Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/17067d41a56646115050ce3c3155f58bf2ba4f50.roa
File:                     17067d41a56646115050ce3c3155f58bf2ba4f50.roa (raw, json)
Hash identifier:          p86YemOam26t/lPkfjT1zRhs1GTCXEFUag7oE8mOaEM=
Subject key identifier:   C8:D1:71:12:AE:49:AC:C0:7C:51:82:D0:86:15:AF:2D:C8:B5:3A:F1
Certificate issuer:       /CN=d62baf1d43712ef5f3860b21d04e8534536fa164
Certificate serial:       0E0213
Authority key identifier: 87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/17067d41a56646115050ce3c3155f58bf2ba4f50.roa
Signing time:             Wed 24 Mar 2021 14:33:16 +0000
ROA not before:           Wed 24 Mar 2021 14:33:16 +0000
ROA not after:            Tue 24 Mar 2026 14:33:16 +0000
asID:                     27836
IP address blocks:        179.3.64.0/21 maxlen: 21
                          179.3.72.0/21 maxlen: 21
                          179.3.80.0/21 maxlen: 21
                          179.3.96.0/20 maxlen: 20
                          179.3.112.0/20 maxlen: 20
                          179.3.128.0/23 maxlen: 23
                          179.3.130.0/23 maxlen: 23
                          179.3.132.0/23 maxlen: 23
                          179.3.134.0/23 maxlen: 23
                          179.3.136.0/23 maxlen: 23
                          179.3.138.0/23 maxlen: 23
                          179.3.88.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 918035 (0xe0213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62baf1d43712ef5f3860b21d04e8534536fa164
        Validity
            Not Before: Mar 24 14:33:16 2021 GMT
            Not After : Mar 24 14:33:16 2026 GMT
        Subject: CN=17067d41a56646115050ce3c3155f58bf2ba4f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ec:2f:34:8e:7b:86:05:76:dd:58:43:2d:dc:
                    e1:35:99:10:9d:a8:65:84:17:97:18:39:fe:4a:47:
                    36:c4:fe:4d:d9:e3:a8:b5:d5:d6:bd:18:40:6c:19:
                    22:f4:9a:c7:3d:5c:c3:ae:7c:d7:2a:a8:fe:89:02:
                    26:4a:20:7c:74:e8:54:a4:0b:06:1d:bb:05:a5:62:
                    c7:cb:4b:e8:6b:cd:b1:28:a0:32:e9:96:2f:52:2e:
                    f8:4d:88:d6:68:df:7a:23:4b:79:33:85:3a:d9:79:
                    99:d4:8b:50:b3:27:d7:c7:71:bc:fa:24:da:09:bc:
                    96:14:fd:87:69:ce:f8:da:95:da:45:5b:96:44:3b:
                    83:06:4b:ec:f5:ab:8a:28:43:82:9e:63:42:ad:c8:
                    ac:60:75:1e:07:43:00:f4:90:32:97:ee:53:65:b1:
                    d2:3c:27:f4:81:1e:0f:09:96:d0:3e:c7:1d:a6:37:
                    d0:68:70:f2:a1:0a:58:ee:fd:ba:34:c7:63:8c:03:
                    ff:6a:35:86:22:3c:b4:66:e0:f2:d0:fd:48:31:50:
                    c8:91:2a:09:c8:0d:c9:31:ec:1c:76:f6:c2:95:ab:
                    1c:92:ef:f5:ef:39:36:55:36:34:cd:4e:94:91:47:
                    82:e3:7a:e4:b7:fa:b0:e8:84:a3:09:c0:96:a9:9e:
                    16:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D1:71:12:AE:49:AC:C0:7C:51:82:D0:86:15:AF:2D:C8:B5:3A:F1
            X509v3 Authority Key Identifier:
                keyid:87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/17067d41a56646115050ce3c3155f58bf2ba4f50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.3.64.0-179.3.139.255

    Signature Algorithm: sha256WithRSAEncryption
         3d:38:f8:06:b4:ff:2a:34:1c:c9:62:16:f9:c5:11:fb:e6:82:
         b0:76:15:ba:32:fe:d7:59:09:b6:15:35:3d:b0:d3:50:0b:75:
         89:53:ad:24:51:35:cb:60:63:0c:fc:d7:46:18:66:2d:b4:3f:
         76:79:9a:c1:a9:ea:83:b2:34:76:a5:d0:ed:d0:28:07:9d:e0:
         1b:a5:39:aa:60:15:f4:d2:2d:ee:21:73:02:84:bb:90:90:6f:
         10:69:b3:ba:91:a1:23:9a:f2:37:fe:a7:72:c6:74:59:4c:eb:
         ec:44:a4:f1:09:b4:61:6a:15:fa:a9:37:2c:ff:99:9a:7b:c7:
         cd:1b:7b:ec:63:66:13:c2:2f:11:40:82:8e:bb:d6:0e:1e:66:
         8d:56:1e:c5:f2:49:bc:46:8e:22:26:ab:3b:88:7c:f4:6e:43:
         0c:e1:09:4f:b9:f4:12:f9:a5:d2:c8:04:ee:bf:77:09:0e:27:
         63:b0:0e:f6:93:b2:40:5d:6a:82:9a:f0:c8:cf:e5:94:9c:12:
         78:97:3e:8d:91:e6:a7:cc:d4:cd:e7:68:71:b3:d4:3d:8f:5d:
         8a:15:12:69:fd:8b:9f:2d:e7:5d:ac:51:70:d8:e5:f4:c4:95:
         fc:4b:3d:af:38:ed:1a:72:9c:1b:17:f5:6d:a2:3d:d0:00:02:
         86:43:24:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----