Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/73cf336833bc11338dc9ecbcc6610b52960a0368.roa
File:                     73cf336833bc11338dc9ecbcc6610b52960a0368.roa (raw, json)
Hash identifier:          BnYfj9FKiwW95fbRf1HnAtaJhNsijZX8jkkeVvqaQoA=
Subject key identifier:   F1:90:6F:B4:75:A9:85:E5:CD:3C:B0:C2:8C:34:28:C3:2A:DF:09:D2
Certificate issuer:       /CN=aae8cbe9904f103232c002483204f9f2ae04d026
Certificate serial:       113F4C
Authority key identifier: 9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/73cf336833bc11338dc9ecbcc6610b52960a0368.roa
Signing time:             Fri 13 Aug 2021 15:00:32 +0000
ROA not before:           Fri 13 Aug 2021 15:00:21 +0000
ROA not after:            Thu 13 Aug 2026 15:00:21 +0000
asID:                     28006
IP address blocks:        200.125.130.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1130316 (0x113f4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae8cbe9904f103232c002483204f9f2ae04d026
        Validity
            Not Before: Aug 13 15:00:21 2021 GMT
            Not After : Aug 13 15:00:21 2026 GMT
        Subject: CN=73cf336833bc11338dc9ecbcc6610b52960a0368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5c:8d:ba:d3:47:3e:79:32:b2:cb:92:0d:25:
                    ee:09:35:d7:b5:30:f6:e4:bc:3f:91:f8:05:44:53:
                    35:34:90:18:1a:5b:3d:a6:b6:71:0a:e0:df:03:91:
                    bf:eb:26:bb:b0:bb:d7:dd:ee:ae:97:c7:94:83:ec:
                    c3:33:5d:fa:b7:73:92:02:4d:9c:f4:c1:df:28:80:
                    9f:ae:55:86:c8:1a:8f:72:41:5e:ca:a2:ea:cd:4f:
                    d1:04:c8:d0:d2:47:4d:7d:5e:31:76:77:0d:ff:b3:
                    9d:fc:cd:48:73:35:bb:98:25:4b:f7:aa:6a:a9:f6:
                    ce:82:3b:85:cd:1a:0b:b6:f7:fe:e3:5a:1a:55:37:
                    0e:84:7d:b5:3b:4e:a8:d8:10:9b:79:4f:21:31:94:
                    78:09:ac:8f:b0:3a:7d:30:bd:10:74:3a:31:49:b3:
                    7e:4b:d3:ab:75:17:4d:7e:e4:77:0c:38:88:f2:38:
                    0e:c3:61:2b:92:5f:a6:e0:fc:c5:ee:9e:f9:01:bf:
                    54:2e:0f:b0:60:63:cf:07:de:fe:1e:c9:3b:5c:f6:
                    49:21:5e:e6:26:40:16:89:b9:1d:31:81:d5:37:f6:
                    6b:89:8c:e2:99:2c:6d:c4:bf:7f:ef:78:f4:9f:f5:
                    e2:62:71:e0:51:46:10:c3:5d:2f:5c:d4:2e:98:7b:
                    23:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:90:6F:B4:75:A9:85:E5:CD:3C:B0:C2:8C:34:28:C3:2A:DF:09:D2
            X509v3 Authority Key Identifier:
                keyid:9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/73cf336833bc11338dc9ecbcc6610b52960a0368.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:33:bc:e6:d3:4c:af:b1:75:d9:41:e2:50:d8:f3:b4:e0:84:
         19:06:ad:e0:95:7d:b1:39:3c:7a:f1:c7:84:af:08:89:d8:95:
         87:6b:45:c2:a9:7f:45:a5:04:b5:78:c9:5c:b1:83:1f:36:35:
         f5:ec:89:0a:82:41:55:df:86:fc:e6:c9:a8:15:74:b2:e9:fc:
         67:50:fe:7f:6f:25:2d:8e:57:f6:a2:df:f2:35:d8:13:4a:83:
         d4:ed:da:a7:55:a4:ea:61:55:9e:27:2d:60:b2:9b:35:9d:b8:
         c1:39:46:99:06:f5:b3:b8:16:88:5a:72:c4:46:13:24:41:96:
         ae:6f:b0:c1:12:b4:29:7d:11:36:7c:9e:83:d6:38:16:19:68:
         e6:73:7c:8f:eb:6b:d2:1a:6a:d1:ac:6b:66:b9:07:80:ce:71:
         8f:ff:00:92:df:a7:8b:57:38:e8:5f:03:59:0d:6e:60:6a:6f:
         a0:9e:69:1e:0d:c5:94:b6:ac:07:cb:8f:18:44:b9:96:35:2a:
         1f:03:2d:7f:d6:b3:8f:e0:12:ee:54:9c:a7:a5:b2:99:01:76:
         0d:4c:e7:02:7c:52:fb:68:6e:e9:6c:9e:18:76:d8:33:00:5f:
         41:e8:df:17:f4:2e:ba:f4:45:9b:84:c0:40:9e:56:62:d1:20:
         0b:a2:21:ce
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDET9MMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFh
ZThjYmU5OTA0ZjEwMzIzMmMwMDI0ODMyMDRmOWYyYWUwNGQwMjYwHhcNMjEwODEz
MTUwMDIxWhcNMjYwODEzMTUwMDIxWjAzMTEwLwYDVQQDEyg3M2NmMzM2ODMzYmMx
MTMzOGRjOWVjYmNjNjYxMGI1Mjk2MGEwMzY4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA3FyNutNHPnkyssuSDSXuCTXXtTD25Lw/kfgFRFM1NJAYGls9
prZxCuDfA5G/6ya7sLvX3e6ul8eUg+zDM136t3OSAk2c9MHfKICfrlWGyBqPckFe
yqLqzU/RBMjQ0kdNfV4xdncN/7Od/M1IczW7mCVL96pqqfbOgjuFzRoLtvf+41oa
VTcOhH21O06o2BCbeU8hMZR4CayPsDp9ML0QdDoxSbN+S9OrdRdNfuR3DDiI8jgO
w2Erkl+m4PzF7p75Ab9ULg+wYGPPB97+Hsk7XPZJIV7mJkAWibkdMYHVN/ZriYzi
mSxtxL9/73j0n/XiYnHgUUYQw10vXNQumHsjTwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPGQb7R1qYXlzTywwow0KMMq3wnSMB8GA1UdIwQYMBaAFJ4h+rhynemGXdTW
X98/sNPNNxk0MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWFlOGNi
ZTk5MDRmMTAzMjMyYzAwMjQ4MzIwNGY5ZjJhZTA0ZDAyNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGRjMmMwN2EtOGM3ZS00N2M3LWFlOTAtY2NkNzE0
ODdjZTEwLzczY2YzMzY4MzNiYzExMzM4ZGM5ZWNiY2M2NjEwYjUyOTYwYTAzNjgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZGMyYzA3YS04YzdlLTQ3YzctYWU5MC1jY2Q3
MTQ4N2NlMTAvYWFlOGNiZTk5MDRmMTAzMjMyYzAwMjQ4MzIwNGY5ZjJhZTA0ZDAy
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAch9gjANBgkqhkiG9w0BAQsFAAOCAQEAKTO85tNMr7F12UHi
UNjztOCEGQat4JV9sTk8evHHhK8IidiVh2tFwql/RaUEtXjJXLGDHzY19eyJCoJB
Vd+G/ObJqBV0sun8Z1D+f28lLY5X9qLf8jXYE0qD1O3ap1Wk6mFVnictYLKbNZ24
wTlGmQb1s7gWiFpyxEYTJEGWrm+wwRK0KX0RNnyeg9Y4Fhlo5nN8j+tr0hpq0axr
ZrkHgM5xj/8Akt+ni1c46F8DWQ1uYGpvoJ5pHg3FlLasB8uPGES5ljUqHwMtf9az
j+AS7lScp6WymQF2DUznAnxS+2hu6WyeGHbYMwBfQejfF/QuuvRFm4TAQJ5WYtEg
C6Ihzg==
-----END CERTIFICATE-----