Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/60482fdd3f8e43b42d004013229a61923103189e.roa
File:                     60482fdd3f8e43b42d004013229a61923103189e.roa (raw, json)
Hash identifier:          rnpDtsvVaWSApQAyWImJbQnNDOr5KYTp+GfB3To47D4=
Subject key identifier:   98:67:93:54:3A:F2:97:7F:7D:F4:27:53:11:24:21:F0:D9:27:54:88
Certificate issuer:       /CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
Certificate serial:       0E2418
Authority key identifier: 5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/60482fdd3f8e43b42d004013229a61923103189e.roa
Signing time:             Wed 24 Mar 2021 22:50:20 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     23383
IP address blocks:        200.30.157.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 926744 (0xe2418)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=60482fdd3f8e43b42d004013229a61923103189e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5b:66:b7:9a:d9:ba:f2:c5:89:29:89:0b:bf:
                    15:82:49:79:d6:9f:93:44:16:09:d7:9d:e8:9c:5d:
                    34:36:cd:ef:13:d8:aa:2a:34:af:6f:6b:f3:7b:e7:
                    62:08:98:cc:a7:dc:ce:b6:e4:4e:b7:d8:eb:72:09:
                    29:bb:81:00:63:4e:20:f7:7b:c9:8d:f1:8a:67:8c:
                    1d:8c:1e:37:4d:77:4b:e8:8e:5e:47:dd:e4:37:01:
                    42:cd:3b:de:a4:e6:a9:89:96:af:71:3c:ec:b1:fd:
                    f3:0e:84:8b:13:60:a0:3b:bf:fb:48:1c:0c:06:5b:
                    f4:37:87:41:1c:a6:15:58:f8:8c:33:70:ad:b5:1e:
                    6c:26:11:10:17:17:22:f9:d7:34:14:5c:50:82:17:
                    a3:a5:98:89:f5:45:e6:27:34:d3:08:d9:0e:94:b4:
                    39:a0:3f:e8:d7:82:0f:25:f6:26:8d:fa:f1:45:bf:
                    8a:a6:d9:5e:ee:e0:ee:82:7c:59:61:c1:a5:41:19:
                    b8:10:8b:36:69:a4:f0:e8:d1:e2:7e:95:f3:18:b7:
                    a8:95:3b:5f:c6:2e:b7:67:99:f7:ee:65:4e:fa:36:
                    a5:8b:c1:0e:88:56:11:74:45:9d:bb:5c:ca:b0:36:
                    a7:88:63:7a:ed:c6:2c:88:cb:e6:89:02:b2:e6:45:
                    31:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:67:93:54:3A:F2:97:7F:7D:F4:27:53:11:24:21:F0:D9:27:54:88
            X509v3 Authority Key Identifier:
                keyid:5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/60482fdd3f8e43b42d004013229a61923103189e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:85:11:e3:af:95:7b:ae:49:61:4f:ba:8a:45:ae:cf:c4:ba:
         29:fc:fe:27:41:54:e9:22:48:f9:63:35:b1:d8:80:03:9a:17:
         ec:07:14:54:86:5f:a8:43:88:c2:e3:41:42:bb:01:f6:b3:68:
         7d:6d:df:d1:e5:a4:f0:00:86:6f:b7:78:20:99:c2:8a:bd:9b:
         6e:93:99:7a:f1:1d:e0:ac:08:1f:92:3d:11:2c:cb:ff:9e:3a:
         88:44:a0:a1:f3:64:fa:6e:ad:5d:d5:d0:d5:f0:91:c6:7c:16:
         19:b1:0e:02:3e:6f:e9:74:93:2b:03:e5:c6:9c:00:78:d8:aa:
         d5:93:19:9f:d0:5f:41:7e:4f:f7:0b:35:1e:6e:a0:c2:83:cc:
         91:b8:c1:07:9a:88:ce:88:e6:83:67:cf:d8:12:3b:4f:a2:c8:
         e5:c8:fd:88:4b:8c:0e:d7:98:e5:a2:ac:e0:24:d7:ae:b4:13:
         7c:73:9a:c8:79:37:ff:03:0a:c9:99:6c:8b:d0:ee:8f:45:8f:
         14:53:52:5d:13:1f:3f:94:f2:ff:0b:70:32:e9:7d:52:3f:40:
         d7:7b:74:ea:bd:c2:fe:b1:68:af:dc:a1:92:db:95:2d:6f:19:
         2b:bd:3a:2b:39:c3:dd:f4:85:72:9f:dc:ac:3b:db:76:2e:bc:
         ed:cb:19:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----