Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/48224df2165e25c22c070df445d95622f0b35c5f.roa
File:                     48224df2165e25c22c070df445d95622f0b35c5f.roa (raw, json)
Hash identifier:          3XJyqUt6U4KepSWMVZOwQFxuOQUksZp7rlPbkNqf6xM=
Subject key identifier:   26:3C:FE:4A:BF:E2:7F:98:0B:26:06:37:5E:E0:7A:66:0B:10:86:2C
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       0DAB58
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/48224df2165e25c22c070df445d95622f0b35c5f.roa
Signing time:             Wed 24 Mar 2021 14:40:23 +0000
ROA not before:           Wed 24 Mar 2021 14:40:23 +0000
ROA not after:            Tue 24 Mar 2026 14:40:23 +0000
asID:                     263792
IP address blocks:        200.7.201.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895832 (0xdab58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Mar 24 14:40:23 2021 GMT
            Not After : Mar 24 14:40:23 2026 GMT
        Subject: CN=48224df2165e25c22c070df445d95622f0b35c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:85:e7:82:c1:e8:79:81:e6:2f:d8:2e:3a:ca:
                    82:21:67:bd:09:7c:f5:86:42:08:d6:99:2b:6f:36:
                    7e:34:47:1d:a4:df:44:21:c0:6c:f3:19:ed:6c:81:
                    98:ab:a2:e9:a2:ad:24:cd:97:cb:fa:87:b2:5b:99:
                    bc:67:2d:66:3a:f5:6b:60:d6:82:ee:62:8c:76:4c:
                    c1:76:ec:87:20:b2:67:4f:ff:93:18:70:55:4b:b9:
                    68:b3:6f:19:7f:de:7a:d3:e0:e2:bd:14:d1:ee:b2:
                    47:82:fe:32:90:95:c5:2e:a7:31:ca:3a:aa:bb:b2:
                    d2:67:58:2e:05:7b:11:aa:fb:46:78:5e:aa:e4:e4:
                    5d:36:d1:a8:3c:02:de:71:db:36:ce:d6:80:c5:8d:
                    fa:bb:10:40:a0:5d:da:01:cc:fb:90:81:b8:15:e9:
                    20:9f:ec:3c:53:0e:93:91:0f:76:71:e6:f4:4d:21:
                    4f:38:3a:f0:13:a3:2b:36:a6:f7:f5:c7:f1:47:79:
                    a4:9d:02:bb:bc:3f:bc:07:71:ae:ec:fc:4b:06:e4:
                    9d:75:7f:4f:a9:af:ef:80:88:53:31:5a:0f:01:b9:
                    0d:1b:4a:94:47:05:3d:a1:95:49:f7:b3:7a:7f:77:
                    da:c1:a8:c5:38:e3:b2:8e:1f:83:62:e7:a2:7a:9c:
                    71:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3C:FE:4A:BF:E2:7F:98:0B:26:06:37:5E:E0:7A:66:0B:10:86:2C
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/48224df2165e25c22c070df445d95622f0b35c5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:f1:c1:5b:23:1d:17:a1:0f:b2:93:25:fe:2c:05:b6:d3:d0:
         87:b1:bf:b1:5e:ee:3e:9e:77:e1:53:93:a4:59:68:2c:9e:d8:
         15:b2:c8:65:2a:1e:94:66:b2:7c:aa:5a:cc:aa:d2:28:17:ee:
         a5:16:a4:95:a8:74:ac:c3:74:bc:b8:6d:9d:4a:e5:21:69:db:
         68:83:ff:5a:16:7c:10:08:f0:ca:3c:f3:cb:fe:f6:6d:dd:0f:
         72:f6:7d:f0:d7:86:aa:c8:d9:2b:b7:b9:fb:1e:40:b9:09:4a:
         79:bd:9a:f5:b7:e7:ae:34:4f:9c:d5:f9:bb:ab:7b:a7:d1:19:
         7d:f1:5c:60:fe:95:0a:12:14:77:54:e7:31:ef:77:1a:8c:d6:
         ee:3c:05:ce:0e:7c:71:47:2d:f0:e1:55:4d:1f:09:3f:f4:e0:
         e6:8c:7e:79:7d:fa:fd:f0:da:81:45:58:36:9f:f8:00:59:63:
         a7:96:85:4a:fd:35:47:09:cb:1f:97:77:8d:b8:5e:47:2c:5a:
         47:8c:6e:90:a5:43:e6:96:7f:30:de:15:26:ff:68:f9:67:9a:
         f3:a4:fb:9f:aa:49:81:c4:87:22:fd:d6:42:89:34:3f:30:de:
         f7:db:9b:37:1a:0a:94:b5:bb:9b:9d:dd:6c:70:ab:aa:2a:22:
         bf:01:a2:f0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDatYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFi
ODEyZWVjZmNjMDFkMzhjNDQ0ZGJlYWU1MzIzNDY1MWFmOGM4NGQwHhcNMjEwMzI0
MTQ0MDIzWhcNMjYwMzI0MTQ0MDIzWjAzMTEwLwYDVQQDEyg0ODIyNGRmMjE2NWUy
NWMyMmMwNzBkZjQ0NWQ5NTYyMmYwYjM1YzVmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAg4XngsHoeYHmL9guOsqCIWe9CXz1hkII1pkrbzZ+NEcdpN9E
IcBs8xntbIGYq6Lpoq0kzZfL+oeyW5m8Zy1mOvVrYNaC7mKMdkzBduyHILJnT/+T
GHBVS7los28Zf9560+DivRTR7rJHgv4ykJXFLqcxyjqqu7LSZ1guBXsRqvtGeF6q
5ORdNtGoPALecds2ztaAxY36uxBAoF3aAcz7kIG4Fekgn+w8Uw6TkQ92ceb0TSFP
ODrwE6MrNqb39cfxR3mknQK7vD+8B3Gu7PxLBuSddX9Pqa/vgIhTMVoPAbkNG0qU
RwU9oZVJ97N6f3fawajFOOOyjh+DYueiepxxRQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCY8/kq/4n+YCyYGN17gemYLEIYsMB8GA1UdIwQYMBaAFMVk0AydCQQDZ/TG
yoKXlo/kro9KMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWI4MTJl
ZWNmY2MwMWQzOGM0NDRkYmVhZTUzMjM0NjUxYWY4Yzg0ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNThhNzQ1MWYtMjYxNy00ZDBmLTllNzUtNmQyYWU5
Y2NmNTY2LzQ4MjI0ZGYyMTY1ZTI1YzIyYzA3MGRmNDQ1ZDk1NjIyZjBiMzVjNWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81OGE3NDUxZi0yNjE3LTRkMGYtOWU3NS02ZDJh
ZTljY2Y1NjYvYWI4MTJlZWNmY2MwMWQzOGM0NDRkYmVhZTUzMjM0NjUxYWY4Yzg0
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgHyTANBgkqhkiG9w0BAQsFAAOCAQEAA/HBWyMdF6EPspMl
/iwFttPQh7G/sV7uPp534VOTpFloLJ7YFbLIZSoelGayfKpazKrSKBfupRaklah0
rMN0vLhtnUrlIWnbaIP/WhZ8EAjwyjzzy/72bd0PcvZ98NeGqsjZK7e5+x5AuQlK
eb2a9bfnrjRPnNX5u6t7p9EZffFcYP6VChIUd1TnMe93GozW7jwFzg58cUct8OFV
TR8JP/Tg5ox+eX36/fDagUVYNp/4AFljp5aFSv01RwnLH5d3jbheRyxaR4xukKVD
5pZ/MN4VJv9o+Wea86T7n6pJgcSHIv3WQok0PzDe99ubNxoKlLW7m53dbHCrqioi
vwGi8A==
-----END CERTIFICATE-----