Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/35e7f09bf4b9dcd6b8faf666ecb3e6e9e6d6b029.roa
File:                     35e7f09bf4b9dcd6b8faf666ecb3e6e9e6d6b029.roa (raw, json)
Hash identifier:          JHFw61wyczlb0IBVSxXTjoCsQZlXocMaqyNBEOm9gUg=
Subject key identifier:   79:5E:C4:57:A1:C6:63:B7:87:ED:E4:25:9F:3B:36:78:CD:13:7F:F9
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       0E3D3F
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/35e7f09bf4b9dcd6b8faf666ecb3e6e9e6d6b029.roa
Signing time:             Wed 24 Mar 2021 14:45:11 +0000
ROA not before:           Wed 24 Mar 2021 14:45:09 +0000
ROA not after:            Tue 24 Mar 2026 14:45:09 +0000
asID:                     28062
IP address blocks:        200.46.201.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 933183 (0xe3d3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Mar 24 14:45:09 2021 GMT
            Not After : Mar 24 14:45:09 2026 GMT
        Subject: CN=35e7f09bf4b9dcd6b8faf666ecb3e6e9e6d6b029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:76:65:70:68:eb:d8:0b:7d:a4:95:e9:fc:bb:
                    4b:ff:77:73:8c:f8:7b:8f:f8:73:03:6f:eb:61:92:
                    7d:30:24:6b:f9:51:c8:a2:6d:d6:50:62:55:3d:14:
                    0d:6d:bf:dc:1d:fa:6b:a0:19:61:2c:c9:97:a2:9a:
                    a2:e5:a1:34:10:a7:b7:f6:71:09:ff:3a:e3:e2:9e:
                    44:19:8f:04:c7:4d:e4:98:86:20:01:b6:c9:96:97:
                    ba:4d:7b:89:49:63:e2:bd:7d:f1:00:02:a7:62:81:
                    2d:eb:0b:53:a6:98:15:bb:2e:fb:3a:7d:08:af:e3:
                    b5:80:24:f1:66:3c:e6:ef:d2:4f:01:14:a2:b6:a9:
                    63:c1:50:33:de:29:60:b7:a9:0a:89:60:33:bc:58:
                    34:22:fa:1a:ed:b6:3b:11:23:bc:3a:9b:28:b3:bb:
                    9a:f9:ea:af:b1:0d:31:24:61:e9:22:b9:53:7c:85:
                    37:ec:bc:39:d1:0b:c2:6b:76:bf:08:dd:ae:30:a8:
                    11:46:ed:53:10:1b:32:8f:46:c1:0e:56:c7:5d:1f:
                    88:50:60:64:d0:42:69:20:7b:22:80:66:9c:96:b6:
                    30:22:c6:0a:5d:2a:e2:43:bf:d2:a0:22:44:8f:f0:
                    00:d6:de:bf:be:26:30:2c:37:95:40:1c:39:0c:10:
                    42:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5E:C4:57:A1:C6:63:B7:87:ED:E4:25:9F:3B:36:78:CD:13:7F:F9
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/35e7f09bf4b9dcd6b8faf666ecb3e6e9e6d6b029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:11:86:f9:b6:f1:53:31:4f:91:13:2c:6d:14:41:a8:2f:80:
         eb:87:f3:90:4d:b5:0f:4d:ab:a5:cb:ff:b6:ab:5a:aa:71:fc:
         f5:a3:7b:1f:f3:97:7a:ff:8f:72:2e:09:14:40:cc:87:49:97:
         de:ed:f1:80:90:87:6f:4c:6e:15:ca:1e:63:23:cc:ef:e7:8a:
         12:1f:62:3e:f3:64:f4:64:36:9a:bb:49:55:68:8e:9b:98:2b:
         76:96:5b:71:7a:55:fe:61:81:2d:f9:d8:81:b9:05:12:c3:84:
         a0:05:61:40:3b:5e:4c:a0:c2:07:d5:5c:eb:56:b2:26:57:42:
         e8:80:a1:37:3d:a6:ee:7a:d7:be:bc:7e:cb:90:5c:c4:32:6e:
         c5:2e:f6:61:6e:d8:93:5a:d9:05:cf:45:c6:f0:f9:24:7d:77:
         66:72:96:c2:d4:15:fe:f0:29:08:87:cc:84:74:0c:61:e8:e7:
         54:7b:ae:37:24:42:64:8a:fe:d9:d6:a9:26:9e:8b:de:d9:5c:
         c4:24:fd:b3:3c:d1:7c:a2:79:94:33:93:0b:96:8a:0e:30:73:
         8a:76:07:1f:cd:5b:88:eb:eb:d6:df:17:c9:e9:49:26:15:fe:
         37:fe:80:96:05:51:06:2c:5e:fd:8c:64:18:f1:a1:a7:f7:aa:
         5a:8b:ec:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----