Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/4970f499bd6b2b2d465d7953ad085bd2bcbed572.roa
File:                     4970f499bd6b2b2d465d7953ad085bd2bcbed572.roa (raw, json)
Hash identifier:          FAtDIwF3X5HavZGzllaJXaBBdF0xpgCsK2nQk8lhOag=
Subject key identifier:   ED:66:8A:A5:11:91:A5:2B:C4:C0:2E:EA:66:16:AB:AE:CF:C8:FA:E3
Certificate issuer:       /CN=aae8cbe9904f103232c002483204f9f2ae04d026
Certificate serial:       1130DC
Authority key identifier: 9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/4970f499bd6b2b2d465d7953ad085bd2bcbed572.roa
Signing time:             Fri 13 Aug 2021 15:00:29 +0000
ROA not before:           Fri 13 Aug 2021 15:00:21 +0000
ROA not after:            Thu 13 Aug 2026 15:00:21 +0000
asID:                     27947
IP address blocks:        200.125.130.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1126620 (0x1130dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae8cbe9904f103232c002483204f9f2ae04d026
        Validity
            Not Before: Aug 13 15:00:21 2021 GMT
            Not After : Aug 13 15:00:21 2026 GMT
        Subject: CN=4970f499bd6b2b2d465d7953ad085bd2bcbed572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f3:8c:f5:eb:50:ea:e0:0a:b4:da:22:02:d4:
                    e3:d8:79:5a:46:2d:ac:9d:58:ca:88:3c:f7:ea:1c:
                    36:47:d0:6c:34:07:9a:24:74:a1:31:f4:4e:f1:94:
                    83:af:7d:47:f0:27:8e:ee:29:99:99:6e:ef:89:01:
                    ae:65:36:5c:18:ad:41:63:87:9c:a8:fa:22:ca:1d:
                    61:b8:4b:ad:c3:8a:a6:4e:7f:ae:96:a7:0a:87:34:
                    b6:ef:e5:38:0a:ad:d2:f5:9c:b6:c8:14:3f:e1:bf:
                    68:83:c7:52:20:35:c9:a4:04:48:1d:0a:04:4e:da:
                    96:9d:7a:07:29:81:52:1d:63:dc:f4:a4:52:6a:c5:
                    58:0b:0b:47:61:2e:f8:ab:c0:40:ef:c4:75:43:74:
                    21:b0:35:8d:55:75:07:d6:3f:22:e2:b3:95:5f:60:
                    dd:11:cd:a3:dd:57:83:24:7f:10:55:76:11:fa:fd:
                    00:0e:61:9a:cf:fe:08:25:7f:43:36:19:bb:32:e2:
                    0d:04:22:2f:66:d0:18:46:b0:8f:65:16:5e:ec:cf:
                    dd:4d:de:ad:4a:d7:12:61:3a:5d:3f:29:9b:f3:cc:
                    b0:aa:a0:56:0e:2a:5d:89:b1:eb:d0:e9:b8:13:3f:
                    eb:77:b3:86:a9:7d:c6:49:22:d8:b4:ec:0b:86:6d:
                    b1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:66:8A:A5:11:91:A5:2B:C4:C0:2E:EA:66:16:AB:AE:CF:C8:FA:E3
            X509v3 Authority Key Identifier:
                keyid:9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/4970f499bd6b2b2d465d7953ad085bd2bcbed572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:4d:0c:55:88:04:10:b8:48:dd:32:76:c2:31:f6:d7:6a:95:
         43:68:8a:49:2c:d0:59:73:a0:d8:93:b4:0f:f1:13:92:6f:c2:
         63:1d:16:4a:74:67:28:32:a3:0c:32:02:c1:76:7b:ab:0a:18:
         a3:f0:2d:2f:20:34:b5:4e:11:dd:a3:ae:ce:28:2e:1a:b1:a1:
         0b:79:c7:6f:db:12:d7:41:e6:27:1b:d2:78:4d:d9:06:58:d2:
         d5:5e:ab:63:05:2f:08:6f:b5:26:da:cf:65:dc:73:5e:10:d1:
         9b:40:1d:af:b6:90:fd:86:59:0f:19:d3:ea:2a:68:22:d0:e3:
         a2:aa:39:66:43:6d:f9:e3:c3:d8:94:34:89:6c:b9:19:6e:c8:
         ae:bb:83:d5:2c:d1:25:77:31:53:d0:76:d0:7e:9c:ae:b1:22:
         71:7f:6c:85:5d:47:a3:91:d5:e7:34:ea:3d:da:90:14:b0:15:
         7e:dc:fa:77:91:52:af:fc:c7:8c:b9:7c:57:42:33:01:5f:fb:
         4e:a5:80:ba:65:ed:1a:c1:5f:36:bb:6d:58:9d:b2:72:00:30:
         19:d5:2e:f4:96:d6:73:fd:d5:86:e7:52:8e:b1:08:ed:53:f9:
         32:cb:8a:03:5f:95:01:1d:54:07:4e:51:59:ca:ae:0d:bd:ae:
         47:70:d3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----