Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/32d982f173eb460166987cc11ec8f3c268699886.roa
File:                     32d982f173eb460166987cc11ec8f3c268699886.roa (raw, json)
Hash identifier:          Hc3Kwud4kvHmevB+J81dFMzHeWXEbnAnOfYeZ0e60T4=
Subject key identifier:   62:67:1C:75:7E:73:E2:46:AD:38:8E:1A:9C:4D:8C:65:7F:C3:27:9F
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       0E261A
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/32d982f173eb460166987cc11ec8f3c268699886.roa
Signing time:             Wed 24 Mar 2021 14:30:55 +0000
ROA not before:           Wed 24 Mar 2021 14:30:53 +0000
ROA not after:            Tue 24 Mar 2026 14:30:53 +0000
asID:                     10697
IP address blocks:        201.234.93.0/24 maxlen: 25

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 927258 (0xe261a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Mar 24 14:30:53 2021 GMT
            Not After : Mar 24 14:30:53 2026 GMT
        Subject: CN=32d982f173eb460166987cc11ec8f3c268699886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:04:b7:31:65:e3:fe:99:03:c5:45:69:6c:a9:
                    19:e9:e5:92:3d:23:53:09:c4:49:ec:05:c5:4d:bc:
                    80:53:3a:16:ec:ce:c6:59:7a:53:10:33:a6:b5:6c:
                    75:78:e1:09:7c:19:b3:6f:57:7c:62:81:3d:4c:77:
                    a5:41:94:40:74:d0:5e:b3:66:16:21:cb:bb:c3:b9:
                    61:0e:56:0d:54:17:a3:0b:c4:05:56:91:e7:dc:2f:
                    45:12:a8:30:7b:a5:6d:53:b1:e6:b9:ce:3d:ce:78:
                    2a:14:2e:a3:ac:20:32:58:11:28:e9:32:e1:8f:d3:
                    ca:b6:5c:c7:13:f3:47:7b:5f:18:83:67:ab:40:9e:
                    60:dc:52:86:61:32:59:a4:8d:76:65:e5:65:9a:02:
                    d6:b1:29:4b:de:2d:fc:dd:7c:c0:22:15:9a:ec:33:
                    7b:24:ad:95:88:0b:8c:d9:46:19:64:f1:6c:29:a1:
                    e5:3c:34:1b:91:e8:d1:ec:97:7c:76:04:9a:5e:7f:
                    5f:df:4b:1b:83:a4:d9:b0:c8:d0:9c:9b:5e:0b:20:
                    6a:d3:5b:f9:a0:7a:4a:19:f5:8f:cc:b9:61:a9:7a:
                    66:65:40:ca:2c:d8:a3:32:5f:74:6c:9a:6e:1c:32:
                    3c:1d:39:01:7a:c1:b6:24:30:da:46:c9:88:34:b8:
                    13:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:67:1C:75:7E:73:E2:46:AD:38:8E:1A:9C:4D:8C:65:7F:C3:27:9F
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/32d982f173eb460166987cc11ec8f3c268699886.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:bd:df:11:98:55:66:d7:6e:85:00:13:3a:29:de:32:9c:98:
         b4:eb:ed:43:1e:f6:7e:15:c5:ad:e2:9b:3f:29:d1:a1:e1:04:
         ee:45:9c:4d:54:cd:33:ce:95:fb:d5:f4:a1:89:f8:b9:49:4b:
         f4:8d:47:21:15:e9:1b:60:20:81:5b:34:9d:d2:c1:bd:cc:68:
         15:5d:09:a6:f9:91:4a:59:bd:3a:2b:8e:a1:b8:d2:70:1c:8e:
         05:13:3f:56:23:66:81:19:8e:56:d5:d5:c8:f8:ef:24:f9:dc:
         05:36:ec:52:3d:4b:e0:34:b2:8e:3b:90:cd:08:4e:91:7f:a2:
         64:c7:0c:1d:a7:d1:9e:e8:b8:68:7c:de:ee:8e:01:a8:b7:0b:
         4a:aa:a1:af:61:b1:9a:41:00:0a:7f:92:17:89:d7:c9:b2:c7:
         8c:5d:6e:8d:0c:dd:c0:3a:0f:14:de:93:40:aa:5d:d0:79:f8:
         0f:a7:4c:11:e3:40:3b:c6:3f:7e:9d:59:87:1c:c8:c3:79:91:
         cd:70:e7:8d:33:c5:b7:a8:9d:69:e2:ea:18:af:0c:7f:8a:58:
         e4:dd:2a:b6:2f:0c:f0:16:e2:ec:23:d5:40:b0:6e:ec:18:4f:
         56:81:68:dc:a2:c0:11:62:31:2b:e1:77:5f:ae:0b:75:40:7c:
         63:aa:52:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----