Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/9bb4ad46b686c6b97b494da11b07b53da406b618.roa
File:                     9bb4ad46b686c6b97b494da11b07b53da406b618.roa (raw, json)
Hash identifier:          /ObPnCK1pkOFhtcRb+fo0rX9tlknFN7RV/2zrTWeJag=
Subject key identifier:   5E:53:9D:A8:7E:6D:D7:66:5A:33:CB:4D:5A:32:18:92:6C:E4:48:06
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       0E0FC3
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/9bb4ad46b686c6b97b494da11b07b53da406b618.roa
Signing time:             Wed 24 Mar 2021 14:30:54 +0000
ROA not before:           Wed 24 Mar 2021 14:30:53 +0000
ROA not after:            Tue 24 Mar 2026 14:30:53 +0000
asID:                     27941
IP address blocks:        200.41.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 921539 (0xe0fc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Mar 24 14:30:53 2021 GMT
            Not After : Mar 24 14:30:53 2026 GMT
        Subject: CN=9bb4ad46b686c6b97b494da11b07b53da406b618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:87:08:6c:bc:19:ef:1b:50:8d:56:93:b0:88:
                    d9:89:26:ad:64:f2:09:c1:81:42:c3:3d:83:1d:f0:
                    d4:03:7f:c1:e2:89:3d:9d:18:00:7b:e8:29:dd:8f:
                    f7:4f:46:01:cd:bf:e4:7d:22:c0:91:66:6d:55:57:
                    c5:a4:53:ce:6c:7a:8a:3d:f3:b0:0c:a5:30:45:20:
                    a0:6d:77:6f:e4:09:87:d1:86:91:31:7d:f6:b7:ae:
                    e0:ed:e7:b5:31:63:13:b8:45:fb:63:8d:75:4d:9b:
                    33:36:94:da:c5:e6:09:9e:be:97:4e:e3:92:16:90:
                    ea:3f:df:66:e9:69:97:2c:37:96:62:63:78:98:26:
                    cf:73:a3:eb:8e:58:72:a5:3c:83:34:d2:e3:1a:32:
                    1c:ea:40:c0:e0:26:d2:55:cd:5e:b8:72:49:ed:1c:
                    9a:c7:87:3b:6c:60:b9:c6:fd:c0:35:d4:96:33:2c:
                    7b:89:6b:7c:80:06:a0:b0:7f:02:54:dd:f3:47:81:
                    bf:3a:a5:ea:c9:b8:f2:4f:74:9f:9b:d5:f6:d8:6d:
                    6d:1a:34:f5:55:0a:9c:52:56:a9:9b:e5:08:eb:d1:
                    6f:db:83:66:a7:6e:fe:f6:43:fa:e7:5c:1b:b5:25:
                    ee:c7:55:9a:44:4a:cc:4d:00:31:6e:bd:3c:21:4f:
                    cf:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:53:9D:A8:7E:6D:D7:66:5A:33:CB:4D:5A:32:18:92:6C:E4:48:06
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/9bb4ad46b686c6b97b494da11b07b53da406b618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.41.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:a6:e3:b2:fd:bf:9c:c9:93:50:e1:a6:80:9a:98:b2:dc:2a:
         22:9c:78:a3:96:68:e4:ea:31:2e:69:3b:54:5e:c8:52:f9:70:
         ac:f6:d2:6e:bf:f6:f9:3c:13:1f:80:cf:ee:cf:97:a2:92:36:
         26:53:e6:90:31:5e:1e:09:d8:02:f0:73:fc:9a:e1:56:51:63:
         85:f1:e9:aa:03:bb:00:22:42:4f:c9:cd:3f:8a:9b:28:1b:fb:
         c1:25:01:5d:11:47:9a:a1:21:3d:da:4f:df:e3:a0:56:87:0b:
         03:97:da:24:5d:42:4e:d1:c6:34:b1:de:fb:fd:e0:a8:58:0c:
         9a:3f:d8:17:49:88:1b:38:49:89:2d:ac:fb:98:a4:a6:7c:7b:
         08:d4:4e:0e:95:00:52:9e:18:a9:df:82:86:1e:fb:01:b9:c0:
         e6:0a:1d:70:a1:51:d7:23:a7:b6:d6:63:39:65:60:78:05:a2:
         cc:c2:05:f9:55:a9:c1:39:89:bd:0b:dc:e6:5d:11:72:46:63:
         09:7b:82:ce:4e:f6:00:00:91:83:05:8f:db:b9:9e:38:02:06:
         f2:62:ed:b5:b8:06:66:75:0c:3b:55:83:d3:16:43:e8:b5:fe:
         c7:08:13:17:4d:3d:ba:a2:e9:f5:c5:1d:3c:68:75:ad:6e:03:
         8c:13:10:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----