Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/766c17f99d9027b74291e5aa5dedbdef2b6f3781.roa
File:                     766c17f99d9027b74291e5aa5dedbdef2b6f3781.roa (raw, json)
Hash identifier:          /rWbZil+OrhGCyHHNm29jOmqQ9Uh7NyS3P3EEh5ZsYY=
Subject key identifier:   BB:8C:D7:4B:CF:67:63:10:74:7B:9D:55:FF:44:EF:9A:0F:12:8C:71
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       1CBD20
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/766c17f99d9027b74291e5aa5dedbdef2b6f3781.roa
Signing time:             Wed 12 Oct 2022 20:34:52 +0000
ROA not before:           Tue 11 Oct 2022 20:33:32 +0000
ROA not after:            Sat 12 Oct 2024 20:33:32 +0000
asID:                     28000
IP address blocks:        200.0.86.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1883424 (0x1cbd20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Oct 11 20:33:32 2022 GMT
            Not After : Oct 12 20:33:32 2024 GMT
        Subject: CN=766c17f99d9027b74291e5aa5dedbdef2b6f3781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5f:25:78:af:6b:f5:97:0b:f7:1b:ae:94:2e:
                    c2:17:1b:cb:79:5d:fb:8a:ed:c6:c1:8e:1d:6b:fc:
                    57:33:c3:4e:db:87:98:63:b4:71:87:ad:d7:a0:3f:
                    ad:c4:8e:3f:02:b8:6a:69:de:cd:1f:20:71:b1:a1:
                    84:9a:e6:87:7d:26:10:e9:84:4a:98:56:f2:3f:88:
                    63:4d:ba:32:1c:77:d9:78:c2:ca:2e:e5:98:3b:1a:
                    44:df:a1:49:7a:03:fb:0c:6b:b7:ab:5b:70:a6:5e:
                    b6:30:6e:b3:81:99:95:bf:cd:9c:85:66:3c:d2:d4:
                    57:04:20:96:85:f9:e4:28:61:31:94:ba:1f:7b:2b:
                    fc:64:fe:94:0e:e9:07:ec:74:dd:a3:32:80:aa:39:
                    21:4d:f7:9e:80:65:ac:ff:88:d7:26:d8:f7:e3:59:
                    4f:b7:51:62:16:0b:e7:c4:90:49:f8:a5:8d:0a:83:
                    1b:82:ea:a4:e6:44:51:01:1d:59:a7:9a:cb:b3:7f:
                    44:f6:26:05:30:22:02:71:20:92:a0:dc:4b:19:f9:
                    66:7e:87:41:2e:f6:ce:1e:a6:e4:ec:1b:33:64:67:
                    9e:44:96:28:50:33:5c:95:36:c0:ec:46:8e:33:f7:
                    68:b9:ec:11:35:e9:c6:b2:1f:a4:ca:68:50:f7:83:
                    7d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:8C:D7:4B:CF:67:63:10:74:7B:9D:55:FF:44:EF:9A:0F:12:8C:71
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/766c17f99d9027b74291e5aa5dedbdef2b6f3781.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:87:a3:9d:f4:99:52:49:2a:5f:0d:a2:cc:24:a7:b3:bf:53:
         7e:51:eb:25:9d:ea:c5:1b:a8:32:04:7f:34:6a:0c:55:8d:c8:
         f2:8c:8b:23:53:8d:b6:ed:49:01:0d:ae:d6:07:17:4a:b9:d8:
         f6:e9:b5:7f:bb:cf:48:ed:92:7e:4f:64:e9:aa:26:0d:37:b1:
         2d:e0:12:09:21:a1:ee:bf:d9:91:d5:8c:53:84:b0:17:60:58:
         11:35:81:8e:a1:b8:8c:00:fa:ae:66:77:e2:13:f9:2c:c4:33:
         db:65:b4:4a:67:7c:60:fa:c0:1f:b3:3a:a2:7d:55:ac:17:59:
         13:35:53:8d:d5:b7:eb:9f:15:fd:4b:d4:b3:c7:98:2b:a4:66:
         72:b7:18:9f:27:ab:97:40:e0:6f:99:91:41:9c:33:53:40:d1:
         0d:17:ff:11:ac:1c:c9:61:c3:bb:b7:63:68:a2:66:d8:ea:b3:
         a1:59:fa:bc:46:41:46:e8:ae:ff:55:fb:03:d4:4f:56:1a:12:
         b2:30:9e:53:d3:7f:9a:01:9f:59:95:e6:7e:e6:b6:e3:d4:51:
         47:0c:2b:72:4d:fa:13:a7:58:a7:0b:75:af:7c:ad:27:36:c0:
         37:70:67:f2:9c:35:93:dc:20:9f:b4:3e:48:bf:1e:9b:95:1a:
         02:e6:e8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----