Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/0e57fbcf55da20f1c2d7a97d04bf0749accf8041.roa
File:                     0e57fbcf55da20f1c2d7a97d04bf0749accf8041.roa (raw, json)
Hash identifier:          F8lYNDDBQfJPY8zwwhisv6Xq53fAggFIErT4Pt5QdIQ=
Subject key identifier:   9D:1E:E3:E6:5B:0F:D7:16:37:12:7C:FE:A6:E0:1C:65:DF:3A:C8:D2
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       0E3733
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/0e57fbcf55da20f1c2d7a97d04bf0749accf8041.roa
Signing time:             Wed 24 Mar 2021 14:45:11 +0000
ROA not before:           Wed 24 Mar 2021 14:45:09 +0000
ROA not after:            Tue 24 Mar 2026 14:45:09 +0000
asID:                     22010
IP address blocks:        200.46.145.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 931635 (0xe3733)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Mar 24 14:45:09 2021 GMT
            Not After : Mar 24 14:45:09 2026 GMT
        Subject: CN=0e57fbcf55da20f1c2d7a97d04bf0749accf8041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e7:96:e1:af:cc:c5:4b:0d:78:04:c5:2f:63:
                    71:f0:2d:1f:43:06:c1:45:27:99:a8:c9:b9:f1:09:
                    68:86:44:17:59:66:f2:a5:35:d7:a1:bd:d2:06:a3:
                    0c:c3:c3:8f:f1:5a:12:a0:7a:bd:56:c2:37:c9:35:
                    26:64:3e:20:4d:23:ef:88:f0:eb:48:64:b8:cc:d6:
                    7b:c6:6e:b3:7b:e9:2b:9f:f3:e1:35:f2:31:bc:db:
                    89:98:bb:1f:43:c3:69:1e:23:6b:80:5b:a3:c7:19:
                    25:f2:9e:e5:4a:a0:4d:da:8d:a5:7d:0a:65:e5:eb:
                    cb:ff:80:80:28:98:4c:a0:bd:c2:92:9f:32:83:d0:
                    17:ec:5b:ec:05:1b:d9:ff:a7:bf:cd:60:71:5c:4b:
                    72:1d:4a:6d:5f:18:c6:d8:ff:9b:9b:68:42:2d:af:
                    4b:00:14:ec:de:ce:77:24:44:4d:06:67:e6:e7:4b:
                    98:e4:50:6d:67:b2:e4:22:f9:30:24:58:42:69:1a:
                    3c:f4:68:6e:f6:9c:9e:8d:0d:22:a1:b8:fe:69:c4:
                    55:4a:82:03:f5:73:a4:b1:2e:a9:27:b8:90:11:6a:
                    a5:8a:80:b3:9e:5a:67:01:b6:ec:7f:db:28:84:80:
                    bc:06:2f:fa:d4:c4:ed:94:39:fe:d1:9d:ad:d5:d2:
                    e9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1E:E3:E6:5B:0F:D7:16:37:12:7C:FE:A6:E0:1C:65:DF:3A:C8:D2
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/0e57fbcf55da20f1c2d7a97d04bf0749accf8041.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:d0:38:33:84:0e:8e:2b:25:fc:0b:7f:93:e4:75:49:d7:d8:
         9e:2f:4d:de:90:ed:75:66:30:a3:c9:05:04:ce:de:28:fd:10:
         64:a0:01:69:b9:6b:77:8c:30:46:8c:21:a7:9b:7b:58:fb:aa:
         fd:56:ca:0e:38:3b:40:53:97:c1:14:11:fb:fe:73:42:db:28:
         27:a1:54:71:7f:72:7e:3e:01:fb:f6:c8:1b:cb:45:af:df:2c:
         16:d0:55:78:2b:2a:48:0f:d0:fc:f8:14:bc:73:65:b3:3b:81:
         c6:b0:06:c4:6c:bb:7a:0a:50:69:86:6e:ec:be:19:e3:0d:40:
         5f:b2:e1:06:e8:e4:e0:f0:5d:49:88:66:14:31:47:a0:29:f9:
         a9:b1:62:3c:86:78:3e:7e:1c:d3:4a:1f:f1:26:d2:49:57:da:
         58:85:06:3d:c4:39:ba:31:3c:25:73:21:2d:cb:e3:07:dd:cb:
         36:1c:cb:33:f2:2b:e6:a4:a9:85:bf:66:5b:27:d0:a6:51:ee:
         93:ca:17:35:e7:b3:bc:74:da:98:21:52:03:59:db:e7:37:54:
         9b:05:38:d2:0c:e2:3a:c5:36:81:e7:1b:bf:d4:41:f7:7c:1e:
         d0:13:62:db:00:54:06:fb:e0:15:fd:57:28:a8:25:64:9f:6e:
         8f:f9:21:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----