Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22f492fd-52f3-4478-a110-af40eb51f62a/f1caff65e29021f8da3bbef1bb9077854abbc20b.roa
File:                     f1caff65e29021f8da3bbef1bb9077854abbc20b.roa (raw, json)
Hash identifier:          t8u1/dqQZPOUVU86FMudTNMdIvNkE8RqWMwgU7XVD6o=
Subject key identifier:   2A:B8:6F:7D:1B:0C:C7:A8:E8:C8:94:50:CE:59:C3:08:FC:38:6E:A0
Certificate issuer:       /CN=6e7b552bfbb8693f0a7bac69364d2d4e7eb7e85c
Certificate serial:       047D1D
Authority key identifier: 0E:C8:8E:FC:D0:A1:EA:3A:BE:3C:74:8C:C7:B4:DF:51:DA:07:17:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e7b552bfbb8693f0a7bac69364d2d4e7eb7e85c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22f492fd-52f3-4478-a110-af40eb51f62a/f1caff65e29021f8da3bbef1bb9077854abbc20b.roa
Signing time:             Tue 03 Aug 2021 23:26:04 +0000
ROA not before:           Thu 03 Jun 2021 03:00:00 +0000
ROA not after:            Sat 03 Jun 2023 03:00:00 +0000
asID:                     270065
IP address blocks:        200.114.64.0/20 maxlen: 24
                          2803:9e80::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294173 (0x47d1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e7b552bfbb8693f0a7bac69364d2d4e7eb7e85c
        Validity
            Not Before: Jun  3 03:00:00 2021 GMT
            Not After : Jun  3 03:00:00 2023 GMT
        Subject: CN=f1caff65e29021f8da3bbef1bb9077854abbc20b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:89:7c:da:8a:83:ce:5d:2e:af:fc:04:50:0b:
                    43:f1:38:8c:a0:7a:10:fc:8f:c9:7f:c4:f7:8a:99:
                    25:53:55:ba:14:ce:91:56:d1:9e:b5:4c:ed:80:72:
                    39:76:07:f0:6b:c9:68:22:06:21:d7:7d:d4:91:b4:
                    79:cd:aa:45:a1:7e:2b:a1:d4:58:99:42:53:a5:56:
                    e3:93:2b:5e:52:f4:74:1a:c5:88:05:24:30:a1:20:
                    1e:02:ea:a7:94:fa:ad:c5:1e:d7:76:18:64:fc:5a:
                    8a:02:a9:bd:63:e5:aa:1a:b7:cb:46:cb:02:90:3f:
                    b5:49:bb:48:29:32:f5:a9:5b:42:ab:c8:95:fa:6c:
                    b5:c1:c0:31:97:e4:57:15:60:a5:04:58:07:77:d3:
                    af:78:92:8b:0b:95:be:8c:51:01:5e:b4:8d:c8:2a:
                    86:cd:a1:5d:e1:86:cb:32:5d:a6:35:b9:4e:03:67:
                    0a:87:19:96:fd:7f:b2:91:1b:b6:ad:1d:1a:d8:f6:
                    e1:74:68:35:d7:bc:59:1c:db:bc:f6:06:85:0f:3c:
                    87:77:1b:8f:55:38:54:13:a5:93:fe:aa:79:c3:22:
                    f8:4b:ed:1d:f9:7d:cb:73:4e:12:a4:8d:6b:87:4c:
                    c1:7c:19:e7:4a:66:26:e9:fc:cc:31:84:3c:7f:3a:
                    6d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B8:6F:7D:1B:0C:C7:A8:E8:C8:94:50:CE:59:C3:08:FC:38:6E:A0
            X509v3 Authority Key Identifier:
                keyid:0E:C8:8E:FC:D0:A1:EA:3A:BE:3C:74:8C:C7:B4:DF:51:DA:07:17:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e7b552bfbb8693f0a7bac69364d2d4e7eb7e85c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22f492fd-52f3-4478-a110-af40eb51f62a/f1caff65e29021f8da3bbef1bb9077854abbc20b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22f492fd-52f3-4478-a110-af40eb51f62a/6e7b552bfbb8693f0a7bac69364d2d4e7eb7e85c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.64.0/20
                IPv6:
                  2803:9e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:0b:83:a4:62:81:3a:48:3d:13:24:d5:00:df:5d:ea:ef:d1:
         56:e3:d5:58:d8:fd:85:90:2b:41:d2:a9:36:62:af:97:bb:f3:
         2a:55:ce:31:23:cc:5f:6a:d1:1a:b2:f8:1e:03:16:77:17:65:
         52:f2:89:d0:d7:6b:6a:4a:7c:39:b3:b1:8b:80:73:af:7f:d5:
         ee:e0:45:6f:38:07:74:a6:aa:bb:47:d4:d4:66:15:b2:87:f2:
         d0:de:74:c1:77:ee:fd:2a:06:ce:31:60:ba:f0:6b:09:00:b2:
         dc:6a:3f:31:27:8b:24:13:fd:5f:ec:22:01:d6:ef:56:a5:1b:
         da:4c:30:31:3b:54:99:2a:4d:03:87:12:e3:e2:ed:ea:3e:be:
         e5:c3:5e:df:0c:0d:0c:29:bc:68:35:ce:b3:94:62:c1:53:cd:
         5a:e3:13:dc:5a:ac:86:02:44:83:b0:16:7c:2f:9d:f0:01:9d:
         72:eb:64:07:aa:8e:5b:e0:97:41:48:c4:01:0a:7b:7e:ee:6d:
         2a:d3:50:1f:cd:f9:ef:1e:5e:0e:a5:9d:80:ab:e2:fa:ac:6a:
         d1:3c:59:39:7f:65:f4:ab:b1:68:9b:25:5e:67:ce:29:15:34:
         a1:84:c9:8e:e5:d2:5a:cb:39:28:ce:77:94:1f:6a:b7:af:0e:
         12:2e:02:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----