Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/0483b4b2418e7da6f9e75a61a7f472335f0df75d.roa
File:                     0483b4b2418e7da6f9e75a61a7f472335f0df75d.roa (raw, json)
Hash identifier:          f7AP+aw/cXGR+dDrQDRkMtxHcLwbRVFsDha7Y2lHTQw=
Subject key identifier:   06:95:43:3D:4A:EC:2D:97:39:87:66:B1:B3:A0:61:B9:92:A2:06:E5
Certificate issuer:       /CN=07a3e63d1966870c34f83b79e6705d8dc3f9b809
Certificate serial:       2501F2
Authority key identifier: E7:4F:4B:4C:08:78:4E:1A:4E:22:4C:95:7A:B5:B7:5F:81:D9:24:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07a3e63d1966870c34f83b79e6705d8dc3f9b809.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/0483b4b2418e7da6f9e75a61a7f472335f0df75d.roa
Signing time:             Sat 26 Aug 2023 08:30:02 +0000
ROA not before:           Fri 25 Aug 2023 08:30:02 +0000
ROA not after:            Sun 24 Aug 2025 08:30:02 +0000
asID:                     7049
IP address blocks:        200.59.56.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2425330 (0x2501f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a3e63d1966870c34f83b79e6705d8dc3f9b809
        Validity
            Not Before: Aug 25 08:30:02 2023 GMT
            Not After : Aug 24 08:30:02 2025 GMT
        Subject: CN=0483b4b2418e7da6f9e75a61a7f472335f0df75d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c4:6e:d4:1d:56:19:9b:1f:e4:05:a0:54:bb:
                    60:e9:1d:af:5a:c1:13:b5:59:e9:65:c9:3b:68:f5:
                    f0:b2:bd:37:c5:99:0a:d4:33:25:ea:ec:d6:5b:ed:
                    c7:e7:c7:6b:5b:64:70:c4:08:d7:40:07:41:ec:0d:
                    3d:1e:25:d1:3d:fc:7d:f7:0e:53:fe:3d:23:60:21:
                    45:c9:23:be:30:60:bf:4a:1c:f2:e8:52:ba:34:db:
                    11:d2:79:e0:38:df:9e:21:ad:85:9f:bf:bd:47:cb:
                    07:9d:62:2f:8d:aa:88:7b:48:14:99:47:46:bf:c9:
                    fd:0e:a4:2b:10:d0:22:f1:05:d5:96:9f:57:ba:c3:
                    8d:06:3e:6d:de:50:f3:e2:9a:44:cb:5f:b8:f6:13:
                    c6:63:bf:a3:d4:50:c5:45:9d:65:81:25:70:cf:c2:
                    77:6c:13:4a:59:9c:a7:2f:56:d2:2c:5e:a2:b5:53:
                    7d:1b:f3:ce:0e:63:2f:8a:7d:57:4f:ad:d3:70:f7:
                    32:0f:11:47:91:de:f6:28:1b:11:ad:d3:b9:f2:8a:
                    de:cb:90:fc:a1:02:66:d9:60:73:ce:ec:a2:5e:bc:
                    94:c6:cd:8f:e0:56:84:e3:7b:dd:63:cf:6f:9e:91:
                    a7:2d:c8:38:66:f1:d1:d4:2b:19:75:cf:db:5b:0d:
                    17:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:95:43:3D:4A:EC:2D:97:39:87:66:B1:B3:A0:61:B9:92:A2:06:E5
            X509v3 Authority Key Identifier:
                keyid:E7:4F:4B:4C:08:78:4E:1A:4E:22:4C:95:7A:B5:B7:5F:81:D9:24:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07a3e63d1966870c34f83b79e6705d8dc3f9b809.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/0483b4b2418e7da6f9e75a61a7f472335f0df75d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/07a3e63d1966870c34f83b79e6705d8dc3f9b809.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:eb:6e:85:c2:1b:2f:14:25:cb:f6:13:b0:88:30:3d:0a:d3:
         d9:e2:2c:98:74:9e:9b:06:5d:e5:71:76:92:c0:d3:42:10:c1:
         95:57:5a:38:f0:e3:1f:47:4a:df:6a:fa:d7:73:f8:1f:f5:8e:
         0a:48:81:75:d8:3e:00:e7:96:ee:54:6a:e8:65:40:e6:05:4c:
         77:b7:82:e3:fa:76:a3:2e:7f:b0:5a:9c:0a:8f:fc:e4:4f:2a:
         ca:ba:ab:53:18:95:bb:d3:a5:29:54:d0:0b:b4:0f:c1:48:6c:
         33:18:78:83:3f:06:79:89:84:6f:10:0e:ff:c4:05:59:a3:3b:
         76:9d:7e:13:e6:7c:92:87:5b:ff:42:13:2a:93:96:a9:b8:8b:
         a9:92:70:cf:59:44:29:65:f8:8e:cb:8e:3a:f6:5b:e0:e3:5e:
         52:cc:ae:b4:19:a9:80:9c:c5:67:31:b6:b0:68:9c:54:e7:83:
         23:ef:00:39:b8:07:a3:02:52:96:9d:58:eb:46:59:14:16:3d:
         96:20:1b:31:69:b6:50:d3:7e:c3:33:93:c1:8b:f3:aa:6f:e3:
         4a:aa:08:ff:b4:4f:cc:13:ce:82:4d:e0:da:dc:dc:a5:e8:bc:
         cd:8a:fc:4b:0a:b8:65:cc:c3:ae:ad:ed:ad:03:3e:b6:48:72:
         7a:9b:ab:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----