Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/12160cc05be4ca42a382cf05f8031cc7d615bdaa.roa
File:                     12160cc05be4ca42a382cf05f8031cc7d615bdaa.roa (raw, json)
Hash identifier:          MDe6lb+Gdp3vl+FyckOIqsK7m8W1WH35DvI/uyB5c5E=
Subject key identifier:   5B:EC:00:5E:F6:A9:94:3D:6F:0D:60:73:0E:D4:18:FB:72:E4:78:26
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       1448FA
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/12160cc05be4ca42a382cf05f8031cc7d615bdaa.roa
Signing time:             Tue 16 Nov 2021 14:35:15 +0000
ROA not before:           Tue 16 Nov 2021 03:00:00 +0000
ROA not after:            Thu 16 Nov 2023 03:00:00 +0000
asID:                     10476
IP address blocks:        200.108.44.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1329402 (0x1448fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Nov 16 03:00:00 2021 GMT
            Not After : Nov 16 03:00:00 2023 GMT
        Subject: CN=12160cc05be4ca42a382cf05f8031cc7d615bdaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:01:e7:3e:bf:2d:90:7e:f8:45:8b:0d:04:c1:
                    a0:b1:25:9d:12:fe:43:fb:f0:4d:f9:d2:0a:a4:60:
                    98:a8:f6:f1:25:2c:9e:a2:5b:48:1a:7f:6a:64:b0:
                    3f:08:fc:84:c5:5e:57:a5:90:25:2e:a8:6e:f3:e2:
                    08:72:b9:ce:0c:1e:de:d3:01:b9:17:e0:09:f2:cf:
                    a6:86:74:4e:97:4e:6b:6f:48:94:d9:20:ea:55:bb:
                    e3:ac:59:d5:55:a2:e6:b5:3c:79:e4:9f:52:9c:56:
                    b6:d5:f4:24:0e:eb:bf:a0:7d:97:d1:06:a3:f9:95:
                    a9:15:01:64:32:3a:7d:87:1e:9f:67:c4:79:ea:50:
                    3c:40:e9:65:98:be:44:4b:70:c3:81:74:19:70:56:
                    6d:1e:7d:11:77:82:eb:34:69:d2:41:3e:f9:56:42:
                    a1:c7:05:d3:6d:98:21:6b:f0:36:df:40:fb:97:64:
                    50:da:d6:45:f9:b4:89:a4:6d:82:2d:99:4d:c2:b3:
                    f2:03:2d:f0:80:a6:dd:00:33:ee:63:d8:67:fc:c3:
                    0f:6b:b3:0e:3d:a7:ec:8d:d9:ef:b5:fe:80:94:af:
                    00:7d:88:1d:48:cf:62:f8:9c:01:c4:5e:ba:79:cf:
                    dd:ff:d1:0f:23:f9:99:f1:70:bb:e3:73:b8:8d:16:
                    85:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EC:00:5E:F6:A9:94:3D:6F:0D:60:73:0E:D4:18:FB:72:E4:78:26
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/12160cc05be4ca42a382cf05f8031cc7d615bdaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:14:58:9d:7c:85:14:b7:a6:96:4f:b8:2f:cb:97:1f:ad:c5:
         3e:31:17:19:ad:3a:3d:de:a5:ff:0e:28:58:98:84:40:48:07:
         0d:57:00:b5:f9:7c:b3:13:f9:51:41:b8:a5:2d:8f:12:aa:de:
         85:49:14:0c:9d:c1:9f:9f:c9:d4:7d:83:d9:90:5d:ad:c6:33:
         80:13:e6:f1:0a:d4:e9:52:f5:5b:74:1d:22:65:40:ab:fa:21:
         31:31:e0:79:ef:c0:74:54:3e:e7:e3:cf:2a:6e:67:0c:f1:2e:
         cf:d6:df:a5:f3:74:56:cb:1f:da:7a:64:fa:ca:87:2e:0a:f0:
         58:31:d2:a2:12:a2:37:a0:80:ae:52:5e:c7:17:53:24:b6:11:
         43:d4:4d:e0:08:71:e0:c9:03:27:60:b3:05:54:1b:06:e2:4f:
         04:a2:f2:42:24:b1:a2:20:98:2f:4f:e6:64:33:94:06:ee:28:
         64:37:2b:81:59:61:8e:3a:ab:d2:9e:f7:05:1f:37:56:5c:ea:
         6c:61:5c:2c:c5:3f:66:22:2b:f9:d0:4b:ea:51:e3:b7:31:d8:
         54:df:2a:97:72:21:79:69:e1:b5:1a:e1:c1:b6:01:92:e4:09:
         7e:19:26:b3:f1:9c:c2:02:2c:bf:a2:54:34:09:c1:5a:32:9e:
         f2:43:e9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----