Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/6c9be47f122b2f0e45de270b819daf1938dbfc32.roa
File:                     6c9be47f122b2f0e45de270b819daf1938dbfc32.roa (raw, json)
Hash identifier:          Ho5nK2WQfBhgmbXRssfOlOX9rhmbPQiOywoz2l2jPw0=
Subject key identifier:   71:D9:22:5E:5E:33:87:13:CF:9F:A2:16:06:98:63:5F:F9:68:E1:58
Certificate issuer:       /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial:       0B8E84
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/6c9be47f122b2f0e45de270b819daf1938dbfc32.roa
Signing time:             Wed 24 Mar 2021 14:31:58 +0000
ROA not before:           Wed 24 Mar 2021 14:31:57 +0000
ROA not after:            Tue 24 Mar 2026 14:31:57 +0000
asID:                     27875
IP address blocks:        170.210.144.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 757380 (0xb8e84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
        Validity
            Not Before: Mar 24 14:31:57 2021 GMT
            Not After : Mar 24 14:31:57 2026 GMT
        Subject: CN=6c9be47f122b2f0e45de270b819daf1938dbfc32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1a:14:6e:8a:01:aa:9e:4f:64:bd:62:22:2f:
                    c9:45:c3:3d:df:5d:62:17:a0:e9:0a:a2:42:e3:8d:
                    f3:d8:b3:15:70:0f:ff:d8:3c:8b:01:88:08:ad:33:
                    ce:2e:02:dc:44:f3:4c:37:11:76:e3:b1:09:8e:78:
                    f6:5f:b9:cd:11:99:de:1a:83:fb:f5:5c:e7:81:21:
                    5a:4b:29:ad:d5:d7:de:41:bb:c0:79:00:bf:0f:ae:
                    b2:60:b5:f1:f8:80:c8:bf:b1:c4:8d:2d:71:6a:1f:
                    33:b8:2a:af:7d:6e:4f:87:f7:67:2b:41:29:fb:03:
                    77:91:18:34:46:8b:0a:45:6e:93:02:7e:59:43:7a:
                    6c:d6:c7:54:5e:af:8a:5e:9c:83:b7:b2:30:d5:84:
                    fa:61:61:f8:ec:22:c9:99:1f:63:79:71:57:02:bb:
                    9e:38:42:a7:7b:16:6d:46:f5:2a:ab:e5:56:7f:8d:
                    76:79:30:bc:16:56:4c:50:c6:58:b2:69:5c:2b:dc:
                    60:46:7d:9b:77:73:7d:f0:fd:5c:6a:9a:d6:f1:1c:
                    65:da:43:74:49:05:da:14:3e:26:83:8d:ed:51:31:
                    6c:3b:32:a8:76:25:02:18:61:5b:7c:9d:55:3c:ea:
                    4d:b7:f9:25:0d:95:98:25:11:21:48:73:c3:6c:c7:
                    4c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D9:22:5E:5E:33:87:13:CF:9F:A2:16:06:98:63:5F:F9:68:E1:58
            X509v3 Authority Key Identifier:
                keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/6c9be47f122b2f0e45de270b819daf1938dbfc32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b2:4d:e3:dd:23:8d:27:f0:61:e5:a0:e8:c8:ba:41:04:5c:fd:
         52:e7:a9:fe:53:4a:ed:41:87:a1:92:62:01:c1:a0:a8:67:25:
         41:1f:0d:ed:2d:a3:7e:62:29:11:ac:70:b1:0f:0a:e8:8f:db:
         81:dd:54:dc:ce:81:a5:b2:ac:69:11:bd:20:5a:2b:69:46:50:
         ba:03:55:76:98:c2:41:8d:45:d1:6b:5a:60:c4:da:b1:50:a7:
         17:b9:fe:b1:26:1d:74:02:c9:bf:23:f3:76:9b:35:29:5a:64:
         a5:32:60:3f:ef:42:60:08:48:43:22:34:36:6f:b4:ee:1f:b7:
         2a:d3:0f:b5:57:c4:ff:93:94:f1:18:fd:e5:e5:67:a2:6e:80:
         38:79:43:f4:e2:c9:48:b6:d2:53:aa:f1:ec:cc:d5:93:b9:6f:
         b3:4f:e8:76:b5:62:b9:81:0c:ef:ed:79:de:4c:ed:d1:20:6d:
         fc:27:12:64:b8:f7:72:93:2b:98:83:e5:6c:d4:28:5a:e5:28:
         b3:ec:85:e5:91:82:47:19:c7:f4:f6:c6:68:67:8d:0a:7f:9b:
         4f:2f:d1:6a:35:75:70:6b:87:46:2c:be:7c:e2:2b:2d:f4:34:
         76:7a:e8:89:65:5d:cd:17:dc:c3:e6:b7:a6:68:f4:bb:80:e4:
         3b:9d:b2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----