Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/214547d1f8b2790915dd3b14f5f7f1d2ca4cfc9c.roa
File:                     214547d1f8b2790915dd3b14f5f7f1d2ca4cfc9c.roa (raw, json)
Hash identifier:          r/dn+Ptlaf+XLaI4mmnHvZfW+Phd8/k4HgbBsxpgJ4M=
Subject key identifier:   68:A3:BD:2E:36:F9:10:D8:E6:C7:C1:67:F6:27:90:12:D2:5D:63:C1
Certificate issuer:       /CN=30d20bef67088f83626615a8accfbafffad06334
Certificate serial:       044F
Authority key identifier: 93:34:E0:2D:E2:00:5A:1A:43:BC:FF:4D:2E:E0:88:0E:23:B1:E1:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30d20bef67088f83626615a8accfbafffad06334.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/214547d1f8b2790915dd3b14f5f7f1d2ca4cfc9c.roa
Signing time:             Tue 02 Nov 2021 21:03:25 +0000
ROA not before:           Tue 02 Nov 2021 03:00:00 +0000
ROA not after:            Thu 02 Nov 2023 03:00:00 +0000
asID:                     52468
IP address blocks:        200.52.150.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1103 (0x44f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d20bef67088f83626615a8accfbafffad06334
        Validity
            Not Before: Nov  2 03:00:00 2021 GMT
            Not After : Nov  2 03:00:00 2023 GMT
        Subject: CN=214547d1f8b2790915dd3b14f5f7f1d2ca4cfc9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f1:6c:a1:1f:83:41:65:c6:9b:8c:02:cf:2a:
                    49:c2:b4:22:b1:20:e3:f1:f8:55:d5:f2:d9:d1:dc:
                    ea:a6:8d:f5:51:d0:a3:4e:b2:e6:43:f3:3e:ca:ce:
                    7d:b7:b0:4c:d5:69:e6:15:2e:63:c8:48:0a:3a:c1:
                    ff:5a:e9:3c:b0:b0:cd:88:e4:ab:8d:e3:cb:c3:ba:
                    c1:a6:51:04:f3:35:0c:34:1e:f5:e3:d7:de:11:4f:
                    d6:91:d8:a2:b4:f8:f5:0b:96:cc:a4:2b:80:61:05:
                    c5:82:60:3a:36:6d:00:41:b4:36:bf:22:7f:8e:04:
                    10:1c:58:bf:0a:c6:5c:28:d0:49:4d:17:ce:5e:b3:
                    95:70:6f:53:37:07:37:3c:10:ab:e4:a9:e7:1f:b5:
                    54:a7:69:b6:0d:de:f6:14:70:cb:ba:f8:c7:6b:65:
                    b1:73:03:5c:59:bd:3d:1d:6c:04:17:a4:8d:52:27:
                    5e:2d:2f:af:3a:d7:1c:23:82:0c:72:a5:dc:4d:83:
                    69:9f:32:00:6d:23:04:73:2f:3c:a2:c3:a7:63:88:
                    9f:c6:d0:68:e4:db:df:39:cf:de:1d:0f:b4:22:7a:
                    3e:d6:52:67:a2:19:a7:b0:7f:e4:ce:1e:61:e4:72:
                    51:e2:50:90:d6:80:d6:de:26:3c:4c:20:39:15:cc:
                    07:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A3:BD:2E:36:F9:10:D8:E6:C7:C1:67:F6:27:90:12:D2:5D:63:C1
            X509v3 Authority Key Identifier:
                keyid:93:34:E0:2D:E2:00:5A:1A:43:BC:FF:4D:2E:E0:88:0E:23:B1:E1:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30d20bef67088f83626615a8accfbafffad06334.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/214547d1f8b2790915dd3b14f5f7f1d2ca4cfc9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/30d20bef67088f83626615a8accfbafffad06334.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:3a:05:e7:92:de:89:d7:0e:2d:38:1c:a3:e4:b6:cf:85:1b:
         f5:32:f0:3e:bb:09:33:a4:bd:8d:87:20:f2:e8:29:85:f4:a2:
         f4:d9:2e:61:e7:3c:e9:0e:68:8f:51:e1:5c:39:38:78:66:fa:
         64:6d:b4:ca:75:17:da:ab:36:c4:78:01:87:ed:ec:35:65:38:
         29:0d:93:b1:5c:02:8b:b9:c6:cc:64:a6:6f:2b:3f:29:34:a7:
         c5:68:5c:1a:a1:5a:ca:d0:04:3e:42:42:2a:60:46:dc:cb:be:
         6b:d8:73:96:d1:5b:71:f1:71:cf:9c:e8:48:a2:5f:20:27:b8:
         5e:39:b0:7f:60:4a:91:de:ee:93:87:75:d1:a2:e5:5f:e3:56:
         d6:66:2e:b3:f2:37:83:56:f2:6b:0f:b9:c9:82:60:62:3e:a7:
         ee:35:19:2b:61:5a:03:b2:7a:11:ee:d9:1c:a6:38:4c:91:0e:
         af:61:e8:58:03:85:ae:0e:2e:71:99:27:af:77:9c:26:dc:1f:
         7e:9d:9c:df:48:73:f4:83:42:59:c7:2e:7b:0c:9a:11:7d:c3:
         77:6c:b4:a6:9c:6d:97:31:f8:e5:de:33:ec:bf:d6:91:71:7b:
         e8:9f:34:98:09:a4:f7:ea:9b:01:a3:67:ea:e3:90:6c:02:f0:
         04:7f:b4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----