Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/41650bc9a15b19c30011e756e0868eff53c62027.roa
File:                     41650bc9a15b19c30011e756e0868eff53c62027.roa (raw, json)
Hash identifier:          m5YXaZwiEt0T4c0wODA+t64f25roFLcGy0nxQMjBogQ=
Subject key identifier:   2D:F6:5D:28:22:41:0E:52:A7:6C:EE:FC:55:1D:AA:A5:36:8A:69:81
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       0E30A2
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/41650bc9a15b19c30011e756e0868eff53c62027.roa
Signing time:             Wed 24 Mar 2021 14:30:55 +0000
ROA not before:           Wed 24 Mar 2021 14:30:53 +0000
ROA not after:            Tue 24 Mar 2026 14:30:53 +0000
asID:                     22411
IP address blocks:        200.41.84.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 929954 (0xe30a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Mar 24 14:30:53 2021 GMT
            Not After : Mar 24 14:30:53 2026 GMT
        Subject: CN=41650bc9a15b19c30011e756e0868eff53c62027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c9:b6:49:f4:5b:ff:5f:b5:f4:59:50:08:d0:
                    0b:f9:7a:ea:d5:2e:5d:b1:31:cc:20:55:0b:1c:52:
                    10:7f:8d:75:b9:83:ec:a2:62:3c:74:67:88:32:e5:
                    33:ad:60:73:95:0d:47:69:18:1b:80:9c:e2:66:39:
                    a3:ca:e1:95:92:7c:3e:3a:36:dd:79:46:86:c2:b3:
                    9d:b4:f6:e0:a8:8a:50:b1:e3:c0:9d:24:12:96:42:
                    fa:04:09:69:aa:13:25:8e:f7:28:dc:b7:95:0e:39:
                    a8:cd:70:8b:0a:58:b8:c3:dd:5f:3d:90:49:ed:ff:
                    49:6d:92:a9:93:e4:6e:95:41:64:14:b0:e6:cc:02:
                    e6:ab:d1:ff:fd:4a:ef:98:2b:b4:a1:27:3a:64:d2:
                    52:d7:8f:00:e8:c3:c9:90:44:36:9a:52:4a:eb:c2:
                    97:38:06:72:de:5f:9b:26:20:0c:ed:64:2f:12:cb:
                    35:3c:91:97:54:ac:84:6c:b6:0c:f1:6b:79:40:8d:
                    7f:b7:a4:cd:97:79:05:3d:4c:4e:fc:40:03:8f:67:
                    d9:b4:17:3c:ef:a1:98:be:9b:50:fc:42:a6:25:25:
                    a5:ba:25:84:1e:e6:3a:13:3b:50:a5:7a:63:b1:7b:
                    35:b6:3d:1a:e0:06:09:5a:18:fb:45:f5:5d:fa:1e:
                    4e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F6:5D:28:22:41:0E:52:A7:6C:EE:FC:55:1D:AA:A5:36:8A:69:81
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/41650bc9a15b19c30011e756e0868eff53c62027.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.41.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:55:fa:bd:4a:8d:bc:75:eb:82:3f:50:0a:c5:2f:7b:39:76:
         49:a4:f5:23:d0:bf:55:0f:1c:fd:29:6d:0e:e6:05:fe:fa:b0:
         da:dd:57:80:a6:9f:a5:dc:a9:ff:c0:97:c9:7a:d1:76:e3:42:
         7c:92:8f:8b:85:eb:d0:c7:1c:45:48:b2:5f:ec:f4:9a:0f:15:
         c9:aa:66:07:37:25:f9:f0:ec:da:e8:bf:07:49:41:7e:96:cd:
         7f:f4:40:ae:88:ec:d7:c7:e5:79:61:bb:a4:93:de:48:47:d9:
         c7:b2:f8:14:2b:e7:00:63:db:ab:d0:ab:02:07:3f:a2:c3:3b:
         b9:94:59:66:95:5c:d4:93:b8:30:75:db:e2:c0:d3:34:bb:d6:
         b0:48:82:38:cf:2d:d8:1d:75:e3:06:f2:8a:8b:87:69:b2:62:
         cf:36:e3:61:27:a4:f1:64:b6:d6:fe:61:2c:9c:88:1e:09:f2:
         9e:0e:3c:f5:a9:fa:69:c2:cd:7d:4f:3f:7b:53:e6:87:ec:2f:
         cc:93:7c:0a:6a:09:0e:f9:d9:fa:77:f6:aa:96:de:35:b1:3c:
         ee:2e:1c:44:dd:cf:e5:d4:35:28:d1:db:2b:9a:7d:96:44:9d:
         d0:12:e8:7e:72:6a:e5:76:66:3d:6f:ee:10:51:b7:1e:bb:4b:
         3e:b0:91:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----