Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/a669d7f03543c4d08bba10517031a6c90235f57f.roa
File:                     a669d7f03543c4d08bba10517031a6c90235f57f.roa (raw, json)
Hash identifier:          F1JDIK7vB8UkCGOnGi9056o3wAZhERKACztP29uNuhU=
Subject key identifier:   E3:06:52:07:C0:5C:D1:91:05:08:7D:B5:A3:9B:E3:4A:28:6A:BC:EA
Certificate issuer:       /CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
Certificate serial:       0D3430
Authority key identifier: 26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/a669d7f03543c4d08bba10517031a6c90235f57f.roa
Signing time:             Wed 24 Mar 2021 14:48:10 +0000
ROA not before:           Wed 24 Mar 2021 14:48:10 +0000
ROA not after:            Tue 24 Mar 2026 14:48:10 +0000
asID:                     6306
IP address blocks:        179.20.0.0/14 maxlen: 24
                          179.44.0.0/14 maxlen: 24
                          181.180.0.0/14 maxlen: 24
                          181.184.0.0/14 maxlen: 24
                          186.24.0.0/17 maxlen: 24
                          186.24.128.0/17 maxlen: 24
                          186.25.0.0/16 maxlen: 24
                          186.164.0.0/15 maxlen: 24
                          186.166.0.0/16 maxlen: 24
                          186.184.0.0/15 maxlen: 24
                          186.186.0.0/15 maxlen: 24
                          200.31.128.0/19 maxlen: 24
                          200.35.64.0/18 maxlen: 24
                          200.71.128.0/20 maxlen: 24
                          200.71.144.0/20 maxlen: 24
                          200.71.160.0/19 maxlen: 24
                          2800:6b0::/28 maxlen: 28

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865328 (0xd3430)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
        Validity
            Not Before: Mar 24 14:48:10 2021 GMT
            Not After : Mar 24 14:48:10 2026 GMT
        Subject: CN=a669d7f03543c4d08bba10517031a6c90235f57f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:37:28:7d:af:e2:dd:88:61:6c:df:8c:3f:d4:
                    b2:3a:be:1d:79:eb:7e:56:79:d5:c0:f7:3f:ef:e6:
                    ae:ec:54:b5:ad:a8:19:97:97:ca:9c:49:ca:46:0a:
                    41:76:89:50:3e:55:6e:00:86:55:fb:b6:68:53:47:
                    91:15:e9:eb:02:ca:ac:17:a3:44:ff:b6:30:0b:9b:
                    66:ab:7f:14:5e:03:05:21:11:b7:32:5c:c3:28:93:
                    5f:0a:48:56:2b:e8:ac:93:63:c6:45:7c:5b:02:c5:
                    f8:fe:a0:16:54:7d:ac:1d:e8:ff:3d:de:3d:2a:21:
                    f7:2a:02:31:12:44:6e:eb:41:84:3f:42:fa:91:4c:
                    fe:bf:84:25:60:57:3e:9b:92:6a:77:9c:31:d2:0d:
                    6b:6a:ff:30:7d:3e:cc:f6:b0:9c:c5:dd:07:21:11:
                    f8:ba:61:7e:ac:ea:5e:a6:92:13:04:88:5e:dd:10:
                    5a:88:20:77:c1:67:88:ee:b7:8d:2b:1d:7b:42:71:
                    69:62:87:dc:60:ed:1d:86:0e:a4:44:de:87:69:29:
                    0a:11:27:14:8e:27:08:cf:86:35:33:1f:aa:85:33:
                    6b:72:8c:2b:9c:6c:7d:8e:10:d2:08:a7:43:97:f7:
                    ff:96:47:27:fe:9c:a4:9f:84:70:f7:bb:19:b9:35:
                    a5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:06:52:07:C0:5C:D1:91:05:08:7D:B5:A3:9B:E3:4A:28:6A:BC:EA
            X509v3 Authority Key Identifier:
                keyid:26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/a669d7f03543c4d08bba10517031a6c90235f57f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.20.0.0/14
                  179.44.0.0/14
                  181.180.0.0-181.187.255.255
                  186.24.0.0/15
                  186.164.0.0-186.166.255.255
                  186.184.0.0/14
                  200.31.128.0/19
                  200.35.64.0/18
                  200.71.128.0/18
                IPv6:
                  2800:6b0::/28

    Signature Algorithm: sha256WithRSAEncryption
         22:13:6b:a6:4c:0f:fe:46:e5:51:e9:e3:b4:83:bb:4e:7e:e7:
         49:e2:00:3b:62:1a:59:a6:76:0c:d7:aa:19:87:5d:07:f5:06:
         92:a3:a6:78:bf:2c:8e:e7:63:c3:69:7d:6f:00:12:6c:8a:7f:
         bb:76:06:1b:9b:dc:56:02:82:eb:93:26:30:60:0b:33:f8:12:
         df:07:76:5b:19:9b:d3:e6:03:4d:43:28:0b:67:3e:6d:51:bd:
         5d:12:a0:2a:a8:2c:f7:5d:bf:a7:12:8a:79:f3:44:06:b7:2b:
         df:69:39:c1:42:b1:85:5f:c8:a3:12:52:fd:97:08:8f:e0:28:
         31:46:d4:da:26:a7:14:77:7f:3b:e7:8c:28:d8:05:3f:9c:d3:
         a1:bf:e3:5f:02:57:ba:6e:e7:21:fe:54:a3:d4:c8:04:18:85:
         5a:07:a8:8c:1b:7d:52:ec:64:77:6f:ec:02:44:6a:2a:86:c4:
         cd:d3:8d:cb:fc:14:7e:d9:12:d0:5b:fa:02:21:ab:36:9a:91:
         f6:67:c6:e7:98:e5:b9:33:75:56:a7:ef:bd:5d:30:76:11:a0:
         db:2c:5c:84:70:eb:27:be:aa:a0:a5:2c:bb:3d:aa:52:e2:b9:
         85:04:d8:8c:d4:e9:4b:76:07:74:10:08:d9:50:1b:57:c4:65:
         03:fa:46:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----