Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ff79bff4-e3d4-49e2-9e42-454af92034f6/5fecf88d51f48f98cd174c30bdc15d1e78ecf9c7.roa
File:                     5fecf88d51f48f98cd174c30bdc15d1e78ecf9c7.roa (raw, json)
Hash identifier:          y8hgx5QcG7ZEYoCPsY8LDHdO2NJMVAsAedHtGK4+o/8=
Subject key identifier:   8A:EB:99:82:74:BF:1A:3D:CE:79:4D:C0:65:96:C7:4E:A5:D9:60:75
Certificate issuer:       /CN=986ea0f5c8cffc44df21b81b038b788b536d285b
Certificate serial:       0D5E1C
Authority key identifier: 05:43:30:37:75:78:C3:ED:77:46:AB:1E:45:B3:C5:86:0B:0A:C3:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/986ea0f5c8cffc44df21b81b038b788b536d285b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ff79bff4-e3d4-49e2-9e42-454af92034f6/5fecf88d51f48f98cd174c30bdc15d1e78ecf9c7.roa
Signing time:             Wed 24 Mar 2021 14:35:00 +0000
ROA not before:           Wed 24 Mar 2021 14:35:00 +0000
ROA not after:            Tue 24 Mar 2026 14:35:00 +0000
asID:                     52467
IP address blocks:        138.36.65.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876060 (0xd5e1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=986ea0f5c8cffc44df21b81b038b788b536d285b
        Validity
            Not Before: Mar 24 14:35:00 2021 GMT
            Not After : Mar 24 14:35:00 2026 GMT
        Subject: CN=5fecf88d51f48f98cd174c30bdc15d1e78ecf9c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ad:ae:1c:7a:44:3f:06:7f:b7:2d:72:fc:fa:
                    11:bf:e4:dc:40:4b:fb:2c:53:48:a6:d8:a1:60:5b:
                    2c:37:4c:7c:7d:42:43:54:a1:7d:3b:98:ab:c2:28:
                    e2:fc:6d:35:ba:6a:05:a8:dd:73:f4:3f:00:97:05:
                    9a:c9:a4:22:de:e7:cf:b8:14:8e:48:19:a5:ac:c5:
                    26:7c:60:18:6b:39:08:87:c0:82:68:ce:42:b3:ad:
                    66:a7:06:2b:37:b7:6a:1f:70:0a:85:e4:b0:be:08:
                    4a:33:ae:5f:e3:ef:4a:82:ec:56:97:40:1b:b1:e8:
                    d0:26:36:45:99:83:ae:87:c1:d4:14:a2:0c:49:e7:
                    68:61:e9:e3:6a:da:db:17:9b:8e:7d:1c:a7:97:d3:
                    88:5b:ac:f3:60:b5:97:26:4a:73:ab:67:d3:f8:2d:
                    b6:43:19:89:3e:bd:fc:5b:75:76:60:8a:95:da:d5:
                    3e:11:fc:c5:e2:30:96:97:17:a5:ce:a7:37:e0:4a:
                    a1:32:39:5e:29:9e:f8:9f:5b:e1:f4:94:be:44:f8:
                    8e:07:74:02:71:b7:37:c2:f1:b4:79:9a:83:1b:b5:
                    7d:06:62:0a:0c:cd:5a:5d:f7:2d:7e:c8:1e:53:88:
                    6f:90:63:62:cc:54:16:54:f4:13:2f:7c:7e:00:45:
                    7b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EB:99:82:74:BF:1A:3D:CE:79:4D:C0:65:96:C7:4E:A5:D9:60:75
            X509v3 Authority Key Identifier:
                keyid:05:43:30:37:75:78:C3:ED:77:46:AB:1E:45:B3:C5:86:0B:0A:C3:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/986ea0f5c8cffc44df21b81b038b788b536d285b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ff79bff4-e3d4-49e2-9e42-454af92034f6/5fecf88d51f48f98cd174c30bdc15d1e78ecf9c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ff79bff4-e3d4-49e2-9e42-454af92034f6/986ea0f5c8cffc44df21b81b038b788b536d285b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:74:97:7c:e1:8b:b3:b0:f6:4c:b4:42:ce:ae:b8:c5:18:a2:
         5c:e5:aa:87:6a:c0:76:08:18:a3:8b:fb:35:e2:a6:e0:c1:92:
         88:9f:e4:3c:1b:7e:53:c9:1c:1d:c4:84:bb:30:5d:9d:bd:03:
         71:2d:9c:b4:e0:75:cc:47:1c:97:10:f8:25:25:ae:2f:36:82:
         aa:9f:ba:9a:c6:17:b6:58:a0:92:ae:73:44:f7:dc:ab:47:06:
         e4:04:9a:e4:a9:58:ba:a1:1c:fd:00:47:ab:07:57:40:10:96:
         a3:96:d7:c4:90:b7:ec:c0:61:35:73:24:6f:11:2f:2b:3e:70:
         05:22:a3:8f:3b:89:14:e9:25:7d:73:07:45:17:8e:b7:02:68:
         bf:95:88:89:df:38:3c:89:35:3c:e2:69:4e:3e:8c:a5:87:72:
         f4:8b:ee:90:47:5a:6b:e0:e1:c5:b4:5f:14:fd:7c:e8:42:31:
         41:28:32:74:2a:2a:41:64:80:bc:d2:45:1c:53:84:54:7e:94:
         98:f2:29:73:6b:e8:b5:30:36:bf:ce:ed:6b:d8:ed:88:77:b4:
         d6:a5:5d:1c:a6:57:25:af:37:2d:0c:b0:1c:7b:6f:72:c9:9c:
         9d:19:d5:78:ba:aa:22:14:bd:b3:a0:41:0a:40:c6:ea:de:ce:
         9b:8f:e0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----