Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2200a3d3-0721-4a07-b8ef-5041a99c36ec/b79912f26b31a9e1546c41501025bdd50e34d346.roa
File:                     b79912f26b31a9e1546c41501025bdd50e34d346.roa (raw, json)
Hash identifier:          D4om9vnnf9gOHKGFb1bkYXhVDTTbzJUx/pfrNvhQA6s=
Subject key identifier:   58:03:FC:5E:8F:82:0C:7C:9D:78:E7:DE:2A:3F:D5:98:5D:9F:1F:82
Certificate issuer:       /CN=cdf3c4883ddca1519ed46106e0af85f1db80392f
Certificate serial:       1537
Authority key identifier: 46:C2:C8:A1:9E:E3:9F:CB:34:26:C6:F1:3E:6F:59:9A:F8:52:B7:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdf3c4883ddca1519ed46106e0af85f1db80392f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2200a3d3-0721-4a07-b8ef-5041a99c36ec/b79912f26b31a9e1546c41501025bdd50e34d346.roa
Signing time:             Sat 21 Aug 2021 17:06:11 +0000
ROA not before:           Sat 21 Aug 2021 03:00:00 +0000
ROA not after:            Mon 21 Aug 2023 03:00:00 +0000
asID:                     28120
IP address blocks:        200.114.88.0/21 maxlen: 24
                          2803:420::/32 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5431 (0x1537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdf3c4883ddca1519ed46106e0af85f1db80392f
        Validity
            Not Before: Aug 21 03:00:00 2021 GMT
            Not After : Aug 21 03:00:00 2023 GMT
        Subject: CN=b79912f26b31a9e1546c41501025bdd50e34d346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:83:2e:1a:6c:47:0c:7c:40:4e:f3:6f:b4:8b:
                    60:d5:83:b0:f7:c1:d8:ca:73:9f:6c:c8:3f:67:f6:
                    f2:c8:48:c0:10:aa:59:07:26:37:db:c1:1c:77:17:
                    8c:7f:41:b6:21:ed:05:85:0e:cb:dc:33:9b:f9:e2:
                    49:d5:4c:90:1a:6d:3c:98:03:49:6b:c5:a6:11:12:
                    64:d1:2c:5e:d7:a1:ea:73:34:b1:76:fc:ac:b3:10:
                    2e:23:6f:db:c2:48:75:7d:58:86:09:5f:63:18:3e:
                    95:3a:02:d5:61:61:84:94:18:fe:4d:46:03:c9:0f:
                    6e:85:55:ee:32:83:45:42:d7:dc:55:1a:08:c2:c2:
                    de:30:ff:5e:7e:b6:a5:d1:ac:67:f5:59:0b:9e:55:
                    9d:a1:ea:67:32:ab:41:89:51:c1:92:ef:b2:7e:f0:
                    18:e9:09:ec:b7:27:9b:66:f5:75:5f:dc:79:ef:d6:
                    45:a8:ec:9d:95:e6:e9:7b:45:d4:12:8b:cb:7d:c5:
                    28:b2:c6:82:d8:c1:fe:c6:0b:8e:2a:a2:57:f3:3b:
                    a5:38:5b:19:a6:b6:90:74:13:89:44:f2:f1:73:ee:
                    24:cd:22:35:88:5a:8b:7c:bf:7b:7c:95:40:bb:8e:
                    fc:16:85:29:75:ff:3e:dd:23:5a:36:f7:73:3c:85:
                    f6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:03:FC:5E:8F:82:0C:7C:9D:78:E7:DE:2A:3F:D5:98:5D:9F:1F:82
            X509v3 Authority Key Identifier:
                keyid:46:C2:C8:A1:9E:E3:9F:CB:34:26:C6:F1:3E:6F:59:9A:F8:52:B7:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdf3c4883ddca1519ed46106e0af85f1db80392f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2200a3d3-0721-4a07-b8ef-5041a99c36ec/b79912f26b31a9e1546c41501025bdd50e34d346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2200a3d3-0721-4a07-b8ef-5041a99c36ec/cdf3c4883ddca1519ed46106e0af85f1db80392f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.88.0/21
                IPv6:
                  2803:420::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:18:bc:a5:93:b7:83:46:c9:12:6e:9d:16:94:c6:a8:00:ac:
         7e:80:96:16:62:be:95:23:66:ed:55:bf:ec:88:58:3f:d5:2f:
         2f:eb:3c:2f:2f:dd:3e:0f:b7:84:f3:ab:49:08:94:79:e8:1a:
         0e:7e:7b:c4:91:4a:9f:cc:50:43:1a:ef:9d:82:8e:cc:15:c9:
         73:6e:4a:c4:be:2a:b1:0f:2c:8e:a4:69:e7:b0:33:3c:8f:71:
         51:7e:ca:98:20:da:81:5d:19:79:a6:2a:06:84:12:5b:57:b3:
         d1:3c:95:ca:ba:ed:df:6f:37:81:ba:05:a5:e3:02:16:82:87:
         36:54:3a:fa:e7:33:c9:d3:f6:8d:9f:b3:90:a2:b6:57:45:40:
         be:ce:37:f9:0d:0a:13:21:e9:cb:42:99:7f:a2:e3:bf:80:5d:
         91:9a:fa:c3:be:7a:7a:6e:0d:8a:23:24:1a:b4:70:2e:fe:71:
         d3:69:c1:8e:46:eb:2d:0c:d4:f3:1e:3a:d9:d2:cb:67:6c:ba:
         64:66:ec:a6:ab:78:86:e6:9f:95:38:2a:44:c4:1a:6e:ae:ee:
         2b:8a:c5:75:5f:b8:9b:3d:95:4e:25:4b:26:44:e0:c6:eb:81:
         6e:86:2c:92:fc:41:da:7f:75:f1:b1:ad:2f:45:4e:c4:fb:f5:
         9e:c3:e2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----