Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/9344862b66d6b00696e879d798dbc4ea42ba6873.roa
File:                     9344862b66d6b00696e879d798dbc4ea42ba6873.roa (raw, json)
Hash identifier:          yeOTMjp9X/ssqVjz+Kd7F63/ps30hKKgd2S2Nb1TkT4=
Subject key identifier:   5D:6B:FB:D0:19:F2:22:B7:83:25:5E:21:11:7F:A2:E2:10:35:E3:D7
Certificate issuer:       /CN=bd7f33cd5376098fb55565247f8dae5ea5de2952
Certificate serial:       0DA96F
Authority key identifier: A6:04:C9:CB:35:2E:0C:6A:F1:2E:E5:72:B5:4F:8C:35:1B:BF:1C:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd7f33cd5376098fb55565247f8dae5ea5de2952.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/9344862b66d6b00696e879d798dbc4ea42ba6873.roa
Signing time:             Tue 20 Apr 2021 13:26:18 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Thu 24 Mar 2022 03:00:00 +0000
asID:                     19114
IP address blocks:        200.50.237.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895343 (0xda96f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd7f33cd5376098fb55565247f8dae5ea5de2952
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2022 GMT
        Subject: CN=9344862b66d6b00696e879d798dbc4ea42ba6873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:eb:9a:62:e7:75:77:2a:e4:0b:62:86:ea:74:
                    3f:48:31:a6:49:58:93:b1:7c:ba:7a:50:a5:bf:b8:
                    e4:e7:85:b2:1c:a7:62:ad:cf:59:38:60:c1:9f:d1:
                    e9:bc:cf:a9:7e:aa:c5:e9:9e:f0:76:d3:fa:63:0e:
                    86:64:1d:24:b5:7b:c7:e4:e2:38:5d:3f:99:df:69:
                    98:5f:2b:dc:8e:56:77:f7:2b:e5:d5:df:ab:01:21:
                    bb:22:5c:c9:7a:38:9b:bd:fd:2d:0d:91:24:65:74:
                    ef:87:96:98:a7:17:82:ba:96:83:68:8b:0f:79:e3:
                    6c:9c:cc:c5:82:4c:52:a1:c0:42:3d:c8:39:31:e8:
                    92:ef:4a:c1:89:0b:fc:fe:dd:a3:e7:4b:24:b0:9d:
                    45:0b:aa:10:28:d0:8f:96:4d:99:b6:d1:37:d7:8f:
                    f9:46:43:dd:b6:40:df:63:d2:5a:ad:a0:68:84:ef:
                    06:ee:a2:7f:96:ee:8f:11:22:0e:5c:3a:2b:7b:1c:
                    7c:b6:cf:db:26:9e:7c:f9:b9:45:29:b7:38:a1:10:
                    4d:30:ff:28:c5:29:97:b7:f1:6f:e0:1b:a3:47:73:
                    9b:e1:4b:70:73:3b:ff:2a:d4:e0:20:74:43:05:2a:
                    8e:17:7b:dc:a2:79:e2:58:09:b0:f5:d9:81:58:e3:
                    4a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6B:FB:D0:19:F2:22:B7:83:25:5E:21:11:7F:A2:E2:10:35:E3:D7
            X509v3 Authority Key Identifier:
                keyid:A6:04:C9:CB:35:2E:0C:6A:F1:2E:E5:72:B5:4F:8C:35:1B:BF:1C:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd7f33cd5376098fb55565247f8dae5ea5de2952.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/9344862b66d6b00696e879d798dbc4ea42ba6873.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/bd7f33cd5376098fb55565247f8dae5ea5de2952.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:64:b8:bb:30:7f:4f:5c:0c:89:af:ad:65:6a:6b:73:c3:4e:
         c6:a0:b5:0e:6f:56:6f:a0:a8:7e:ce:de:9f:5a:24:10:cc:87:
         56:1c:de:bf:20:d8:45:a3:fd:e2:16:25:03:6a:a2:d8:90:f7:
         41:97:85:37:ab:0e:98:c4:59:27:e9:d6:c6:fa:7a:07:30:05:
         32:63:39:7e:62:f3:71:90:6f:5f:42:1b:dd:d1:cf:0f:b1:8f:
         6e:b1:f7:25:33:0a:30:f6:06:e6:bf:f5:68:60:8b:3a:a7:43:
         db:d3:70:c5:d0:a3:d4:52:8d:7d:0e:b0:d2:c8:2c:74:21:e1:
         9d:de:b4:b2:b2:36:d7:4b:96:30:95:d5:d9:b8:df:85:64:a0:
         e9:de:48:75:62:f0:b2:7a:db:1b:12:61:42:28:17:9e:aa:c8:
         0a:ab:1d:75:10:c4:23:c7:60:23:31:dd:15:69:e2:92:ce:00:
         d2:c1:13:0d:b3:cf:3a:ab:6d:88:de:fc:4d:28:e5:49:dd:07:
         0e:e1:20:ea:6d:fc:e1:bc:aa:be:ec:96:5e:96:0f:c1:6e:8e:
         5d:04:e0:89:6c:cd:41:04:80:97:67:95:c2:5f:ec:e3:0d:33:
         5a:d6:64:e4:47:5a:01:35:e3:c0:1b:a5:a3:cb:03:b3:99:4c:
         2f:c4:40:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----