Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35544fac-be2e-40f8-a414-0dca8e9f619a/53d3d4aae73e928640dcf187bfba8b1a21e33866.roa
File:                     53d3d4aae73e928640dcf187bfba8b1a21e33866.roa (raw, json)
Hash identifier:          rV4/ifJDmL+bkyVW4usKz1wl3LMI/JxXOn5tNrrTf14=
Subject key identifier:   5D:55:98:B4:CD:92:87:83:61:C4:77:0F:A9:B0:F7:A9:B0:7E:29:DB
Certificate issuer:       /CN=a6813bdcd58e19805901bea439d6984387aad3c5
Certificate serial:       1EE7
Authority key identifier: FB:5C:5F:DC:80:B8:B0:EB:1C:97:EA:E2:1D:0E:C3:1F:47:2D:60:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a6813bdcd58e19805901bea439d6984387aad3c5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35544fac-be2e-40f8-a414-0dca8e9f619a/53d3d4aae73e928640dcf187bfba8b1a21e33866.roa
Signing time:             Mon 10 Apr 2023 20:56:30 +0000
ROA not before:           Sun 09 Apr 2023 20:55:35 +0000
ROA not after:            Thu 10 Apr 2025 20:55:35 +0000
asID:                     8048
IP address blocks:        200.1.144.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7911 (0x1ee7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6813bdcd58e19805901bea439d6984387aad3c5
        Validity
            Not Before: Apr  9 20:55:35 2023 GMT
            Not After : Apr 10 20:55:35 2025 GMT
        Subject: CN=53d3d4aae73e928640dcf187bfba8b1a21e33866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e1:c5:60:bc:14:f1:39:ff:08:23:0d:b5:86:
                    78:2e:80:c0:14:7f:94:fe:67:56:94:e4:c2:05:b8:
                    b1:e4:f8:d5:cd:eb:e5:0d:9b:51:93:5e:91:53:a7:
                    02:42:92:dc:6d:ce:74:20:36:54:22:db:36:70:c4:
                    4f:18:74:88:62:f5:4e:b2:9a:5a:fb:05:59:83:84:
                    44:54:c4:35:10:f5:97:90:e6:4c:77:89:8f:cd:df:
                    ea:e4:ef:39:f3:fc:8f:4c:b6:20:04:ef:af:30:69:
                    e9:cc:b2:da:0c:ca:58:82:61:bc:c0:18:7e:88:95:
                    39:68:7a:2a:6a:1b:d4:e4:82:fc:97:6e:2f:7c:37:
                    81:0c:4d:38:f9:36:31:42:fc:7a:8f:74:27:9e:a1:
                    a8:04:d6:fa:d8:04:33:81:3b:dd:e7:96:2c:15:b6:
                    48:c6:e0:a3:99:96:06:1d:e2:b0:a4:2d:a5:66:c9:
                    df:74:93:e0:2a:e2:0f:3e:2b:8b:21:a0:8d:5f:57:
                    08:7b:8d:d2:47:23:10:41:d9:43:e4:d8:f1:2a:fd:
                    00:4c:b4:43:88:83:17:6f:61:99:b1:93:01:56:3d:
                    00:75:44:20:3b:48:44:56:9d:b2:20:c7:69:1a:c6:
                    67:69:46:7b:f0:0b:56:38:32:a9:08:c9:fe:df:55:
                    24:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:55:98:B4:CD:92:87:83:61:C4:77:0F:A9:B0:F7:A9:B0:7E:29:DB
            X509v3 Authority Key Identifier:
                keyid:FB:5C:5F:DC:80:B8:B0:EB:1C:97:EA:E2:1D:0E:C3:1F:47:2D:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a6813bdcd58e19805901bea439d6984387aad3c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35544fac-be2e-40f8-a414-0dca8e9f619a/53d3d4aae73e928640dcf187bfba8b1a21e33866.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35544fac-be2e-40f8-a414-0dca8e9f619a/a6813bdcd58e19805901bea439d6984387aad3c5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         96:65:6b:5c:d3:8c:6d:3e:56:05:9d:f0:a1:c7:84:4c:e1:d0:
         2c:52:e0:0c:53:15:7f:c4:c8:2f:b2:98:cb:1e:17:e9:ef:2f:
         5b:4c:8c:d5:19:97:54:84:6f:84:7b:30:4d:6e:dd:60:19:f5:
         62:13:d9:b8:4c:48:d0:58:27:f7:1a:db:65:0b:09:5c:eb:ac:
         2c:09:c8:df:ae:88:21:fe:e6:6c:53:68:83:8e:cf:be:15:44:
         50:c9:92:4d:96:65:89:3f:48:fd:13:e6:aa:cf:80:b4:b6:3a:
         03:2a:c0:ef:31:e6:91:9d:8f:35:c0:7c:f4:7f:e8:2c:6c:b8:
         92:50:b7:36:87:0f:a4:5c:18:6b:24:3d:e5:43:49:7c:c8:89:
         43:24:01:da:f5:63:b9:40:87:0e:43:5c:bf:8f:af:71:b9:7f:
         a9:64:e9:b3:c9:19:ed:11:ae:f5:94:56:37:48:ff:33:0c:26:
         10:4b:87:6c:8c:3b:9c:de:f3:d7:9b:71:86:85:c1:52:a0:d3:
         a4:da:e4:df:30:67:f2:aa:43:0f:d6:9f:41:40:16:a8:6e:df:
         15:28:74:18:2e:57:4b:f3:fc:57:63:ad:99:00:fe:d6:5f:3b:
         23:ef:a1:2e:54:f9:d3:a1:e5:76:38:01:0a:f8:b5:03:c6:a5:
         51:66:67:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----