Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/988a925cfbc7d8b8ccf51df586503aefc345bb66.roa
File:                     988a925cfbc7d8b8ccf51df586503aefc345bb66.roa (raw, json)
Hash identifier:          JaxkTBpDdUNf+khKP3UHydmhS9fLbjhRm4B/wyJVlic=
Subject key identifier:   17:58:DC:39:41:EE:11:8F:8F:A1:F4:78:00:EF:08:75:C9:06:9D:79
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       1EF164
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/988a925cfbc7d8b8ccf51df586503aefc345bb66.roa
Signing time:             Fri 13 Jan 2023 18:07:56 +0000
ROA not before:           Thu 12 Jan 2023 18:03:24 +0000
ROA not after:            Mon 13 Jan 2025 18:03:24 +0000
asID:                     19114
IP address blocks:        200.24.217.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2027876 (0x1ef164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Jan 12 18:03:24 2023 GMT
            Not After : Jan 13 18:03:24 2025 GMT
        Subject: CN=988a925cfbc7d8b8ccf51df586503aefc345bb66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:29:a9:10:b7:27:ec:ad:8b:42:cb:03:81:1c:
                    62:0d:2a:1b:f2:40:4f:b2:7d:4c:73:c7:d4:04:6a:
                    14:2d:32:3e:75:5d:60:56:ed:48:12:1c:2c:5c:11:
                    94:0b:03:48:8b:7a:1d:56:ae:90:c4:07:9e:7c:8c:
                    2a:54:c4:9f:23:e4:d5:85:48:3b:66:d3:9b:2a:ec:
                    31:4c:07:54:e3:30:c1:49:3b:77:a1:de:42:c3:c0:
                    60:75:e7:2e:8e:ae:f9:34:3e:c5:8f:24:40:12:79:
                    1e:9e:3c:a1:e5:1a:45:4d:9c:61:47:bc:39:5e:d5:
                    7d:c0:ef:f8:d2:b4:d7:49:c5:84:69:b2:e4:af:68:
                    9b:86:29:41:42:07:64:50:7b:d0:a2:8a:c6:9f:74:
                    69:d1:56:3b:3c:b0:75:e4:2c:1e:88:2e:16:d4:18:
                    46:b9:f5:9a:28:35:cd:44:60:95:9f:2f:4a:41:f7:
                    5f:ee:47:7f:76:ea:af:33:37:96:06:af:dc:3c:47:
                    7e:fb:c9:5c:f2:0a:e8:89:21:7a:b6:d5:f3:27:19:
                    75:80:87:e1:14:12:a4:ca:4a:a6:14:ed:0c:86:a6:
                    23:d7:8c:c2:e8:81:41:88:6c:21:39:2e:e9:b9:94:
                    86:8f:20:ea:bc:d9:c2:0b:b4:19:a4:b8:65:22:67:
                    c6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:58:DC:39:41:EE:11:8F:8F:A1:F4:78:00:EF:08:75:C9:06:9D:79
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/988a925cfbc7d8b8ccf51df586503aefc345bb66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:3a:9d:0e:24:ec:21:40:69:b4:52:2c:8a:94:c9:a1:d8:c6:
         ac:8d:e0:5e:9a:dc:cb:82:5f:02:1a:02:ad:60:21:c2:7e:f6:
         f9:a3:60:3e:ab:2d:fa:e0:c6:fa:df:a3:f0:21:e0:35:15:81:
         dc:f2:ab:42:d0:e2:5a:6f:97:75:6c:52:73:af:9d:85:ae:cc:
         f0:83:ef:f1:9d:e3:10:d9:19:65:e2:c4:90:d1:08:1b:55:86:
         7a:e1:92:d7:6a:61:c4:04:f8:cb:f0:5b:80:eb:48:c9:17:55:
         7e:f4:12:0a:61:81:ef:78:56:ab:fe:62:27:6a:91:2e:e1:e7:
         8b:97:69:9d:e2:85:26:2c:43:9b:a1:04:79:75:b7:04:1d:1a:
         01:ae:f3:af:75:da:8b:b1:29:4b:3a:6f:e5:60:bf:65:f8:48:
         a7:f2:8d:6e:ad:bd:d5:64:6e:f2:d3:61:59:bd:ff:62:55:cd:
         ab:d3:7b:57:b3:ca:15:72:91:34:52:b7:c4:65:cc:a4:b1:3e:
         48:78:e0:71:5a:d6:42:d1:ac:57:ce:d5:34:78:ba:78:d0:58:
         9d:cc:95:8d:d4:95:e8:67:10:d1:d4:05:ee:b1:22:b5:53:5c:
         d6:6a:99:eb:1b:cd:5f:ea:8f:b4:16:0c:3d:ba:0e:a8:18:68:
         a4:76:9c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----