Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/5642423dba3f1e469af504611b0ae2f57821d09c.roa
File:                     5642423dba3f1e469af504611b0ae2f57821d09c.roa (raw, json)
Hash identifier:          FWwUgt2oZ5FhaCWsHgSAM3YrDsl8EnUb4S7ONXbnkh8=
Subject key identifier:   B8:C5:67:48:33:A8:7A:78:49:B3:9A:D5:AA:F8:B1:8A:31:F5:A9:0F
Certificate issuer:       /CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
Certificate serial:       03DB4D
Authority key identifier: EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/5642423dba3f1e469af504611b0ae2f57821d09c.roa
Signing time:             Wed 24 Mar 2021 14:47:12 +0000
ROA not before:           Wed 24 Mar 2021 14:47:12 +0000
ROA not after:            Tue 24 Mar 2026 14:47:12 +0000
asID:                     30133
IP address blocks:        200.93.241.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252749 (0x3db4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
        Validity
            Not Before: Mar 24 14:47:12 2021 GMT
            Not After : Mar 24 14:47:12 2026 GMT
        Subject: CN=5642423dba3f1e469af504611b0ae2f57821d09c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:61:b5:29:c8:c4:cf:79:a2:4f:6e:1e:a0:f7:
                    50:b2:3c:d6:f7:ee:14:50:51:38:f4:19:8f:f8:42:
                    6a:a5:ec:58:60:55:b4:bd:0a:74:b4:1a:ec:8d:aa:
                    58:ca:fd:35:b2:4d:a5:10:93:79:b2:1f:22:0d:46:
                    dd:fd:81:96:de:5a:d2:92:98:de:cd:e9:16:26:5b:
                    f5:cf:5c:03:c2:41:a3:0f:dd:ee:1c:82:a9:34:7a:
                    d5:dd:cf:67:54:43:a7:37:58:e5:f2:1a:61:4c:8c:
                    7a:f5:ef:80:ca:82:ec:6c:33:47:f3:80:ec:4c:7a:
                    13:45:42:3a:4a:59:8d:b7:ec:69:a8:a0:43:81:8d:
                    7e:06:38:ba:37:c9:92:80:94:2e:5e:84:aa:a0:f5:
                    11:3d:7e:cb:c7:bb:c3:8e:55:0e:6f:e7:34:ec:1c:
                    cd:6d:99:0c:ff:27:70:a4:2f:64:9c:b7:17:bb:4b:
                    7a:e6:41:e4:bd:9f:c9:4e:68:46:5c:2f:56:9f:b4:
                    2a:35:44:54:a0:66:aa:18:55:89:2c:10:43:be:b5:
                    0b:6f:3c:fb:b2:8c:8e:e4:c1:86:fc:1d:f7:13:6d:
                    8b:21:4c:26:e0:0c:f1:88:97:36:5f:7d:ad:4d:ba:
                    dd:80:09:c6:05:6a:b6:66:ce:83:b3:d4:69:0c:03:
                    0a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C5:67:48:33:A8:7A:78:49:B3:9A:D5:AA:F8:B1:8A:31:F5:A9:0F
            X509v3 Authority Key Identifier:
                keyid:EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/5642423dba3f1e469af504611b0ae2f57821d09c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/7ad45033c78c4f66de023e56ff03e177bf1bcb19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:2d:8a:3f:9a:26:3b:c8:07:f5:c1:bd:1b:71:78:9d:ea:ba:
         ab:35:20:41:f1:8f:a8:6b:32:72:83:56:d3:7d:12:5e:9d:f9:
         0d:c5:02:60:77:02:f6:5d:ae:2b:ce:c2:96:13:fd:e7:2f:2c:
         df:51:61:be:c0:6e:fa:e1:8c:55:67:d1:3a:44:4c:cb:16:16:
         19:0a:9b:34:31:43:c1:7c:62:f4:56:bd:3a:16:b8:35:90:ec:
         7c:ce:89:e8:5b:0e:3d:d3:15:bc:fd:9a:14:f1:89:2e:2e:81:
         b0:9c:76:f9:08:19:2d:6b:9e:4a:d5:13:a8:bf:e4:fe:27:a1:
         0d:d6:3e:71:ba:81:59:f2:41:21:a2:56:dd:f6:10:f8:29:85:
         99:f5:ca:ee:e1:f6:20:fe:a2:f7:0e:38:f9:3c:a6:0c:f4:ec:
         38:d8:b0:e1:99:0b:95:c9:82:89:49:1f:02:c0:9f:ef:88:03:
         58:45:12:2f:59:34:1d:cc:2d:c6:c9:3e:70:ee:8b:94:4d:0e:
         2a:f8:ee:17:ca:e4:a9:03:bd:d8:12:a0:10:a7:b7:3d:f5:4c:
         3d:44:81:ad:cb:6d:c8:5d:9e:e2:6c:b0:99:11:0f:6d:9b:99:
         f4:3f:89:a1:29:c8:e2:75:32:83:0c:b2:10:73:c6:29:6c:86:
         27:14:92:07
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDA9tNMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdh
ZDQ1MDMzYzc4YzRmNjZkZTAyM2U1NmZmMDNlMTc3YmYxYmNiMTkwHhcNMjEwMzI0
MTQ0NzEyWhcNMjYwMzI0MTQ0NzEyWjAzMTEwLwYDVQQDEyg1NjQyNDIzZGJhM2Yx
ZTQ2OWFmNTA0NjExYjBhZTJmNTc4MjFkMDljMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAg2G1KcjEz3miT24eoPdQsjzW9+4UUFE49BmP+EJqpexYYFW0
vQp0tBrsjapYyv01sk2lEJN5sh8iDUbd/YGW3lrSkpjezekWJlv1z1wDwkGjD93u
HIKpNHrV3c9nVEOnN1jl8hphTIx69e+AyoLsbDNH84DsTHoTRUI6SlmNt+xpqKBD
gY1+Bji6N8mSgJQuXoSqoPURPX7Lx7vDjlUOb+c07BzNbZkM/ydwpC9knLcXu0t6
5kHkvZ/JTmhGXC9Wn7QqNURUoGaqGFWJLBBDvrULbzz7soyO5MGG/B33E22LIUwm
4AzxiJc2X32tTbrdgAnGBWq2Zs6Ds9RpDAMKBwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLjFZ0gzqHp4SbOa1ar4sYox9akPMB8GA1UdIwQYMBaAFOwg4C67s6eNrtt4
lZblKMljsWqxMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2FkNDUw
MzNjNzhjNGY2NmRlMDIzZTU2ZmYwM2UxNzdiZjFiY2IxOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTk0YTE0M2EtZmFjZC00NDhhLTk5OGItNWEzMDZh
Yjc4NGJjLzU2NDI0MjNkYmEzZjFlNDY5YWY1MDQ2MTFiMGFlMmY1NzgyMWQwOWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xOTRhMTQzYS1mYWNkLTQ0OGEtOTk4Yi01YTMw
NmFiNzg0YmMvN2FkNDUwMzNjNzhjNGY2NmRlMDIzZTU2ZmYwM2UxNzdiZjFiY2Ix
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhd8TANBgkqhkiG9w0BAQsFAAOCAQEAOS2KP5omO8gH9cG9
G3F4neq6qzUgQfGPqGsycoNW030SXp35DcUCYHcC9l2uK87ClhP95y8s31FhvsBu
+uGMVWfROkRMyxYWGQqbNDFDwXxi9Fa9Oha4NZDsfM6J6FsOPdMVvP2aFPGJLi6B
sJx2+QgZLWueStUTqL/k/iehDdY+cbqBWfJBIaJW3fYQ+CmFmfXK7uH2IP6i9w44
+TymDPTsONiw4ZkLlcmCiUkfAsCf74gDWEUSL1k0Hcwtxsk+cO6LlE0OKvjuF8rk
qQO92BKgEKe3PfVMPUSBrcttyF2e4mywmREPbZuZ9D+JoSnI4nUygwyyEHPGKWyG
JxSSBw==
-----END CERTIFICATE-----