Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/c8f7031938b2f8bd1b6f460fa72e64471b593fda.roa
File:                     c8f7031938b2f8bd1b6f460fa72e64471b593fda.roa (raw, json)
Hash identifier:          aqda+C6dqBzlFQLhQrcyf0/BVlOg0iuBwsTHBR4ONEg=
Subject key identifier:   A5:D7:58:14:C3:3E:73:A9:A9:9C:04:CC:CE:B1:F3:85:94:04:8D:16
Certificate issuer:       /CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
Certificate serial:       03DB02
Authority key identifier: EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/c8f7031938b2f8bd1b6f460fa72e64471b593fda.roa
Signing time:             Wed 24 Mar 2021 14:47:12 +0000
ROA not before:           Wed 24 Mar 2021 14:47:12 +0000
ROA not after:            Tue 24 Mar 2026 14:47:12 +0000
asID:                     30133
IP address blocks:        200.93.240.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252674 (0x3db02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
        Validity
            Not Before: Mar 24 14:47:12 2021 GMT
            Not After : Mar 24 14:47:12 2026 GMT
        Subject: CN=c8f7031938b2f8bd1b6f460fa72e64471b593fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c9:21:f5:5e:f3:60:dd:9e:0c:fe:c4:d9:0f:
                    5a:89:39:0e:54:23:3d:e9:d0:f9:71:f7:61:e9:84:
                    d6:2b:38:14:a5:36:ee:9b:d2:3e:59:b6:2e:cb:1a:
                    5a:57:39:40:a5:d4:0e:66:4d:af:ed:9f:22:cf:b4:
                    d1:6a:6a:de:25:03:9d:89:7e:c8:fe:ce:ce:d1:c3:
                    0b:bd:49:7f:ea:66:78:bd:be:c5:f4:29:d9:fb:ba:
                    9f:90:18:2e:bf:96:75:36:b1:e7:08:62:fd:54:f1:
                    d3:96:81:dd:bc:e8:aa:f4:87:0b:02:55:c1:54:e1:
                    c6:eb:89:73:09:fc:5d:a3:4e:e2:1c:f5:b1:53:17:
                    12:1d:49:3b:32:95:9e:18:dd:1f:67:b9:91:dc:9b:
                    41:20:1f:f6:25:d2:fd:e4:25:40:0a:f0:87:18:99:
                    c7:e3:6c:48:c3:26:f8:1e:80:81:60:ca:00:ec:ce:
                    38:71:07:19:7f:e2:01:8f:a9:11:0b:ab:79:88:1a:
                    ac:85:f9:4b:2e:9a:df:6b:32:b8:80:25:10:bc:81:
                    ce:a5:4b:31:9c:9c:e9:af:f0:4e:06:0d:0d:67:48:
                    7d:b9:c2:cb:d8:d7:89:af:34:c4:89:08:cb:92:9e:
                    25:0f:b6:29:12:c2:61:45:bc:d8:71:9e:a5:fc:14:
                    36:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D7:58:14:C3:3E:73:A9:A9:9C:04:CC:CE:B1:F3:85:94:04:8D:16
            X509v3 Authority Key Identifier:
                keyid:EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/c8f7031938b2f8bd1b6f460fa72e64471b593fda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/7ad45033c78c4f66de023e56ff03e177bf1bcb19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:93:2a:47:5d:34:32:cb:86:cc:a8:c3:ed:0a:73:af:5b:9f:
         72:ed:5e:a3:2f:e8:20:2e:c4:ca:66:91:c6:09:d5:4d:0a:f0:
         cc:c3:35:67:d9:ae:88:a1:88:27:d3:43:ce:2d:43:52:ce:97:
         34:02:51:44:89:3c:e0:3a:65:b8:2b:f0:f5:36:33:d2:1a:05:
         37:5e:54:ae:c4:fa:e6:c5:6d:c6:fa:c4:e3:23:5d:15:2e:2f:
         13:cc:6b:18:52:06:15:f8:f4:79:0d:81:fd:c3:38:61:43:63:
         a4:68:d1:2e:99:70:6b:86:fb:27:9c:3e:b3:bd:c9:d0:73:16:
         7c:64:fd:9c:4b:bc:28:d3:ac:b9:f0:ec:52:ca:d6:3f:f2:fa:
         c0:73:a0:de:47:3c:cc:7a:39:d5:f6:4c:9e:26:4f:93:c4:f7:
         98:c1:8e:9c:58:6f:e5:98:ac:00:26:10:7e:38:32:3b:86:38:
         03:b3:f1:53:d0:ae:34:7f:67:8c:d2:83:3e:58:3d:d7:cf:ff:
         28:2c:77:72:2e:ee:78:52:f1:19:40:04:e4:71:40:e2:62:f5:
         d1:3f:78:1b:d2:4a:f4:ab:e1:ff:ee:aa:76:1f:ff:aa:96:4e:
         ec:fb:e8:2c:8f:0a:a7:a3:ab:7b:81:c9:c7:fe:f9:14:dd:40:
         78:44:b7:53
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDA9sCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdh
ZDQ1MDMzYzc4YzRmNjZkZTAyM2U1NmZmMDNlMTc3YmYxYmNiMTkwHhcNMjEwMzI0
MTQ0NzEyWhcNMjYwMzI0MTQ0NzEyWjAzMTEwLwYDVQQDEyhjOGY3MDMxOTM4YjJm
OGJkMWI2ZjQ2MGZhNzJlNjQ0NzFiNTkzZmRhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtskh9V7zYN2eDP7E2Q9aiTkOVCM96dD5cfdh6YTWKzgUpTbu
m9I+WbYuyxpaVzlApdQOZk2v7Z8iz7TRamreJQOdiX7I/s7O0cMLvUl/6mZ4vb7F
9CnZ+7qfkBguv5Z1NrHnCGL9VPHTloHdvOiq9IcLAlXBVOHG64lzCfxdo07iHPWx
UxcSHUk7MpWeGN0fZ7mR3JtBIB/2JdL95CVACvCHGJnH42xIwyb4HoCBYMoA7M44
cQcZf+IBj6kRC6t5iBqshflLLprfazK4gCUQvIHOpUsxnJzpr/BOBg0NZ0h9ucLL
2NeJrzTEiQjLkp4lD7YpEsJhRbzYcZ6l/BQ2UQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKXXWBTDPnOpqZwEzM6x84WUBI0WMB8GA1UdIwQYMBaAFOwg4C67s6eNrtt4
lZblKMljsWqxMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2FkNDUw
MzNjNzhjNGY2NmRlMDIzZTU2ZmYwM2UxNzdiZjFiY2IxOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTk0YTE0M2EtZmFjZC00NDhhLTk5OGItNWEzMDZh
Yjc4NGJjL2M4ZjcwMzE5MzhiMmY4YmQxYjZmNDYwZmE3MmU2NDQ3MWI1OTNmZGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xOTRhMTQzYS1mYWNkLTQ0OGEtOTk4Yi01YTMw
NmFiNzg0YmMvN2FkNDUwMzNjNzhjNGY2NmRlMDIzZTU2ZmYwM2UxNzdiZjFiY2Ix
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhd8DANBgkqhkiG9w0BAQsFAAOCAQEAJZMqR100MsuGzKjD
7Qpzr1ufcu1eoy/oIC7EymaRxgnVTQrwzMM1Z9muiKGIJ9NDzi1DUs6XNAJRRIk8
4DpluCvw9TYz0hoFN15UrsT65sVtxvrE4yNdFS4vE8xrGFIGFfj0eQ2B/cM4YUNj
pGjRLplwa4b7J5w+s73J0HMWfGT9nEu8KNOsufDsUsrWP/L6wHOg3kc8zHo51fZM
niZPk8T3mMGOnFhv5ZisACYQfjgyO4Y4A7PxU9CuNH9njNKDPlg918//KCx3ci7u
eFLxGUAE5HFA4mL10T94G9JK9Kvh/+6qdh//qpZO7PvoLI8Kp6Ore4HJx/75FN1A
eES3Uw==
-----END CERTIFICATE-----