Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/29bf38448ebbe43592876023ebbe65887bc9a223.roa
File:                     29bf38448ebbe43592876023ebbe65887bc9a223.roa (raw, json)
Hash identifier:          f3yCI42kqaIX7zECjSK1kVtGuLHHKKlIcnI1ykr6LO4=
Subject key identifier:   F5:EE:21:1B:84:46:F0:7A:15:D9:76:A1:1B:9D:17:58:68:0E:50:80
Certificate issuer:       /CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
Certificate serial:       03D5A7
Authority key identifier: EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/29bf38448ebbe43592876023ebbe65887bc9a223.roa
Signing time:             Wed 24 Mar 2021 14:47:12 +0000
ROA not before:           Wed 24 Mar 2021 14:47:12 +0000
ROA not after:            Tue 24 Mar 2026 14:47:12 +0000
asID:                     52289
IP address blocks:        200.93.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251303 (0x3d5a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
        Validity
            Not Before: Mar 24 14:47:12 2021 GMT
            Not After : Mar 24 14:47:12 2026 GMT
        Subject: CN=29bf38448ebbe43592876023ebbe65887bc9a223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:51:4a:76:9e:ed:f5:b1:52:64:48:8d:f4:26:
                    94:40:e6:94:12:54:1e:37:a5:fc:fc:b7:c2:b9:23:
                    9b:3a:42:64:b8:a8:77:a8:bc:59:40:41:44:ca:eb:
                    4a:7c:08:21:7a:92:29:ee:d3:49:19:7e:bd:e8:b0:
                    1d:ee:de:7e:2f:91:fa:16:1b:41:87:ee:28:42:02:
                    44:0c:1a:17:37:39:51:ff:e6:ed:72:a7:15:cc:e6:
                    33:8d:09:63:a0:e9:12:c2:ce:8d:12:60:05:81:c1:
                    6f:23:49:6f:6a:0c:a3:81:82:86:5d:43:70:76:8e:
                    68:7c:06:02:ce:77:1e:97:e8:7c:16:d2:b3:72:ad:
                    4d:87:4a:de:52:f4:f3:2d:63:58:f1:c2:1a:36:38:
                    3d:a9:89:0c:0c:70:03:8b:92:96:9c:2d:a2:e8:2a:
                    07:9a:64:11:9f:b8:f4:82:96:fd:a0:58:a3:b5:63:
                    26:99:64:e1:9e:a2:1c:f9:b6:7f:00:ab:11:10:f3:
                    64:99:e9:19:ca:73:4b:0a:98:cd:48:5c:42:e7:a4:
                    1e:bc:d5:77:56:f5:6e:21:a5:97:0d:60:18:e8:5f:
                    d0:44:a1:8c:fd:95:1a:17:8a:b2:15:fe:2f:95:57:
                    1d:d5:f3:95:0e:17:4f:16:70:5d:47:6b:f5:ac:d6:
                    ee:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:EE:21:1B:84:46:F0:7A:15:D9:76:A1:1B:9D:17:58:68:0E:50:80
            X509v3 Authority Key Identifier:
                keyid:EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/29bf38448ebbe43592876023ebbe65887bc9a223.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/7ad45033c78c4f66de023e56ff03e177bf1bcb19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:10:2f:83:f0:3c:b1:7a:02:20:89:83:85:4a:96:35:d0:45:
         d1:0d:e8:ae:0a:8b:60:61:ef:85:25:bb:91:fa:7d:e3:34:e3:
         7b:24:7f:69:29:95:a2:25:0e:b2:9b:b7:bd:5c:7d:a1:e7:81:
         c2:e4:ca:bd:b1:88:b9:91:25:2e:21:18:97:74:0a:71:3d:4f:
         2e:d3:56:34:50:37:dc:f4:bd:0b:cd:c0:57:dd:9a:fb:80:9c:
         88:4b:c6:55:aa:b1:b1:50:cf:b6:24:7a:05:08:0c:32:55:c5:
         d3:39:0f:ac:29:9e:cb:e5:c9:eb:17:87:8c:15:84:75:fb:49:
         61:c3:6c:f0:0e:6f:9a:69:61:6e:0c:8e:0c:d8:91:68:40:8b:
         7c:b3:c8:a4:66:86:9b:ca:fd:e8:7b:d5:40:df:1d:83:00:a7:
         f3:dd:ba:9f:8f:0b:fd:7a:4d:15:0b:7d:ce:30:ef:69:d5:b5:
         3e:49:5d:54:56:23:27:30:1a:97:98:2a:b9:09:77:86:a9:81:
         3e:a2:9c:e2:57:fc:b6:22:51:03:ad:b0:90:bc:02:fe:9a:7e:
         f4:63:3d:07:1d:d1:c8:5f:27:5e:e7:53:dc:07:fe:66:fb:fe:
         d1:f7:97:ee:45:9b:ce:64:70:ed:70:42:44:0a:49:2c:ff:c0:
         db:a4:73:8e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDA9WnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdh
ZDQ1MDMzYzc4YzRmNjZkZTAyM2U1NmZmMDNlMTc3YmYxYmNiMTkwHhcNMjEwMzI0
MTQ0NzEyWhcNMjYwMzI0MTQ0NzEyWjAzMTEwLwYDVQQDEygyOWJmMzg0NDhlYmJl
NDM1OTI4NzYwMjNlYmJlNjU4ODdiYzlhMjIzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzVFKdp7t9bFSZEiN9CaUQOaUElQeN6X8/LfCuSObOkJkuKh3
qLxZQEFEyutKfAghepIp7tNJGX696LAd7t5+L5H6FhtBh+4oQgJEDBoXNzlR/+bt
cqcVzOYzjQljoOkSws6NEmAFgcFvI0lvagyjgYKGXUNwdo5ofAYCzncel+h8FtKz
cq1Nh0reUvTzLWNY8cIaNjg9qYkMDHADi5KWnC2i6CoHmmQRn7j0gpb9oFijtWMm
mWThnqIc+bZ/AKsREPNkmekZynNLCpjNSFxC56QevNV3VvVuIaWXDWAY6F/QRKGM
/ZUaF4qyFf4vlVcd1fOVDhdPFnBdR2v1rNbuqwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPXuIRuERvB6Fdl2oRudF1hoDlCAMB8GA1UdIwQYMBaAFOwg4C67s6eNrtt4
lZblKMljsWqxMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2FkNDUw
MzNjNzhjNGY2NmRlMDIzZTU2ZmYwM2UxNzdiZjFiY2IxOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTk0YTE0M2EtZmFjZC00NDhhLTk5OGItNWEzMDZh
Yjc4NGJjLzI5YmYzODQ0OGViYmU0MzU5Mjg3NjAyM2ViYmU2NTg4N2JjOWEyMjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xOTRhMTQzYS1mYWNkLTQ0OGEtOTk4Yi01YTMw
NmFiNzg0YmMvN2FkNDUwMzNjNzhjNGY2NmRlMDIzZTU2ZmYwM2UxNzdiZjFiY2Ix
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhd9jANBgkqhkiG9w0BAQsFAAOCAQEAlhAvg/A8sXoCIImD
hUqWNdBF0Q3orgqLYGHvhSW7kfp94zTjeyR/aSmVoiUOspu3vVx9oeeBwuTKvbGI
uZElLiEYl3QKcT1PLtNWNFA33PS9C83AV92a+4CciEvGVaqxsVDPtiR6BQgMMlXF
0zkPrCmey+XJ6xeHjBWEdftJYcNs8A5vmmlhbgyODNiRaECLfLPIpGaGm8r96HvV
QN8dgwCn8926n48L/XpNFQt9zjDvadW1PkldVFYjJzAal5gquQl3hqmBPqKc4lf8
tiJRA62wkLwC/pp+9GM9Bx3RyF8nXudT3Af+Zvv+0feX7kWbzmRw7XBCRApJLP/A
26Rzjg==
-----END CERTIFICATE-----