Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/f98697527edfc3fd59361dafaca270037a142907.roa
File:                     f98697527edfc3fd59361dafaca270037a142907.roa (raw, json)
Hash identifier:          j+b/iEdDt9/g2Z5P+EVZT+RN2ctPzp67bfVrO5M+DiI=
Subject key identifier:   D8:94:59:16:2F:BB:4D:99:F7:6B:9E:C8:6E:3A:71:CE:D3:0F:B8:FD
Certificate issuer:       /CN=aae8cbe9904f103232c002483204f9f2ae04d026
Certificate serial:       11192C
Authority key identifier: 9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/f98697527edfc3fd59361dafaca270037a142907.roa
Signing time:             Fri 13 Aug 2021 15:00:24 +0000
ROA not before:           Fri 13 Aug 2021 15:00:21 +0000
ROA not after:            Thu 13 Aug 2026 15:00:21 +0000
asID:                     28041
IP address blocks:        200.125.156.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1120556 (0x11192c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae8cbe9904f103232c002483204f9f2ae04d026
        Validity
            Not Before: Aug 13 15:00:21 2021 GMT
            Not After : Aug 13 15:00:21 2026 GMT
        Subject: CN=f98697527edfc3fd59361dafaca270037a142907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:69:02:f6:5b:8a:e7:8d:d2:32:80:ff:f9:32:
                    72:3f:b0:18:a1:dd:47:62:e5:67:1a:de:25:e8:ed:
                    8e:47:9a:74:9c:57:b2:f7:3a:da:d5:1c:86:ee:9e:
                    36:5a:46:43:51:97:af:0d:75:a2:86:dd:04:40:99:
                    80:d1:81:01:26:50:85:7c:9d:57:88:a6:a2:58:01:
                    84:d9:68:f7:46:b9:a0:1b:bb:e4:76:4b:bc:63:ca:
                    28:f6:f5:b4:83:38:24:49:7f:95:89:a1:67:55:0d:
                    be:57:60:70:3e:52:10:79:ad:99:9f:b6:4e:96:13:
                    50:43:df:b8:ef:40:bc:3e:b4:7a:74:26:41:e2:36:
                    b2:64:0c:1c:77:df:17:ad:b0:d1:e6:66:e6:53:c6:
                    7b:db:82:c2:c0:08:f8:70:ee:56:bd:4a:f4:f5:33:
                    a7:fd:17:ec:74:49:c8:c9:ad:cb:a8:6a:84:8b:d6:
                    7f:b9:ce:11:09:d1:bc:64:90:03:28:6f:2b:bb:3e:
                    f7:b0:8c:e4:d8:ea:b4:01:22:03:91:3e:28:b1:c5:
                    35:9a:52:7f:1c:38:7e:83:a2:bb:eb:ed:85:3f:57:
                    e1:46:cc:f6:63:29:43:a9:6a:11:ab:0e:b0:d5:44:
                    e7:61:c6:dc:06:14:2b:67:76:fb:51:db:0d:9f:e8:
                    3f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:94:59:16:2F:BB:4D:99:F7:6B:9E:C8:6E:3A:71:CE:D3:0F:B8:FD
            X509v3 Authority Key Identifier:
                keyid:9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/f98697527edfc3fd59361dafaca270037a142907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:78:90:7d:cb:09:7a:e4:ff:57:7c:d1:20:e4:e0:72:5b:00:
         8c:7f:18:d6:6a:eb:94:5d:11:fa:ca:9d:70:ab:d7:fb:d6:05:
         c8:fe:c4:ac:2e:40:7f:19:f8:94:f5:b6:50:38:7e:43:db:aa:
         d1:76:9f:6e:3e:2e:66:45:a3:9b:c5:60:3c:40:36:39:b5:67:
         5f:bf:0b:85:78:d0:0f:df:3f:35:62:0a:5e:5b:c2:5a:8a:8e:
         e8:f6:4a:20:a5:12:cb:0f:51:32:34:33:09:5a:3a:ca:dd:11:
         f5:6e:1c:40:94:2d:67:39:c6:90:0d:1f:47:13:21:54:3d:da:
         0a:cb:f5:9a:74:38:ae:d9:0d:d5:f5:4a:a7:0e:dd:9d:79:ac:
         48:d8:4a:59:c3:5a:50:2b:a7:5d:8e:40:66:ca:4c:59:99:e3:
         9c:bd:b0:16:4d:2c:93:4e:42:d2:08:7f:55:26:1d:0d:b1:d3:
         44:08:3f:02:37:b4:89:b0:a9:ed:fd:fe:1b:53:eb:bf:83:b8:
         a3:d3:53:f6:22:c2:c5:8c:16:e1:52:d4:91:c3:7b:c0:7f:01:
         68:7f:46:73:a5:c2:c7:0b:9c:cc:87:17:99:80:d8:13:f8:b0:
         f9:e0:d9:6e:5a:ed:6b:33:7e:1e:9a:67:48:e3:1c:46:06:76:
         31:ae:20:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----