Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/23c9d0a54b5c9e1e060db9988ee5b1de1815c5ff.roa
File:                     23c9d0a54b5c9e1e060db9988ee5b1de1815c5ff.roa (raw, json)
Hash identifier:          QXz9mNvhGfCli235MQnnDAaiiDdlIHvASFwK/4w2z/w=
Subject key identifier:   CF:87:6A:16:C7:27:E1:41:36:3E:4E:5B:89:A2:8F:FB:88:A8:64:B9
Certificate issuer:       /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial:       1E2096
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/23c9d0a54b5c9e1e060db9988ee5b1de1815c5ff.roa
Signing time:             Wed 30 Nov 2022 14:26:22 +0000
ROA not before:           Tue 23 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     10697
IP address blocks:        200.50.160.0/23 maxlen: 23
                          200.50.160.0/24 maxlen: 24
                          200.50.161.0/24 maxlen: 24
                          200.50.164.0/24 maxlen: 24
                          200.50.168.0/24 maxlen: 24
                          200.50.173.0/24 maxlen: 24
                          200.123.48.0/24 maxlen: 24
                          2800:820::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1974422 (0x1e2096)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
        Validity
            Not Before: Mar 23 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=23c9d0a54b5c9e1e060db9988ee5b1de1815c5ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:33:db:84:d7:64:6e:ca:6f:92:c5:52:3e:d3:
                    e2:22:3c:01:bd:f5:2e:f8:ce:96:3e:d5:bf:6b:bc:
                    55:16:50:ca:f3:c6:c8:1a:29:61:a5:f1:43:bf:b5:
                    78:7d:99:e6:18:e2:1c:f7:40:cb:e3:27:f3:0f:5d:
                    26:9b:2b:9c:dc:17:44:92:07:a3:00:cb:33:7f:53:
                    f6:4b:53:84:0a:4e:78:de:53:23:9b:ec:38:f1:88:
                    87:78:40:bb:c8:cb:c4:34:9f:d2:8a:0a:34:b2:c4:
                    93:d9:4b:63:b6:50:e2:d1:f4:cd:d0:2e:0b:fc:6c:
                    f1:65:b5:a3:82:b9:d5:92:f1:3e:82:55:5f:e3:67:
                    6a:2c:82:5c:58:82:cc:10:2e:45:99:05:00:61:a4:
                    2a:9a:fd:79:95:33:d1:e3:e4:d3:9f:3b:91:fd:2a:
                    e7:1b:93:bc:ae:4c:d8:f4:e0:f5:e8:9f:c5:28:68:
                    83:32:13:20:ad:53:72:1e:19:81:21:b2:8d:cd:d7:
                    3c:fb:47:8d:b2:d4:e0:88:54:7f:f9:fd:f8:b2:be:
                    50:60:80:4a:5e:96:c6:fd:c4:0e:ab:0d:7b:bd:50:
                    13:20:c1:ea:36:e8:5d:a8:d7:f7:3d:2d:9e:de:31:
                    d1:03:4c:ea:f7:12:0f:62:26:c0:36:52:4b:fa:45:
                    81:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:87:6A:16:C7:27:E1:41:36:3E:4E:5B:89:A2:8F:FB:88:A8:64:B9
            X509v3 Authority Key Identifier:
                keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/23c9d0a54b5c9e1e060db9988ee5b1de1815c5ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.160.0/23
                  200.50.164.0/24
                  200.50.168.0/24
                  200.50.173.0/24
                  200.123.48.0/24
                IPv6:
                  2800:820::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:cd:2a:44:a6:73:cc:4a:88:8c:e4:fb:f7:6e:07:37:58:8c:
         36:8d:a6:0c:dc:18:16:88:75:03:d1:7f:e3:21:15:c5:e4:13:
         be:50:dc:c5:c1:25:e8:40:fe:41:31:20:0a:a5:2f:4a:1a:c2:
         a1:e8:12:17:75:b8:22:bd:7d:b1:0f:3c:e4:25:1e:e8:5a:1c:
         41:92:fe:d3:16:d2:e9:d3:f0:cf:39:76:84:f6:95:df:1a:01:
         90:36:2c:24:dc:3a:34:e5:38:f4:2d:a2:39:f9:23:df:f8:12:
         51:a5:5e:6c:5d:38:4e:8c:ee:97:5c:4b:04:c7:d2:16:e2:84:
         40:e5:66:ee:86:af:e2:ac:51:5b:1f:9d:77:39:93:b7:7a:61:
         43:97:3a:6e:74:75:ab:64:9a:aa:7f:02:2a:8c:eb:59:b1:12:
         78:7e:a3:fe:ef:80:8e:ed:bf:66:2e:8c:33:d6:d9:6e:30:82:
         15:cd:dd:d4:19:5e:cb:07:ce:9b:59:c5:c4:8a:01:26:c1:61:
         de:ef:06:f3:c8:fe:a8:b7:f1:81:8e:7e:19:cc:4f:7a:f3:53:
         9f:68:6a:38:fa:99:7f:c0:1a:0f:3d:69:0a:cb:86:1b:a4:1e:
         9e:10:5d:1e:95:1d:5f:db:42:fd:70:15:b5:d1:c2:be:59:27:
         bc:dc:ae:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----