Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/98605a8c55be4261af5aa6cd27c8b8b11a4ca950.roa
File:                     98605a8c55be4261af5aa6cd27c8b8b11a4ca950.roa (raw, json)
Hash identifier:          ahX2+dalx5+p4LdlBUUM8HXm0DtBadv2j4Az8qfEQng=
Subject key identifier:   C4:74:5C:F0:16:A3:4B:16:25:F1:D3:1E:52:A9:09:F7:DB:61:CD:83
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       1201A9
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/98605a8c55be4261af5aa6cd27c8b8b11a4ca950.roa
Signing time:             Fri 16 Apr 2021 02:00:54 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     27871
IP address blocks:        200.110.224.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1180073 (0x1201a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=98605a8c55be4261af5aa6cd27c8b8b11a4ca950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a7:68:c9:bf:38:a7:d6:dd:30:3a:6b:c9:49:
                    8b:aa:a7:7d:ab:ec:74:f9:b0:b8:3f:c2:13:3d:e1:
                    e9:00:e3:75:3e:d0:b8:3a:05:71:c4:43:20:1e:15:
                    26:46:99:23:e0:35:01:8a:36:52:c4:9e:36:21:98:
                    37:ec:0e:16:70:01:58:de:fe:09:73:f8:94:04:9b:
                    3f:66:62:98:e7:01:1d:a3:22:c0:7e:0f:35:50:37:
                    56:48:b9:13:50:a8:32:53:c2:3e:37:98:24:08:f2:
                    65:5f:04:45:20:60:80:f6:bd:87:e2:65:6a:43:d7:
                    6b:40:6f:61:50:45:af:95:54:cc:1f:fb:76:0d:67:
                    a8:77:82:82:cd:9b:4c:f4:42:64:7a:21:88:8c:5d:
                    a6:f0:b0:59:5b:24:ca:99:22:ac:2c:c7:94:10:38:
                    a6:66:b0:66:d3:8a:f1:83:ad:9c:62:7d:4c:7f:36:
                    8c:19:fb:1d:86:6a:0c:2d:f4:96:4b:5c:7e:ca:15:
                    1a:4c:61:85:4c:4f:89:7e:f0:53:83:f2:80:e2:93:
                    41:78:39:66:19:bd:5c:85:b3:99:4b:e8:ff:f9:1c:
                    6c:9d:cf:9e:9f:d2:66:54:e4:49:72:11:e9:2b:c2:
                    07:1b:c4:70:32:32:63:a9:ff:79:2d:0d:64:6e:70:
                    44:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:74:5C:F0:16:A3:4B:16:25:F1:D3:1E:52:A9:09:F7:DB:61:CD:83
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/98605a8c55be4261af5aa6cd27c8b8b11a4ca950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         46:7a:b5:1f:98:4b:3a:08:7d:75:86:23:80:05:00:df:e0:e6:
         91:c0:70:55:1a:b2:82:25:42:42:82:f3:6d:4b:3f:dd:ed:c3:
         0f:ed:59:d1:56:1c:08:85:83:4a:52:f1:4f:81:ff:04:f8:c4:
         c0:86:56:73:36:bc:a5:61:c1:3b:ec:d4:4b:6b:94:9e:06:8b:
         9a:1e:be:1f:37:4e:c6:e2:3a:0c:8a:76:44:83:cf:bd:49:9e:
         0c:63:48:fb:bd:82:6c:37:f6:92:6e:55:7a:86:38:c7:9c:f7:
         85:72:3d:9c:da:4b:73:02:a2:f1:6e:97:02:20:76:08:f2:c7:
         fd:da:64:49:ad:22:2a:f1:e3:62:4a:2d:23:0e:91:f5:dc:47:
         d7:37:be:b0:e7:b5:e8:53:f2:6d:1d:0f:70:0c:7b:5f:68:b9:
         b1:0c:18:e5:10:b4:90:b9:86:4f:9c:b0:d7:8e:d5:17:25:af:
         9a:24:ab:49:2b:72:c5:50:cb:1a:3e:83:fb:43:22:4e:48:1d:
         ad:85:21:c3:bc:29:b5:06:82:59:f1:89:fb:72:1c:f6:47:10:
         24:1f:db:f6:ed:3a:cf:fe:b2:39:bf:6b:9b:c7:1f:b0:08:e6:
         07:2b:11:ba:89:3d:0b:54:a9:56:90:10:03:c3:d1:e5:00:0d:
         34:65:a1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----