Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/67b2c5971744e08baffcb70e958646ff3a2decaf.roa
File:                     67b2c5971744e08baffcb70e958646ff3a2decaf.roa (raw, json)
Hash identifier:          c46hWttA4gMbylka4FBCuyfrfIaMLqSaT55A2KJx3vc=
Subject key identifier:   08:64:73:52:47:D8:D1:8B:33:F1:31:93:C2:D1:6F:60:37:73:69:EA
Certificate issuer:       /CN=f97eb9b253fa546f87b3f76167f283bcc3700361
Certificate serial:       203689
Authority key identifier: E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/67b2c5971744e08baffcb70e958646ff3a2decaf.roa
Signing time:             Fri 14 Apr 2023 00:36:43 +0000
ROA not before:           Thu 13 Apr 2023 00:31:34 +0000
ROA not after:            Mon 14 Apr 2025 00:31:34 +0000
asID:                     26506
IP address blocks:        200.25.86.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2111113 (0x203689)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97eb9b253fa546f87b3f76167f283bcc3700361
        Validity
            Not Before: Apr 13 00:31:34 2023 GMT
            Not After : Apr 14 00:31:34 2025 GMT
        Subject: CN=67b2c5971744e08baffcb70e958646ff3a2decaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:28:40:d1:ec:53:c2:4c:a6:ae:8c:e9:96:77:
                    7f:9a:04:0a:23:38:74:e6:3a:42:79:6d:99:f4:5c:
                    0a:85:6a:a5:74:2f:bc:b6:88:b9:99:c5:a3:ba:d9:
                    72:3f:1e:84:78:9d:62:a2:27:99:64:7b:96:c6:0c:
                    e5:7e:56:ef:98:f6:bf:39:a6:18:17:ff:7f:73:43:
                    8e:7e:9f:c9:45:68:7d:24:b9:ed:5f:63:d6:00:f6:
                    32:0b:18:f0:29:8a:93:50:5a:ab:66:80:86:35:80:
                    6c:72:8c:97:38:61:f9:77:95:50:99:37:30:2e:d1:
                    89:30:fb:a8:f9:4b:f6:fc:e7:42:2b:e0:95:aa:03:
                    82:40:b0:45:b4:7d:e4:76:1d:09:18:cc:fa:3c:cc:
                    c2:7b:83:82:da:07:96:83:f4:43:f8:c0:46:52:f9:
                    66:5e:41:e6:19:80:50:8f:83:2d:37:e1:0e:3d:b4:
                    0a:66:2a:75:d4:57:41:ec:56:c6:3f:28:f7:b8:12:
                    43:2b:fd:0a:9d:ae:f3:8c:38:14:63:1f:b4:44:6a:
                    94:45:7d:7d:70:14:92:23:db:fe:78:64:02:3b:e9:
                    28:39:82:bb:62:7c:59:bf:1b:8b:96:d1:2a:db:96:
                    e3:51:75:5d:c8:8f:18:e1:d0:2a:b5:48:de:43:35:
                    d6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:64:73:52:47:D8:D1:8B:33:F1:31:93:C2:D1:6F:60:37:73:69:EA
            X509v3 Authority Key Identifier:
                keyid:E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/67b2c5971744e08baffcb70e958646ff3a2decaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/f97eb9b253fa546f87b3f76167f283bcc3700361.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.25.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:5c:8e:2e:44:ef:90:dc:b0:14:85:3a:c5:22:65:84:6d:0f:
         f1:c0:b5:d5:33:da:41:95:ca:ac:8e:89:fc:fa:9f:23:69:d2:
         33:01:59:29:d4:28:29:74:29:18:64:80:3e:6e:9d:3b:82:18:
         c3:f1:aa:00:92:da:b4:e1:d2:36:22:85:e2:8f:16:95:39:65:
         6b:92:8b:88:ca:4f:79:db:82:1f:32:87:14:1f:97:c6:7c:b9:
         22:b3:79:01:58:76:be:2e:e7:65:e6:3f:1e:e9:ed:6a:2d:26:
         c4:b9:8c:14:1c:f6:85:66:1b:d3:d2:73:0b:3c:55:cf:13:09:
         95:9c:08:8f:d9:01:9c:0e:1c:7b:d0:1f:55:9f:42:7d:51:68:
         b8:55:c8:6f:1d:34:d0:f7:0c:9a:e9:8c:2c:e1:92:a3:05:11:
         16:ed:39:a1:f6:3e:4a:37:bc:d7:56:87:2d:e2:f9:6d:b6:b5:
         bc:69:6d:cc:49:68:ec:d8:bd:92:c4:7f:aa:6c:7e:f1:6f:2f:
         a8:ad:a8:0d:97:3f:61:a7:d0:16:09:a0:62:ee:26:dc:27:c6:
         27:b4:b9:4c:fe:8f:d1:0f:23:ba:fe:1e:99:70:b8:2b:cd:6a:
         99:45:de:3a:c3:ba:ad:7b:7d:0d:8a:de:89:43:1f:e5:af:66:
         80:87:4d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----