Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/337c0e8f5915ca3b13c08873d2d8e9ac9c3d75d5.roa
File:                     337c0e8f5915ca3b13c08873d2d8e9ac9c3d75d5.roa (raw, json)
Hash identifier:          nE3SNPwfRD0pQkXtrHdF5lcPEKMmZvgV2yVaGIn0kdM=
Subject key identifier:   1C:19:C4:0D:7C:35:F0:FE:7F:88:21:9A:BE:E8:95:BB:3E:0F:D7:4A
Certificate issuer:       /CN=513674dcb37b91021affeddf80ef34c924423627
Certificate serial:       0F860B
Authority key identifier: 9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/337c0e8f5915ca3b13c08873d2d8e9ac9c3d75d5.roa
Signing time:             Thu 15 Jul 2021 14:57:05 +0000
ROA not before:           Thu 15 Jul 2021 03:00:00 +0000
ROA not after:            Sat 15 Jul 2023 03:00:00 +0000
asID:                     52392
IP address blocks:        190.99.120.0/21 maxlen: 21
                          2803:b100::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1017355 (0xf860b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513674dcb37b91021affeddf80ef34c924423627
        Validity
            Not Before: Jul 15 03:00:00 2021 GMT
            Not After : Jul 15 03:00:00 2023 GMT
        Subject: CN=337c0e8f5915ca3b13c08873d2d8e9ac9c3d75d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:c2:ce:5b:dd:a3:15:ca:39:25:86:0e:5a:
                    52:d5:d0:22:0a:a4:fe:9d:6c:be:38:bb:78:19:63:
                    b6:85:07:ad:74:2f:fb:ab:df:be:6d:01:f9:ab:ad:
                    a1:53:a6:59:2c:7d:24:97:06:ad:07:8c:98:9f:35:
                    bc:27:94:44:82:77:3b:35:92:b9:2d:fc:46:af:57:
                    09:d4:97:13:db:70:79:b2:57:19:f4:26:5c:0b:95:
                    9a:f3:c9:a0:e3:e9:d3:92:b1:c0:a9:93:b1:ee:ec:
                    9f:b5:78:10:97:22:78:5f:9b:b3:f0:42:a3:19:ef:
                    0c:4a:aa:43:31:76:b4:94:0f:aa:2d:3f:fd:6a:8d:
                    01:ce:42:76:d2:ab:55:0e:a8:fe:60:47:f2:c1:5b:
                    03:c7:94:91:09:33:d9:8a:50:c6:7d:62:c7:44:c9:
                    5e:53:81:0d:39:6d:c7:fa:76:03:27:60:42:9b:db:
                    d4:cb:d3:ee:99:e6:c1:78:e7:cb:f5:92:c2:86:41:
                    ac:3a:44:af:c2:ba:ca:55:e5:a6:80:b8:69:4a:cc:
                    36:ca:bc:44:d5:6a:65:b2:aa:73:5c:48:a1:da:85:
                    6e:08:f9:05:60:1f:e8:b5:c3:1e:0d:43:87:9c:b9:
                    b5:6a:b3:ef:9d:08:1a:24:c1:69:96:ae:3f:a1:23:
                    bb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:19:C4:0D:7C:35:F0:FE:7F:88:21:9A:BE:E8:95:BB:3E:0F:D7:4A
            X509v3 Authority Key Identifier:
                keyid:9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/337c0e8f5915ca3b13c08873d2d8e9ac9c3d75d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/513674dcb37b91021affeddf80ef34c924423627.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.120.0/21
                IPv6:
                  2803:b100::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:a8:2e:b7:c0:7d:b8:4f:a6:a2:7e:6d:d7:f3:02:a4:df:8f:
         af:6d:7d:e8:ea:e1:55:fd:39:d0:fc:cc:1e:a3:84:97:20:94:
         af:7e:da:3a:37:6b:6c:b4:82:f7:4b:29:63:f8:ef:75:31:88:
         fa:e3:5c:c1:e9:42:7e:db:a4:d8:85:38:45:2a:42:33:7c:04:
         6f:66:d5:77:50:20:05:03:a7:f7:05:ce:c7:ca:e7:45:10:55:
         6b:65:76:4f:64:8b:c2:ee:cf:76:32:5b:fd:ff:e3:db:10:1b:
         39:1c:0d:27:c6:59:ac:54:e5:d1:e0:2a:fa:29:58:12:b1:3e:
         c7:cb:c2:03:e7:42:8b:26:5f:e2:14:3f:c6:f5:4f:02:78:5d:
         c4:5d:27:17:fc:5d:90:3c:21:93:0c:0f:6c:9c:fd:73:12:85:
         e3:ba:2a:db:b4:f9:c9:47:61:7b:a8:ad:69:4f:3b:b5:dc:f4:
         85:ac:54:c9:7d:ef:9a:c4:d0:c8:29:05:2d:e4:94:eb:ce:0a:
         f9:75:02:7d:47:68:89:0c:7b:79:01:0d:0a:b6:d9:cf:cb:a8:
         10:27:60:af:2a:90:2a:c7:6a:9e:fd:5b:0f:ec:ea:10:b5:64:
         eb:f9:4c:93:c1:51:23:50:8b:ae:c9:3d:69:8a:a1:ab:b4:8c:
         95:41:a7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----