Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/5688bd25fe7c5ef334b002f61837898544b6cc3b.roa
File:                     5688bd25fe7c5ef334b002f61837898544b6cc3b.roa (raw, json)
Hash identifier:          KZalj9AI0UbewetsQr/SeBCLjVoUXM6OdtXqYCFMqZI=
Subject key identifier:   8F:0D:AC:2D:9A:B5:B1:98:A1:E4:A1:99:1B:66:77:13:0A:2C:CE:E5
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       0E0BB9
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/5688bd25fe7c5ef334b002f61837898544b6cc3b.roa
Signing time:             Wed 24 Mar 2021 14:41:09 +0000
ROA not before:           Wed 24 Mar 2021 14:41:08 +0000
ROA not after:            Tue 24 Mar 2026 14:41:08 +0000
asID:                     28097
IP address blocks:        186.3.30.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 920505 (0xe0bb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Mar 24 14:41:08 2021 GMT
            Not After : Mar 24 14:41:08 2026 GMT
        Subject: CN=5688bd25fe7c5ef334b002f61837898544b6cc3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9a:0b:16:0b:a2:f7:53:ac:af:63:76:80:f0:
                    99:ee:c9:1b:0e:76:2d:e9:bb:bf:47:83:28:52:28:
                    99:fc:14:68:36:d5:35:66:b7:48:da:a8:6d:f4:23:
                    f3:e3:8f:df:02:85:0d:b1:97:88:35:9c:30:6b:3d:
                    2b:bf:34:1d:df:cf:be:f4:e4:df:b6:de:cb:df:51:
                    29:ab:38:75:fc:e9:50:d8:f7:a1:62:ce:df:5b:fd:
                    ec:5d:42:1d:93:dc:1a:e8:11:c1:95:4a:31:a7:aa:
                    8c:fe:ca:02:ff:47:4d:fa:eb:f2:81:46:4d:12:50:
                    5f:e5:be:e9:eb:f1:e0:f2:5f:7d:b7:e2:29:92:e9:
                    25:41:65:c6:fe:69:72:eb:b7:f9:ea:31:4f:ae:eb:
                    48:a4:22:e7:42:e9:53:d2:0c:8c:82:ac:13:38:fb:
                    b9:12:6a:5b:0c:c6:76:75:c8:50:fa:fc:d9:1b:19:
                    e6:a7:76:1b:d2:fd:a0:22:06:d3:1d:8e:67:75:9b:
                    19:22:bf:e2:a5:67:e5:27:7b:96:31:00:8e:49:50:
                    ba:33:ad:c8:a5:34:67:15:36:9c:6e:d2:e8:a9:6a:
                    6f:87:ae:31:9e:ca:b3:38:dc:f2:54:4d:7c:a7:c6:
                    65:b9:c9:2e:6d:e5:eb:8c:7e:b9:05:d9:58:a8:6f:
                    e6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0D:AC:2D:9A:B5:B1:98:A1:E4:A1:99:1B:66:77:13:0A:2C:CE:E5
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/5688bd25fe7c5ef334b002f61837898544b6cc3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.3.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:9b:34:64:87:26:81:f5:a0:cd:49:2f:e9:e8:8a:1f:f9:f7:
         50:93:ef:03:ec:f8:10:84:92:b0:a8:3b:54:ed:50:ca:a4:f5:
         9e:68:73:65:9e:a9:26:5c:8a:8e:fa:ce:08:19:a2:af:8f:b3:
         47:c6:2e:35:98:82:3e:fb:b2:cb:6b:6f:ad:99:70:db:1f:4d:
         c4:48:ee:d1:ae:a6:b6:6f:4a:fd:82:e1:55:28:7f:14:e4:19:
         4d:5f:3f:13:c4:4f:33:da:bc:a0:7f:60:d9:b6:54:1d:4a:28:
         d7:d2:82:a7:8e:6b:f1:f8:e9:b5:58:de:1b:da:dd:e9:b8:86:
         d8:fa:99:c5:a9:eb:d4:15:27:91:78:34:83:c1:30:a7:4a:7f:
         eb:d8:bc:70:33:e0:9d:6d:b6:6b:9a:8a:ca:a6:42:d8:40:67:
         9c:75:b9:ab:a5:c5:3c:cc:61:ae:0b:13:9d:44:ac:d1:81:c5:
         da:67:43:6c:f2:96:4b:de:8f:f3:d1:6a:d9:f5:72:df:ef:2a:
         39:c6:8b:2f:4e:2c:64:67:50:5f:26:bd:f0:f8:13:fd:51:64:
         a8:b1:fd:ee:46:49:98:c8:b9:85:eb:b7:ab:de:94:17:59:f9:
         89:f6:8a:59:0f:ee:81:d5:cb:a6:db:97:0f:80:b4:02:d0:f9:
         81:9b:f2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----