E:33:D6:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/819e92973b36aa90cd88dd3d3aee9b75bde9a5dc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ee9c2f01-af18-4839-9f33-1a304a7ee88c/cb481815e0ecd9a002bc16fbccf7283a61a2bd64.roa
Signing time:             Mon 16 Aug 2021 12:47:43 +0000
ROA not before:           Mon 16 Aug 2021 03:00:00 +0000
ROA not after:            Wed 16 Aug 2023 03:00:00 +0000
asID:                     269986
IP address blocks:        201.49.128.0/22 maxlen: 22
                          2803:5ee0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231352 (0x387b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=819e92973b36aa90cd88dd3d3aee9b75bde9a5dc
        Validity
            Not Before: Aug 16 03:00:00 2021 GMT
            Not After : Aug 16 03:00:00 2023 GMT
        Subject: CN=cb481815e0ecd9a002bc16fbccf7283a61a2bd64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:aa:8d:07:e0:a8:7d:19:70:f0:12:4c:23:17:
                    c8:05:54:82:32:50:66:be:f0:02:a2:b1:7c:c6:03:
                    c8:fa:8f:3c:c4:0f:f5:54:58:01:c8:f7:41:24:fa:
                    90:9d:cd:6f:d9:1a:3f:b4:c7:04:4f:b7:ae:c2:b3:
                    62:12:bd:8c:72:31:8d:19:83:88:a1:ce:3d:02:e6:
                    9e:16:6c:28:52:2e:4e:35:fe:c9:f5:98:f7:10:5a:
                    dd:d0:b1:e7:bb:37:dc:02:92:4a:5b:0c:8e:bc:6e:
                    a0:cb:09:1e:f8:d8:a2:dd:6f:fd:d0:f8:4c:d6:17:
                    63:73:fa:bc:42:c7:77:45:89:7c:07:9f:28:9a:9b:
                    fc:23:65:eb:17:bc:9f:b5:34:fa:96:52:bd:b1:98:
                    af:8a:4c:aa:22:42:dd:0e:50:d8:ff:14:20:af:ba:
                    30:82:0c:e7:62:d6:08:00:d9:79:c5:f8:e7:45:43:
                    96:f8:42:98:b3:83:94:19:08:9b:6b:17:aa:38:6a:
                    a8:1c:42:a2:08:2a:55:94:6b:64:d3:46:24:90:73:
                    ba:d2:41:d6:96:85:3e:18:b1:72:11:8e:63:2c:5f:
                    7a:3d:c7:93:bb:fc:74:68:b0:39:95:dd:95:4d:19:
                    5e:99:bb:a2:6f:f1:fe:e8:f5:f6:c4:95:46:0e:35:
                    dd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:85:BB:DD:6B:F5:62:8A:D6:32:87:50:60:51:7B:FB:37:12:DF:C0
            X509v3 Authority Key Identifier:
                keyid:6F:2B:0B:C9:D4:DC:CB:B7:20:4C:A2:45:3C:37:0D:C8:3E:33:D6:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/819e92973b36aa90cd88dd3d3aee9b75bde9a5dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ee9c2f01-af18-4839-9f33-1a304a7ee88c/cb481815e0ecd9a002bc16fbccf7283a61a2bd64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ee9c2f01-af18-4839-9f33-1a304a7ee88c/819e92973b36aa90cd88dd3d3aee9b75bde9a5dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.128.0/22
                IPv6:
                  2803:5ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:a7:e7:6f:d2:2a:d8:fa:6c:d3:f6:d5:0b:36:85:06:1c:a9:
         ba:e4:1b:32:f1:2a:71:7f:38:47:1e:d4:e0:04:31:4a:da:af:
         d0:a4:9f:d9:d6:d5:d1:24:b4:03:d1:4e:b0:e0:f7:33:c4:2a:
         e7:54:33:9d:d7:2e:f3:8d:f4:7a:65:ca:8e:8c:7c:02:6f:39:
         1b:17:92:49:7c:ba:e4:83:f6:78:c3:31:2f:96:86:b9:a7:4e:
         0d:65:bf:89:21:f7:e0:27:a5:3e:73:c7:f4:63:58:58:b2:23:
         0e:32:e8:71:76:e1:fc:d8:40:3b:0e:b7:be:0c:59:87:d2:63:
         a9:01:46:cf:72:f5:f7:0f:81:50:61:43:0e:58:16:8d:94:b4:
         46:05:a9:b1:01:75:67:92:98:d2:78:2b:ea:cc:61:2d:65:a0:
         54:0c:e7:0a:27:eb:ca:e3:8e:bb:fd:54:6c:a6:f9:77:67:b4:
         8f:89:eb:9e:11:a2:0d:da:42:3c:8d:9a:eb:61:41:8d:e7:7c:
         e1:e5:28:c3:dd:6a:de:3e:42:1c:e7:92:02:01:57:a0:dc:b3:
         0e:29:2c:b4:d0:4d:3f:6b:93:63:2b:50:dc:9c:fc:4d:49:69:
         77:fe:92:b8:31:a9:ec:db:56:b2:30:b8:a5:bc:9b:1b:7a:75:
         bd:3f:ef:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----