Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/a08c435f9cfbaadca51bad5d5c2f67b64038048e.roa
File:                     a08c435f9cfbaadca51bad5d5c2f67b64038048e.roa (raw, json)
Hash identifier:          GRoDB96REdIVmarf8Gduubxbn3O73T3GKiSg3xgagGE=
Subject key identifier:   2E:8A:9D:88:98:39:D4:C5:88:3C:B6:8C:FF:A3:2C:27:20:F8:AD:55
Certificate issuer:       /CN=a736ecb08742dd36c47f8758266a50eba82e7909
Certificate serial:       15EDD4
Authority key identifier: F6:EB:DC:97:F8:05:97:89:02:10:A8:21:FE:99:74:D8:A1:7F:F6:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a736ecb08742dd36c47f8758266a50eba82e7909.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/a08c435f9cfbaadca51bad5d5c2f67b64038048e.roa
Signing time:             Tue 05 Apr 2022 15:06:16 +0000
ROA not before:           Tue 05 Apr 2022 03:00:00 +0000
ROA not after:            Fri 05 Apr 2024 03:00:00 +0000
asID:                     264633
IP address blocks:        200.10.141.0/24 maxlen: 24
                          2801:11:1000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1437140 (0x15edd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a736ecb08742dd36c47f8758266a50eba82e7909
        Validity
            Not Before: Apr  5 03:00:00 2022 GMT
            Not After : Apr  5 03:00:00 2024 GMT
        Subject: CN=a08c435f9cfbaadca51bad5d5c2f67b64038048e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:89:6d:57:d7:4b:22:03:34:1c:91:cb:45:da:
                    f3:54:8d:9e:db:c1:61:21:4a:77:e8:40:9d:ed:1c:
                    c1:30:82:df:34:f0:08:2a:2b:c1:de:95:53:ee:01:
                    ee:73:30:e8:7a:5f:e8:12:2c:d8:33:95:81:90:f9:
                    95:ae:de:30:c4:8a:22:40:ec:c7:00:c5:13:7c:78:
                    9b:e6:ac:13:83:30:21:9d:d9:6e:9f:97:7e:42:dd:
                    3e:90:6e:36:ab:63:bd:d3:8a:65:41:35:81:bc:0f:
                    fc:2c:00:65:cc:b3:13:7c:b2:c1:0c:5f:c5:9d:ee:
                    43:53:68:2a:23:15:20:36:1f:cf:eb:7c:18:ac:51:
                    08:21:45:16:38:97:44:33:38:c1:40:b7:4f:d4:83:
                    f9:fc:23:c9:a7:21:17:1c:48:3b:f0:1c:6c:a4:e3:
                    51:6e:aa:5b:9b:22:04:0c:07:20:01:6e:d9:5b:49:
                    ea:9c:1a:43:c9:b5:04:16:a9:80:3a:d9:40:be:77:
                    90:14:7f:ce:ac:78:33:53:63:9e:fd:b2:4d:53:e0:
                    cd:ed:b5:b3:36:fd:8c:1f:47:0a:4c:cd:18:7e:8c:
                    a9:d0:a4:03:fa:29:89:55:93:a2:d1:f0:0f:2c:7f:
                    26:68:d7:da:84:71:b4:65:93:1b:c8:1b:21:30:a3:
                    1d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8A:9D:88:98:39:D4:C5:88:3C:B6:8C:FF:A3:2C:27:20:F8:AD:55
            X509v3 Authority Key Identifier:
                keyid:F6:EB:DC:97:F8:05:97:89:02:10:A8:21:FE:99:74:D8:A1:7F:F6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a736ecb08742dd36c47f8758266a50eba82e7909.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/a08c435f9cfbaadca51bad5d5c2f67b64038048e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/a736ecb08742dd36c47f8758266a50eba82e7909.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.141.0/24
                IPv6:
                  2801:11:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:c5:b3:e6:4e:95:a7:6a:88:fc:d3:99:c5:62:7d:25:c3:b0:
         d4:96:07:83:3e:15:96:a0:a3:94:f3:af:76:5c:0e:aa:e6:af:
         b6:50:6d:41:f8:59:b3:b1:3a:65:f2:c8:da:80:71:19:e3:af:
         67:cf:ac:0d:a7:f7:a2:18:af:9a:53:4c:94:70:f6:93:51:61:
         9a:09:75:f2:ad:8b:85:b3:a7:60:5a:a3:89:f1:08:f6:3a:e6:
         98:83:89:0d:f6:47:00:d2:da:a9:71:42:2f:05:fe:30:59:7b:
         d0:24:51:fa:ae:c1:f9:62:6b:97:42:13:32:d9:61:ca:c3:4e:
         cf:19:35:56:8d:fd:e0:a0:1e:29:0a:55:a0:5f:e9:aa:3e:f2:
         99:73:82:8f:a6:ea:db:ab:7b:3f:f9:0a:4e:1f:35:a9:44:b8:
         7b:0a:1c:9b:a7:50:86:2e:39:f9:78:06:d4:05:66:48:62:33:
         22:4e:9e:44:ae:e6:e4:c1:ad:11:7d:81:7d:f8:cd:4b:d2:1f:
         11:62:aa:56:1a:44:31:f7:55:f3:63:06:a9:27:b7:4b:b4:0a:
         9b:62:5e:03:e3:78:9f:a7:59:d3:21:5b:71:a6:a6:bc:bc:2f:
         8a:a4:dd:a6:60:99:9a:9a:9f:4b:90:cd:e1:99:c9:13:fe:65:
         4a:db:f0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----