Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/a7749b3acd21f545fe560739433c9a859aac2a3a.roa
File:                     a7749b3acd21f545fe560739433c9a859aac2a3a.roa (raw, json)
Hash identifier:          SK2HdUTLFqLxWvFJPEIfkNdICNcXtq6S8mF5xrfLDnk=
Subject key identifier:   BB:90:6A:62:EE:DF:97:CE:FB:1B:2E:52:17:0C:35:18:0A:F4:EB:D4
Certificate issuer:       /CN=d62baf1d43712ef5f3860b21d04e8534536fa164
Certificate serial:       0E0677
Authority key identifier: 87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/a7749b3acd21f545fe560739433c9a859aac2a3a.roa
Signing time:             Wed 24 Mar 2021 14:33:16 +0000
ROA not before:           Wed 24 Mar 2021 14:33:16 +0000
ROA not after:            Tue 24 Mar 2026 14:33:16 +0000
asID:                     27995
IP address blocks:        191.117.0.0/16 maxlen: 18

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919159 (0xe0677)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62baf1d43712ef5f3860b21d04e8534536fa164
        Validity
            Not Before: Mar 24 14:33:16 2021 GMT
            Not After : Mar 24 14:33:16 2026 GMT
        Subject: CN=a7749b3acd21f545fe560739433c9a859aac2a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3f:ff:b1:1c:4b:66:85:5e:8d:92:ec:0f:5b:
                    a3:e5:2e:af:3e:fa:f3:c8:ff:33:f4:1a:55:84:59:
                    ac:4b:c0:fc:e5:b1:7f:58:c4:9b:e4:8d:d2:2c:c4:
                    79:29:1a:15:ea:46:6e:1e:0e:9b:86:f3:00:a4:a3:
                    73:04:1c:e6:b3:c8:a3:e6:60:fe:f4:29:a0:c2:36:
                    cc:d2:66:92:cb:a7:0a:48:28:27:bc:13:b0:70:8c:
                    c7:4b:11:87:a9:07:28:17:9a:b7:3f:aa:9e:9d:11:
                    30:27:95:11:36:48:d0:8d:01:da:e0:ed:b6:29:37:
                    da:68:f4:01:8d:f8:82:ad:7c:55:81:1d:32:57:9b:
                    0d:e7:27:3f:8e:69:4a:34:ee:65:41:6b:aa:08:c1:
                    af:b4:b7:d4:2d:7b:c9:98:b8:c0:d7:93:25:4a:d1:
                    85:d7:a9:ae:b5:a5:81:ba:46:51:0d:8e:ba:ef:c7:
                    20:3a:b2:c1:50:c0:35:94:08:b8:67:dd:3b:e4:e7:
                    4f:d9:c4:34:b4:0a:56:79:8c:74:77:f5:ac:0f:ac:
                    03:15:9d:d5:7f:c1:22:63:a5:58:3a:ea:2d:a0:ec:
                    c4:a0:29:1f:dd:2b:e5:d6:e9:9c:4a:12:d9:c2:f2:
                    c3:f2:62:54:60:26:7b:eb:02:b6:c7:eb:0e:68:72:
                    ab:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:90:6A:62:EE:DF:97:CE:FB:1B:2E:52:17:0C:35:18:0A:F4:EB:D4
            X509v3 Authority Key Identifier:
                keyid:87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/a7749b3acd21f545fe560739433c9a859aac2a3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.117.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cb:7f:42:58:2b:0c:2a:af:9e:38:5a:16:37:77:5c:0d:09:27:
         ec:76:fb:7d:91:ae:b2:03:3b:61:c0:22:bf:b6:23:7b:49:0f:
         30:5d:75:4b:af:15:cb:b1:78:66:a4:4e:1e:41:1f:45:ad:90:
         ed:41:2d:a2:e9:5d:5e:d1:37:88:83:98:f7:25:c3:7f:69:0c:
         f1:84:53:5e:03:08:1b:44:19:7f:e8:ec:69:ca:0d:a4:98:98:
         6c:0a:99:44:b6:06:f3:cd:70:ed:78:06:2a:14:62:9f:e2:d7:
         34:1c:f4:55:12:e3:44:88:e3:9b:3e:24:f0:c1:48:e2:70:fc:
         b4:38:e2:38:12:59:f0:68:e9:1a:1e:51:be:f4:0a:e2:c0:c6:
         94:12:10:49:6b:ab:5e:1e:31:f5:e7:85:44:46:a0:22:14:7c:
         e4:3b:1d:35:c2:1c:4c:f5:0f:83:04:98:b6:c3:2a:f1:3e:57:
         64:3d:17:f4:5a:29:af:b7:62:8d:bc:ad:b1:99:d0:15:11:75:
         72:51:6e:bf:35:af:ec:07:e0:d5:c8:3b:e8:da:7f:9a:40:ea:
         38:eb:56:d1:cc:0d:b2:7a:1e:ce:d2:31:aa:8a:61:19:4b:b5:
         f2:ae:06:a4:53:ef:fe:6e:40:1f:82:f5:e9:82:13:99:16:39:
         de:ad:3f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----