Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/925ac5be2bd731bdccda3d1d7d9c95cb5e6106b7.roa
File:                     925ac5be2bd731bdccda3d1d7d9c95cb5e6106b7.roa (raw, json)
Hash identifier:          wiF6Ef63cCdQoI+NCZqpHp8QsIPrmw/awrkeGgTYOTk=
Subject key identifier:   AC:32:F2:D7:0F:3E:AE:63:DA:FC:97:7C:67:43:72:08:82:5F:90:C6
Certificate issuer:       /CN=d62baf1d43712ef5f3860b21d04e8534536fa164
Certificate serial:       0DFD99
Authority key identifier: 87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/925ac5be2bd731bdccda3d1d7d9c95cb5e6106b7.roa
Signing time:             Wed 24 Mar 2021 14:33:16 +0000
ROA not before:           Wed 24 Mar 2021 14:33:16 +0000
ROA not after:            Tue 24 Mar 2026 14:33:16 +0000
asID:                     27995
IP address blocks:        186.172.0.0/14 maxlen: 16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 916889 (0xdfd99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62baf1d43712ef5f3860b21d04e8534536fa164
        Validity
            Not Before: Mar 24 14:33:16 2021 GMT
            Not After : Mar 24 14:33:16 2026 GMT
        Subject: CN=925ac5be2bd731bdccda3d1d7d9c95cb5e6106b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0a:7f:bf:81:ee:cd:14:03:b5:bd:0d:99:ed:
                    41:f4:c6:18:a9:ae:ef:a9:37:cb:82:ba:5e:68:fa:
                    b9:e9:38:37:33:04:0f:56:26:b7:f6:87:28:6b:d3:
                    62:e8:33:95:88:2d:8e:a8:33:a2:51:c7:71:15:e4:
                    bd:05:f8:e9:5a:37:b5:c0:eb:86:e4:b9:78:85:d2:
                    88:c7:b5:59:11:59:d8:bb:2d:3c:d4:92:aa:e6:0f:
                    ff:a6:b8:d5:bf:89:c8:6a:af:a9:ab:bc:5f:be:84:
                    86:ef:2c:73:e8:49:0d:d9:92:a8:02:74:e7:ce:cc:
                    85:e4:b0:cf:77:4e:f6:68:18:86:a6:91:47:6f:f2:
                    e4:3c:9f:d2:18:f4:4e:99:69:cd:d3:3c:1a:1e:cd:
                    29:ab:6d:3f:46:9e:48:2d:dd:16:fe:23:57:43:40:
                    dc:ec:87:1b:9d:88:87:ba:d6:d0:38:82:e6:37:62:
                    23:f6:ae:ff:62:63:0f:1a:84:cb:c2:e9:41:53:68:
                    31:d9:30:26:cc:70:81:86:f9:61:b8:92:0a:a8:fc:
                    0c:85:1d:15:c5:b7:b5:92:2d:cb:e1:8f:b3:42:32:
                    62:58:c4:e3:d8:88:e7:07:ab:f5:b6:b5:cb:fb:c2:
                    a9:47:b2:dd:74:0c:be:6c:04:e4:53:22:a7:73:6f:
                    d2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:32:F2:D7:0F:3E:AE:63:DA:FC:97:7C:67:43:72:08:82:5F:90:C6
            X509v3 Authority Key Identifier:
                keyid:87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/925ac5be2bd731bdccda3d1d7d9c95cb5e6106b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.172.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         c0:31:b4:da:5e:de:e3:5c:e4:37:47:cd:43:04:0e:e4:82:a7:
         6a:86:73:a4:57:58:8e:99:23:70:ce:f8:de:cb:29:6d:f6:06:
         26:64:49:7c:bc:2d:09:ae:c6:2c:b6:fa:f5:17:4e:d6:d2:3e:
         e6:57:6b:69:00:c1:8d:d5:af:56:63:60:76:30:04:cf:9b:a4:
         f5:5e:a1:0e:2e:4b:ef:bd:11:aa:b7:52:c8:54:f5:aa:74:4b:
         da:89:10:4a:c1:a6:f1:4c:b2:bb:29:23:e4:5d:5f:1f:38:f6:
         8d:b6:01:c1:9b:56:44:92:9a:ef:33:2a:7a:0c:cf:ef:6c:1a:
         d7:ca:38:4e:fa:80:42:33:74:e6:9b:e2:c4:ff:e9:61:a4:75:
         b2:d8:f6:c2:b4:4b:1d:83:b0:0e:2a:ca:78:e5:a0:ab:7a:79:
         ff:be:96:61:5a:64:a4:87:a8:cf:42:b5:49:30:51:db:44:5c:
         aa:eb:75:46:ab:31:86:f6:c0:d3:cb:d0:c7:72:dc:6c:86:69:
         f3:47:dd:d1:54:a6:d1:fd:91:60:a6:a2:00:c9:c3:f7:67:1d:
         88:3e:49:07:3e:14:b7:e8:80:75:7f:c2:53:81:7c:70:36:75:
         b2:cd:28:c1:cc:9a:7c:09:d5:8f:c9:bd:81:50:33:c0:e4:38:
         65:f0:d0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----