Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/647adc7c3815459e8321a9a418d63720b2f7dd48.roa
File:                     647adc7c3815459e8321a9a418d63720b2f7dd48.roa (raw, json)
Hash identifier:          K50ub96XnJPa0xKWLX75u3HnVrUn9PkvRWQZ+Q2IFEc=
Subject key identifier:   66:AF:01:6C:74:1F:FA:80:9F:A5:5B:63:5D:D9:CE:58:8C:42:38:2E
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       23D7D8
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/647adc7c3815459e8321a9a418d63720b2f7dd48.roa
Signing time:             Tue 17 Jan 2023 14:57:32 +0000
ROA not before:           Mon 16 Jan 2023 14:39:06 +0000
ROA not after:            Fri 17 Jan 2025 14:39:06 +0000
asID:                     27823
IP address blocks:        200.45.208.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2349016 (0x23d7d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Jan 16 14:39:06 2023 GMT
            Not After : Jan 17 14:39:06 2025 GMT
        Subject: CN=647adc7c3815459e8321a9a418d63720b2f7dd48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c6:cd:98:e8:eb:a2:41:ef:13:1a:40:7a:c2:
                    ed:2c:23:c5:e6:a7:2e:08:d6:89:1b:ef:fc:62:04:
                    49:4a:5c:51:22:20:31:c3:06:34:ce:34:e7:7b:f9:
                    48:4c:00:5d:07:2b:e0:c9:22:f4:1d:3d:18:06:3f:
                    70:43:91:6a:7d:47:09:55:c2:07:ff:1c:a1:cd:87:
                    7e:b5:0b:ac:58:d2:80:23:33:c2:06:49:1a:7f:81:
                    fe:5e:e4:58:b2:dd:90:d6:62:34:d3:5f:9f:ee:ff:
                    e7:bb:53:8c:b1:10:28:36:9f:4c:55:99:51:42:01:
                    14:59:5b:21:2e:0e:ca:d3:62:01:63:d1:77:c8:bf:
                    a9:43:08:33:5f:6f:e1:a4:12:00:7e:4f:eb:52:cf:
                    96:8c:a0:4c:65:fb:c5:59:6b:ea:07:49:84:b7:33:
                    c5:c1:38:01:c3:9d:8a:4d:7d:05:63:31:91:00:9a:
                    2d:c3:67:3a:34:3f:77:b5:20:9d:26:4d:95:62:eb:
                    9a:f2:ec:2a:d1:37:a7:a1:93:33:91:8c:64:e9:f2:
                    5c:5d:d6:2f:11:f0:f4:2f:e1:28:79:21:0c:ad:e5:
                    87:44:e0:0f:e8:e3:08:d6:ff:67:35:ca:5f:10:f9:
                    13:bb:2d:40:52:83:19:18:28:28:ae:b3:25:4a:0f:
                    88:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AF:01:6C:74:1F:FA:80:9F:A5:5B:63:5D:D9:CE:58:8C:42:38:2E
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/647adc7c3815459e8321a9a418d63720b2f7dd48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.45.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:38:d3:f4:cb:d0:0e:a1:b7:e4:fe:32:61:13:55:fa:12:0e:
         93:0c:a8:63:0c:3d:b3:7c:68:cb:28:f5:d0:43:1a:55:0d:90:
         3f:fd:1a:f1:50:de:c7:59:3e:d8:50:a6:d7:b0:8f:1a:03:2f:
         70:92:6d:a2:06:fb:b4:14:32:fa:ee:e4:bd:34:a5:3e:e6:6c:
         0a:21:de:2a:d1:36:e1:dc:6a:f9:64:59:c5:49:a7:92:36:0e:
         fc:1f:78:80:61:f7:28:59:72:8f:a5:a3:54:1d:ba:de:59:e2:
         1a:c9:b5:75:62:f5:29:8f:1f:72:e5:f3:a5:a7:7b:f0:52:d6:
         2c:b8:9b:cd:e1:8d:e6:05:63:66:26:f6:11:d5:3c:33:66:84:
         0c:6d:18:eb:69:d6:71:1f:56:1e:86:8a:77:b4:bd:d4:77:43:
         52:a6:54:b0:67:55:2f:73:4a:0f:90:33:a3:c7:69:4f:8f:72:
         6f:2f:f3:b7:f8:a3:8f:5d:b2:99:34:d5:7e:31:9d:7b:a5:9b:
         5a:ec:ad:1a:4a:ea:21:d9:2b:b0:d4:66:6f:e4:e9:b3:00:78:
         42:61:16:bf:b6:64:45:60:b5:aa:41:66:8f:25:08:ce:de:99:
         98:26:7b:2c:db:1d:f7:4c:0d:b8:20:c8:8b:44:14:99:e5:a3:
         29:dd:d1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----