Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/a5ae4279c2dadd1f1baa77d39d4b90670da0e2a9.roa
File:                     a5ae4279c2dadd1f1baa77d39d4b90670da0e2a9.roa (raw, json)
Hash identifier:          8Vipf1QsdCs+h75tigOfr9EGAdgf0xMoqgIPvskg4Ck=
Subject key identifier:   D5:98:25:4F:5D:53:04:67:C5:76:38:FC:45:90:DE:41:DB:7C:55:21
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       0E1263
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/a5ae4279c2dadd1f1baa77d39d4b90670da0e2a9.roa
Signing time:             Wed 24 Mar 2021 14:30:54 +0000
ROA not before:           Wed 24 Mar 2021 14:30:53 +0000
ROA not after:            Tue 24 Mar 2026 14:30:53 +0000
asID:                     27872
IP address blocks:        201.234.229.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 922211 (0xe1263)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Mar 24 14:30:53 2021 GMT
            Not After : Mar 24 14:30:53 2026 GMT
        Subject: CN=a5ae4279c2dadd1f1baa77d39d4b90670da0e2a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f6:0a:51:14:e3:ec:4d:90:3e:b1:c0:e2:b1:
                    4d:b2:f1:90:09:00:d8:1c:60:f5:9d:61:ee:d9:39:
                    b7:17:af:74:43:72:20:a7:04:b2:31:82:ff:c9:d7:
                    91:bd:20:9e:58:38:be:7a:bd:af:15:a9:c8:90:34:
                    6a:d8:79:e1:4c:6c:6d:a3:73:34:7f:5e:a9:00:cf:
                    c5:1d:73:49:4b:8f:55:6a:a8:fb:1b:b4:c1:02:d9:
                    d8:10:11:da:62:20:e3:c2:58:2e:7a:60:d6:5f:06:
                    13:b3:10:53:e1:ec:30:41:ba:f2:bd:b8:33:7b:84:
                    5f:9d:5c:3d:87:bc:5f:4f:77:d0:d2:78:43:44:63:
                    4b:03:c4:9b:42:3b:5a:3b:90:d4:49:33:a0:85:16:
                    cd:27:c8:74:01:03:39:c8:cc:7a:21:61:e5:19:4b:
                    8e:a6:56:ec:d8:31:6d:c0:e0:cb:1c:43:19:b8:f0:
                    4d:77:dc:90:02:9c:87:a1:3b:1d:60:3a:45:77:fa:
                    03:71:a0:09:26:ba:ef:e2:f8:2f:fc:31:c7:4a:a3:
                    59:c1:c7:47:1a:ae:44:ca:a0:62:2c:81:9e:74:13:
                    f2:14:9a:71:ea:b6:5d:45:02:2f:75:59:72:ce:91:
                    49:0b:f8:70:79:c1:77:66:47:bc:9f:87:03:a0:a3:
                    8a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:98:25:4F:5D:53:04:67:C5:76:38:FC:45:90:DE:41:DB:7C:55:21
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/a5ae4279c2dadd1f1baa77d39d4b90670da0e2a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:14:bc:e1:f8:1c:2f:8d:d2:30:ff:54:db:d0:61:b3:3a:1a:
         26:fb:35:60:01:f3:e6:18:db:62:bd:53:58:0a:ef:4a:75:e6:
         a5:f0:e9:1d:a0:43:5d:01:e5:95:21:cb:19:e2:50:df:98:90:
         f8:9b:97:da:84:7f:67:31:43:47:bf:08:1d:34:f9:62:99:e5:
         a1:8f:9f:9b:d4:15:2f:64:d9:9b:cd:eb:a7:78:d2:3b:ca:67:
         84:65:96:50:8b:fb:60:4f:07:af:8f:53:a8:41:4d:b0:bc:94:
         d9:a8:71:47:64:e8:99:d6:1e:ed:d8:8b:b6:62:3f:77:19:89:
         4e:60:f4:60:46:33:16:41:7f:68:33:27:fc:b2:e0:3d:f2:4c:
         3e:a4:29:73:dd:86:84:44:52:d4:6d:da:18:50:44:57:bf:9d:
         3b:17:89:18:b2:75:aa:41:13:99:4c:b9:da:80:76:aa:8e:99:
         ab:55:9d:67:12:ec:e5:45:2b:25:bb:97:72:00:4c:ca:ea:d1:
         98:41:ba:3c:64:f1:8c:62:e6:19:95:16:ef:0a:17:ae:1c:57:
         cf:46:29:25:39:5f:b2:95:57:f2:5c:ee:f8:ee:4b:d8:df:48:
         c0:0f:e9:e5:cf:11:1a:13:9f:0b:c8:b2:e3:da:bb:b3:5c:1b:
         f6:e5:d2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----