Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/6f2dd7321d52c6610d699ce6cda8694ba4834c0b.roa
File:                     6f2dd7321d52c6610d699ce6cda8694ba4834c0b.roa (raw, json)
Hash identifier:          bQFuVVRXgmuwrTbNUgK4RNDVQE4UndlSxWitYHQNNHc=
Subject key identifier:   13:0B:1D:EB:43:AE:1D:A3:4E:88:15:68:75:AE:DB:6D:9F:DE:2C:BF
Certificate issuer:       /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial:       0B8F8E
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/6f2dd7321d52c6610d699ce6cda8694ba4834c0b.roa
Signing time:             Wed 24 Mar 2021 14:31:58 +0000
ROA not before:           Wed 24 Mar 2021 14:31:57 +0000
ROA not after:            Tue 24 Mar 2026 14:31:57 +0000
asID:                     28107
IP address blocks:        170.210.160.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 757646 (0xb8f8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
        Validity
            Not Before: Mar 24 14:31:57 2021 GMT
            Not After : Mar 24 14:31:57 2026 GMT
        Subject: CN=6f2dd7321d52c6610d699ce6cda8694ba4834c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:dd:de:9a:3d:0b:ae:64:f5:58:28:4f:84:e8:
                    6f:72:e4:83:a2:97:71:4c:f3:65:51:3e:fc:17:31:
                    c9:52:eb:ac:28:25:6d:9d:2b:0e:85:8e:fd:e8:06:
                    ab:d9:02:15:a5:d9:f8:5e:c2:ce:eb:04:ac:2d:ed:
                    8e:6a:e6:da:07:be:b7:c2:8f:fc:f9:a6:f2:2a:16:
                    4d:f1:17:81:2c:d8:53:f1:44:ae:2b:58:36:e1:b3:
                    85:48:a9:d7:eb:65:e9:83:e1:19:23:d1:1e:ec:45:
                    02:9d:ef:4b:ff:6d:1a:4b:f9:36:76:5f:ba:d0:8e:
                    5a:fa:85:e6:44:c4:b6:f9:0c:8e:fa:29:15:4c:71:
                    45:30:ce:98:54:e4:af:02:51:fd:71:88:62:dd:6e:
                    34:7b:f6:15:2b:b2:24:4c:08:e0:c8:7e:59:48:3b:
                    d3:a1:22:79:b9:91:8f:08:62:26:a6:16:96:b0:29:
                    5b:e6:9e:b1:e8:d1:a0:8e:83:ef:fe:1f:d7:77:8b:
                    00:70:ae:97:61:3b:1a:d5:f6:7b:fc:17:b7:cf:6c:
                    fc:ee:fd:fe:2f:4d:21:22:68:08:c8:43:f7:00:ac:
                    48:c8:05:ca:d6:db:69:39:85:13:f9:61:c8:b0:2b:
                    d6:05:97:cc:83:ff:f1:ed:c6:05:83:bc:4e:64:6f:
                    f2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0B:1D:EB:43:AE:1D:A3:4E:88:15:68:75:AE:DB:6D:9F:DE:2C:BF
            X509v3 Authority Key Identifier:
                keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/6f2dd7321d52c6610d699ce6cda8694ba4834c0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:18:08:31:c0:84:a9:36:3f:4c:b0:b2:d1:ba:8b:3a:87:0d:
         4a:4f:11:8e:e6:91:aa:3e:dc:9d:cb:cf:ed:f2:a5:30:fc:b5:
         3b:cd:66:76:7c:aa:de:3e:a8:2b:83:f1:c4:ab:dd:56:a2:12:
         c2:87:89:d2:54:60:a0:13:a8:16:27:3a:84:52:97:e6:ae:ba:
         14:db:8d:08:d4:04:99:c5:16:fb:81:3e:96:b8:1c:bf:1a:64:
         6b:51:38:63:05:c8:48:a7:f8:c6:79:87:54:75:ed:19:7a:87:
         db:f1:ee:d3:6d:7e:24:16:fe:13:1e:8e:dc:25:3e:3e:01:e6:
         4e:5b:01:7a:d8:08:b6:47:78:fc:45:3e:72:ec:38:1d:c7:88:
         dc:a1:98:78:70:76:74:0b:79:dc:49:80:15:89:92:52:a6:f8:
         b0:b5:c3:79:f7:02:e5:e7:df:d7:ad:5e:6f:9a:c5:02:db:18:
         a0:c5:6c:37:50:93:c6:b3:c4:b6:a2:93:0c:85:ff:cf:4c:5b:
         6f:47:ae:e1:64:c0:6a:ce:c5:d6:c9:09:f8:fc:34:44:8f:30:
         35:85:b6:6d:66:c3:58:28:41:b6:96:1d:c6:b2:f9:a7:a9:54:
         0d:c9:cc:c8:fd:ea:59:9b:ed:99:32:c8:72:b3:e9:7b:ed:f1:
         38:db:f6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----