Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/5d0ca6908bb87580829c7d2266626f724db5ece9.roa
File:                     5d0ca6908bb87580829c7d2266626f724db5ece9.roa (raw, json)
Hash identifier:          lnmudrpZZoHeoHevnmaQErCi1tAWpfvqGdEPH+QOReo=
Subject key identifier:   E9:C6:7D:32:05:70:54:79:28:E7:BD:10:F8:B3:D1:29:4D:5B:5B:C4
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       11FE13
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/5d0ca6908bb87580829c7d2266626f724db5ece9.roa
Signing time:             Fri 16 Apr 2021 02:00:01 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     27827
IP address blocks:        200.43.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1179155 (0x11fe13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=5d0ca6908bb87580829c7d2266626f724db5ece9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f1:9c:f8:91:57:7c:64:61:6c:77:8f:aa:61:
                    76:5a:bf:26:05:81:af:01:51:6b:b6:88:b0:6e:62:
                    6f:3b:98:0b:02:04:dc:0b:01:ab:a4:80:11:47:48:
                    4a:94:65:e9:ff:3c:c4:20:10:d6:2f:5e:31:8c:3f:
                    61:95:7d:0f:33:5d:de:4f:3c:aa:fa:db:77:72:e3:
                    6d:6b:9a:68:a3:61:91:81:23:c7:66:60:f8:15:bb:
                    1f:6e:35:98:d6:17:a6:4e:4f:57:41:90:f9:95:49:
                    9c:26:7d:d6:93:c0:38:88:91:72:02:ab:d8:fc:9d:
                    b8:5f:6f:ff:df:f7:ff:f6:03:32:55:99:ff:31:fe:
                    66:d4:5d:38:b5:52:76:29:a2:60:49:eb:0c:1d:25:
                    10:bd:83:69:ed:65:eb:d5:98:8a:5a:7a:b5:4b:8b:
                    d3:d5:2a:44:d8:70:de:d8:b4:07:e2:c9:2e:b1:ad:
                    92:f1:be:33:94:98:40:8e:d4:98:73:f7:8e:7a:88:
                    07:e9:c1:ba:b6:21:4b:95:c7:43:da:05:64:ca:1e:
                    0f:14:eb:71:4a:41:73:17:b9:ce:d1:f0:76:dc:81:
                    27:ff:67:fd:15:5c:26:42:8a:c8:2c:ae:ee:e5:c5:
                    f6:8a:b3:6d:e1:a8:8a:13:e0:e9:d9:35:bb:46:d2:
                    ab:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C6:7D:32:05:70:54:79:28:E7:BD:10:F8:B3:D1:29:4D:5B:5B:C4
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/5d0ca6908bb87580829c7d2266626f724db5ece9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.43.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:79:51:40:02:b3:88:51:6c:31:d9:a0:21:af:c1:60:d2:f6:
         05:2f:54:f6:ae:75:55:00:8e:a4:59:de:36:c4:1a:35:24:a1:
         7f:ff:48:3c:c5:d7:40:e2:fe:dd:e5:bf:bd:4d:4d:4e:03:34:
         3f:e4:1d:c7:49:cd:cb:c3:2f:81:de:21:f5:35:a8:76:6f:ab:
         4e:cb:43:98:1a:df:07:c6:8a:d4:9c:02:2e:c1:f3:22:de:3d:
         ea:8c:38:73:f4:11:ab:7c:36:05:67:04:d3:75:ed:76:96:ea:
         59:06:ac:a0:6a:a0:5c:2d:db:10:b4:98:81:55:b6:97:86:b3:
         4e:d0:50:85:cd:04:83:ca:88:2e:5e:e7:e0:7c:d1:9e:dc:5f:
         92:84:01:e7:8e:e2:63:ce:18:c1:f5:87:2d:08:74:b6:cf:ab:
         09:4d:6a:0c:8a:5b:7f:e5:02:b4:55:80:d5:a6:4c:26:4b:79:
         ff:ad:c1:7c:e6:14:df:b6:00:49:e1:cf:33:71:a3:71:c3:1c:
         22:32:35:80:77:8e:c6:f8:8d:d1:d0:e9:84:11:01:80:9d:21:
         c8:36:23:4c:6e:89:17:2c:53:93:ee:6b:db:c8:af:34:53:07:
         4e:e9:69:7b:a7:34:f8:0f:c2:f0:b7:3b:0c:02:88:fb:7b:0b:
         2e:e0:9f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----