Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/245daf3fa01dc6c11aaf9ed637c9f0f17116723a.roa
File:                     245daf3fa01dc6c11aaf9ed637c9f0f17116723a.roa (raw, json)
Hash identifier:          6SDmlLWOaXjdSbykXgjxeh+eSyV0AT21FC0FZOuA0DY=
Subject key identifier:   FD:DB:C2:DE:7B:CC:A9:9D:03:C7:49:3A:CA:B1:72:12:71:21:F3:07
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       0E35B9
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/245daf3fa01dc6c11aaf9ed637c9f0f17116723a.roa
Signing time:             Wed 24 Mar 2021 14:45:11 +0000
ROA not before:           Wed 24 Mar 2021 14:45:09 +0000
ROA not after:            Tue 24 Mar 2026 14:45:09 +0000
asID:                     22227
IP address blocks:        200.46.158.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 931257 (0xe35b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Mar 24 14:45:09 2021 GMT
            Not After : Mar 24 14:45:09 2026 GMT
        Subject: CN=245daf3fa01dc6c11aaf9ed637c9f0f17116723a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1a:69:2b:34:bf:0d:15:e7:50:79:4c:c1:56:
                    7e:6d:24:5a:d3:69:8c:6c:b0:4b:e3:ca:02:ac:75:
                    1e:3b:ef:43:51:d6:f1:ba:e3:7b:e8:0b:b3:29:6c:
                    fc:49:5d:f7:46:52:20:d0:cd:0b:42:60:00:a8:95:
                    5b:e1:9f:36:e5:74:0f:e3:43:26:9d:0f:3f:83:13:
                    98:f0:be:20:92:13:ad:dd:a9:cd:f0:73:11:0d:4d:
                    83:f4:02:95:f6:47:a0:95:0d:09:53:6a:6c:1c:00:
                    4c:18:72:41:26:6f:44:c0:2b:e9:d8:cb:27:c2:39:
                    68:d1:ff:f1:63:d3:22:d3:9f:48:21:60:8e:c2:c3:
                    ac:55:fd:86:72:d5:db:c4:a8:d3:d0:92:e9:86:18:
                    9a:c6:3d:ca:66:6b:1c:57:4a:03:aa:72:5e:bd:b1:
                    3e:93:d2:e1:03:f1:35:13:04:6c:ac:3d:d9:00:fd:
                    1d:1b:85:52:6d:fc:e0:f9:1e:f1:0b:28:76:7a:51:
                    86:fd:a4:b9:92:d9:cd:a5:b9:b5:c4:35:6a:f1:3d:
                    98:ab:ed:49:a2:9d:f0:99:6f:dc:1e:27:80:c1:f3:
                    b7:72:3b:d5:cd:78:2e:b3:c3:2a:42:61:1b:ca:99:
                    4e:4f:1b:69:b3:6f:bf:4f:7e:6c:f5:bc:b0:d4:30:
                    a2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DB:C2:DE:7B:CC:A9:9D:03:C7:49:3A:CA:B1:72:12:71:21:F3:07
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/245daf3fa01dc6c11aaf9ed637c9f0f17116723a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:b6:d7:6d:87:b7:f1:23:6f:80:9d:aa:48:22:fa:c2:9d:82:
         d5:a0:dc:a3:ee:cc:e5:7e:4b:6c:27:df:2c:0f:3f:84:52:8a:
         25:3c:66:b4:a5:ab:aa:89:71:54:3d:26:f3:42:be:ec:98:73:
         69:b0:4a:30:0f:79:a6:7a:99:46:d5:ce:1d:1a:a4:d1:4f:be:
         fc:c7:79:8a:61:91:b9:0b:ea:17:d6:1e:a7:e8:92:45:da:48:
         59:a9:6b:f1:75:89:68:aa:eb:ce:13:82:48:b6:fa:fc:fc:37:
         b1:c4:26:8d:47:2a:08:4f:87:92:dc:32:33:95:2a:59:be:a3:
         5d:8e:79:51:c4:3a:92:5c:6a:63:94:cd:f1:a2:9e:d2:27:a9:
         5d:7e:52:15:b6:58:25:c2:2a:8d:b6:8d:e4:72:d4:ce:f3:25:
         88:51:cb:b8:e0:89:91:da:ac:d1:05:06:c4:f3:22:43:ae:f3:
         49:d3:8e:94:16:38:4d:84:d7:fa:cd:50:56:19:16:f2:c2:58:
         00:f5:0d:0b:9c:6a:c9:7c:78:1d:a7:42:2a:5f:d7:0e:87:ea:
         ba:46:62:49:a0:16:11:2a:a2:a3:8e:34:32:d5:66:44:10:9f:
         03:26:d0:57:cc:e0:4a:c9:a1:6c:61:3c:ac:e8:65:84:85:1e:
         ea:ba:57:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----