Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/79af494f21580fecc154dffb82e18a6695f6be15.roa
File:                     79af494f21580fecc154dffb82e18a6695f6be15.roa (raw, json)
Hash identifier:          l/FGEcy8XsN0vQKR0kbMNASkJ5EDGPRmHCoVl45jLcI=
Subject key identifier:   57:B1:C9:DA:4E:83:FA:18:DF:37:03:29:FF:CD:17:58:E4:A5:8F:25
Certificate issuer:       /CN=bd7f33cd5376098fb55565247f8dae5ea5de2952
Certificate serial:       1632B2
Authority key identifier: A6:04:C9:CB:35:2E:0C:6A:F1:2E:E5:72:B5:4F:8C:35:1B:BF:1C:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd7f33cd5376098fb55565247f8dae5ea5de2952.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/79af494f21580fecc154dffb82e18a6695f6be15.roa
Signing time:             Wed 23 Mar 2022 08:30:01 +0000
ROA not before:           Wed 23 Mar 2022 08:30:01 +0000
ROA not after:            Fri 22 Mar 2024 08:30:01 +0000
asID:                     14522
IP address blocks:        200.50.232.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1454770 (0x1632b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd7f33cd5376098fb55565247f8dae5ea5de2952
        Validity
            Not Before: Mar 23 08:30:01 2022 GMT
            Not After : Mar 22 08:30:01 2024 GMT
        Subject: CN=79af494f21580fecc154dffb82e18a6695f6be15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4b:e4:d6:46:fa:28:8b:54:6c:06:2b:82:e4:
                    23:57:c2:2d:94:44:54:f5:c2:da:91:76:60:92:6e:
                    aa:c6:ab:a2:0e:03:65:79:1c:1a:40:d2:99:b3:14:
                    76:7c:d2:3d:27:f2:31:f6:cb:e8:d4:21:e8:8a:c3:
                    e4:83:e2:b9:1b:7b:95:cb:72:4c:3a:f4:a5:7c:2f:
                    0d:52:48:e2:ba:67:34:18:bc:88:5c:9c:c6:98:e3:
                    d5:d6:56:e9:b5:45:04:7a:3d:35:5c:67:c2:2c:88:
                    8a:2f:a5:ac:72:7e:dc:61:7d:f3:0c:d6:b4:f5:d0:
                    62:e9:c0:c9:0f:80:c3:cc:91:3c:35:5e:ad:06:a0:
                    76:76:1f:7b:aa:69:86:85:84:dd:cb:35:df:c4:e3:
                    f9:e1:8b:23:8e:88:c5:35:cc:1c:ee:87:73:75:bc:
                    1c:00:08:83:5b:47:dc:52:23:89:7d:88:3b:0f:fd:
                    c2:6c:ed:53:ed:57:36:36:82:d9:e5:cc:ce:fc:6e:
                    dd:e0:0e:46:76:8b:25:a8:97:b7:e3:43:b9:58:e1:
                    96:92:e3:ab:6d:f7:4f:0c:47:4f:68:c2:a0:eb:99:
                    d1:aa:73:5c:71:35:be:4e:91:52:fb:33:2f:b6:88:
                    1b:55:0b:ea:70:65:ca:86:72:b4:fb:29:9d:84:96:
                    21:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B1:C9:DA:4E:83:FA:18:DF:37:03:29:FF:CD:17:58:E4:A5:8F:25
            X509v3 Authority Key Identifier:
                keyid:A6:04:C9:CB:35:2E:0C:6A:F1:2E:E5:72:B5:4F:8C:35:1B:BF:1C:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd7f33cd5376098fb55565247f8dae5ea5de2952.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/79af494f21580fecc154dffb82e18a6695f6be15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/bd7f33cd5376098fb55565247f8dae5ea5de2952.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:6a:3b:7e:96:73:d6:41:87:e3:7c:e4:97:53:29:c1:05:87:
         10:5b:86:56:b8:cc:82:25:43:4f:17:c6:63:85:b3:c5:86:a0:
         46:f1:b7:d5:b5:e9:3b:73:2c:6c:56:e7:fc:79:06:89:d5:a6:
         12:95:80:ee:f5:b8:45:b1:dd:86:25:6e:a5:21:70:9b:28:db:
         1a:39:a3:6b:cd:cf:99:c1:57:de:57:00:6f:fc:f2:6c:f8:86:
         23:e9:73:dd:74:0a:58:27:26:1e:62:00:93:1d:48:a3:23:76:
         85:9e:b7:ee:e8:47:e4:5b:28:33:3b:f5:5e:6a:85:de:07:45:
         2d:7d:a5:79:f5:cc:77:f6:d2:9a:6a:6d:6b:88:67:bd:16:84:
         f2:61:96:cc:7e:e3:0a:a5:15:b0:9c:1b:65:52:91:e1:72:bd:
         b7:d6:90:c2:0c:ab:b1:86:b1:02:11:1b:1b:5b:9c:fc:fa:cf:
         fe:9e:51:c7:6a:12:6b:d9:e3:8e:07:32:09:74:84:b8:ce:4e:
         ba:b8:df:04:6a:79:f4:08:b8:1b:13:56:2e:81:34:68:3e:c2:
         14:94:67:b5:ea:7c:02:fc:f2:c5:10:ef:d0:94:af:5b:18:8e:
         87:58:48:b7:be:ac:47:01:30:ab:78:87:be:a3:5f:e2:d8:e0:
         97:39:64:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----