Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/550ca4549555bee0cec200302903f2c1a1ce995b.roa
File:                     550ca4549555bee0cec200302903f2c1a1ce995b.roa (raw, json)
Hash identifier:          BGiY7nxXJDDczQquheJMIjleAeMPWcmXJf+rR3MgpeY=
Subject key identifier:   EE:73:F4:BA:6B:33:41:DE:D2:A0:B4:F8:A4:1C:DB:2D:EA:E3:00:4A
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       1D3E74
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/550ca4549555bee0cec200302903f2c1a1ce995b.roa
Signing time:             Wed 02 Nov 2022 02:35:06 +0000
ROA not before:           Sun 09 Oct 2022 20:33:32 +0000
ROA not after:            Sat 12 Oct 2024 20:33:32 +0000
asID:                     28001
IP address blocks:        200.0.86.0/23 maxlen: 25

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1916532 (0x1d3e74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Oct  9 20:33:32 2022 GMT
            Not After : Oct 12 20:33:32 2024 GMT
        Subject: CN=550ca4549555bee0cec200302903f2c1a1ce995b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:34:f8:dc:e0:31:a2:1b:e0:91:98:2a:80:5c:
                    a7:05:f0:07:15:bb:14:5a:0a:a9:34:86:1f:86:98:
                    c7:d8:89:57:ce:c8:dd:78:ac:30:c8:88:ac:23:51:
                    b2:4c:28:18:86:4e:48:30:bf:61:e2:05:86:5d:19:
                    d7:b4:38:ba:7c:b9:55:0e:19:d8:33:4a:51:f9:e0:
                    21:d2:4c:df:08:c0:ea:ad:92:ed:a5:a8:b7:c9:df:
                    5e:77:68:0a:9f:41:c2:5f:51:74:34:e4:17:0a:c1:
                    21:2f:f5:53:41:b3:94:bb:02:18:74:68:1b:e6:22:
                    b9:b2:a1:4a:a7:9e:8f:e8:1d:e5:7c:ae:2c:96:d7:
                    23:ef:0d:c6:f3:3b:09:3e:61:e8:97:82:96:11:3c:
                    86:ee:c9:23:3e:83:0c:b2:70:ed:30:d0:b8:58:f4:
                    8e:4c:d0:6b:25:f9:b3:ab:d9:ef:20:4a:22:6d:e3:
                    02:f5:62:16:a8:ad:d9:40:1a:5a:cc:2f:d5:10:ee:
                    e7:89:14:d9:94:87:b4:ca:0e:54:c4:35:62:50:d5:
                    73:8b:1c:4e:cf:ac:8b:be:5d:f0:d1:2b:09:95:27:
                    cb:99:23:09:a8:33:56:23:77:95:71:0d:4d:e2:ee:
                    b4:17:20:cd:6c:bf:77:84:6e:f6:4d:07:d4:21:9d:
                    20:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:73:F4:BA:6B:33:41:DE:D2:A0:B4:F8:A4:1C:DB:2D:EA:E3:00:4A
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/550ca4549555bee0cec200302903f2c1a1ce995b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:7e:eb:0e:6d:48:58:cf:66:34:55:fb:02:16:4b:f1:82:14:
         89:90:3c:ac:c1:d5:ba:f9:d4:fb:12:5a:bc:43:41:c8:b0:e9:
         69:6c:ad:b2:18:10:fd:25:da:29:cb:96:62:6a:1d:f3:be:e7:
         23:e5:3e:cc:a8:a5:5d:c2:e8:ac:9e:9e:49:f6:a1:54:f3:50:
         83:a4:6c:75:92:0f:f8:a5:a3:db:7f:3a:69:89:43:6d:4a:f5:
         47:50:28:e7:e3:ef:af:69:c1:4b:58:ec:68:ff:b9:e1:76:a8:
         b5:1c:7a:8d:03:02:b2:6f:74:83:42:62:2b:c6:b4:72:d4:f0:
         f8:e5:61:dc:79:1c:db:a1:fa:6b:78:f8:a6:ef:99:8c:ff:8b:
         fb:88:2c:b1:fc:b6:52:e7:77:d1:9b:0f:28:d9:bd:f1:62:f5:
         f9:21:a0:4a:03:3b:40:b9:a2:ec:1e:40:bd:19:41:ab:89:9f:
         98:35:e7:50:30:d2:1c:de:0f:c0:5f:0d:27:b1:09:2a:10:99:
         3a:02:4d:42:f1:18:82:9e:05:63:f8:60:72:c9:0d:11:f0:ae:
         3f:c5:39:dd:85:16:e2:c8:b8:17:d7:4f:a4:f3:16:63:22:8f:
         53:24:6b:26:7c:95:85:ee:aa:a0:b4:cf:3c:ca:63:a5:97:2b:
         d0:d5:62:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----