Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/2f70aa7d1e2de7a9975c314e4205a2b0168fbd3c.roa
File:                     2f70aa7d1e2de7a9975c314e4205a2b0168fbd3c.roa (raw, json)
Hash identifier:          JvrViGPo1T0rxjeCMD5uf1q+qSgts+4Jm/f4/rA5pq4=
Subject key identifier:   A3:BA:DF:95:64:B8:D1:EE:16:E9:7D:30:A2:F9:6F:84:3E:EB:34:AA
Certificate issuer:       /CN=aae8cbe9904f103232c002483204f9f2ae04d026
Certificate serial:       112D59
Authority key identifier: 9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/2f70aa7d1e2de7a9975c314e4205a2b0168fbd3c.roa
Signing time:             Fri 13 Aug 2021 15:00:28 +0000
ROA not before:           Fri 13 Aug 2021 15:00:21 +0000
ROA not after:            Thu 13 Aug 2026 15:00:21 +0000
asID:                     28041
IP address blocks:        200.125.143.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1125721 (0x112d59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae8cbe9904f103232c002483204f9f2ae04d026
        Validity
            Not Before: Aug 13 15:00:21 2021 GMT
            Not After : Aug 13 15:00:21 2026 GMT
        Subject: CN=2f70aa7d1e2de7a9975c314e4205a2b0168fbd3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8f:ed:d7:4d:c5:5e:e3:09:1a:48:ed:41:44:
                    1d:10:bd:d1:23:85:62:ee:47:11:8a:e2:cc:1a:df:
                    d0:a5:cb:fa:97:bf:db:82:0d:14:bb:33:db:7d:c8:
                    13:fd:9c:50:2a:b7:00:14:e7:42:08:11:2c:a8:92:
                    a7:0a:46:c0:4a:6f:51:f2:62:af:b6:60:af:43:bc:
                    70:56:01:63:4c:d2:fb:20:a2:49:c8:9b:67:78:22:
                    8b:56:60:75:40:78:f1:39:4f:9c:e2:ba:5f:8a:ed:
                    a2:2e:25:79:92:77:2d:7b:fe:93:44:70:9e:a7:ea:
                    64:7d:c8:3f:ff:7f:c1:ec:d0:be:8c:92:8b:ee:00:
                    bd:d8:25:2a:72:2a:46:13:f5:01:77:da:e0:88:e9:
                    f7:46:54:59:23:5f:d5:30:9a:0d:33:df:ff:ea:60:
                    17:d5:6f:73:b0:99:49:3d:c3:37:13:ea:1d:35:75:
                    c2:a8:6f:0b:dc:8f:dc:e5:9b:a0:6f:cc:0c:97:ff:
                    fb:18:96:80:e3:b8:95:92:c5:34:41:df:ff:ec:f5:
                    14:80:1c:b0:0d:39:08:75:85:ea:d1:02:8c:b6:88:
                    80:bf:c2:84:0d:f9:81:b6:18:16:53:77:53:3b:80:
                    34:74:e0:ac:9b:78:7a:a4:60:18:d6:f1:a1:51:92:
                    94:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:BA:DF:95:64:B8:D1:EE:16:E9:7D:30:A2:F9:6F:84:3E:EB:34:AA
            X509v3 Authority Key Identifier:
                keyid:9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/2f70aa7d1e2de7a9975c314e4205a2b0168fbd3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:a5:7a:e5:62:16:77:e8:ef:a5:d3:23:7b:9b:5d:35:46:fa:
         d6:03:43:43:12:d6:d5:fe:98:94:76:1e:b8:86:70:94:ec:d0:
         a0:41:b9:ab:95:e4:07:84:83:ba:66:1b:99:b5:91:64:b8:3a:
         83:5b:60:59:2c:af:89:75:11:49:11:8d:3a:6f:40:d2:4c:c6:
         8c:83:f3:07:a0:45:e6:dd:b4:63:01:0d:53:39:83:dd:01:85:
         cd:b1:ba:ae:db:c4:1e:96:7d:ce:41:8a:42:94:f0:5b:03:0f:
         37:67:e2:8a:56:20:da:32:de:58:e1:42:e5:40:50:8e:54:97:
         d7:91:e9:c0:7c:ad:d8:8a:a3:eb:f1:66:14:f6:e4:d3:69:ac:
         b3:92:ab:af:7c:13:74:12:11:5c:81:37:67:e2:99:91:e2:64:
         94:75:1b:3c:94:14:3f:95:6f:37:1f:45:d9:e5:2f:2f:77:5d:
         c6:b7:f1:34:d0:27:c6:d8:9e:28:58:01:9d:22:56:78:86:0f:
         46:b4:d3:99:25:8a:24:2d:04:9c:c4:3d:76:7f:8f:d4:10:a7:
         f0:a4:77:de:43:38:69:a9:e0:df:ff:79:20:8c:e7:0e:a6:cd:
         97:00:6e:6e:0b:91:96:ea:b3:4c:09:f8:00:51:15:41:d4:79:
         f3:a8:17:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----