Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/3639d3dbaac1600b8c733c2b3e740317dbdbe909.roa
File:                     3639d3dbaac1600b8c733c2b3e740317dbdbe909.roa (raw, json)
Hash identifier:          FfBY2wzJCG3zDQ0+htc3sBJ62+A1aZNKbKzrS0FoaWk=
Subject key identifier:   D9:C7:AA:52:23:94:19:B7:D3:EE:B7:C8:16:0F:CF:7B:C8:4C:F9:34
Certificate issuer:       /CN=138405134343f63286b605fe9165839fd04a4252
Certificate serial:       0D56BD
Authority key identifier: 13:F4:92:3E:90:2F:4B:52:42:C1:18:1F:7D:58:FF:6F:88:EF:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/138405134343f63286b605fe9165839fd04a4252.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/3639d3dbaac1600b8c733c2b3e740317dbdbe909.roa
Signing time:             Wed 24 Mar 2021 14:41:26 +0000
ROA not before:           Wed 24 Mar 2021 14:41:26 +0000
ROA not after:            Tue 24 Mar 2026 14:41:26 +0000
asID:                     3549
IP address blocks:        200.0.30.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 874173 (0xd56bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=138405134343f63286b605fe9165839fd04a4252
        Validity
            Not Before: Mar 24 14:41:26 2021 GMT
            Not After : Mar 24 14:41:26 2026 GMT
        Subject: CN=3639d3dbaac1600b8c733c2b3e740317dbdbe909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:98:29:a0:95:14:70:19:5d:6e:54:f8:36:10:
                    22:5a:7e:62:60:e2:33:16:a6:a8:58:e1:07:e2:d0:
                    6f:8b:9a:5d:71:c5:97:21:fe:2c:fe:ec:17:ab:4a:
                    1c:7f:c8:d4:9c:65:5a:18:0d:b8:2c:38:46:50:44:
                    83:0a:33:a4:97:86:6a:6a:84:e9:df:b2:e7:49:eb:
                    ab:79:35:91:1c:15:6e:00:4d:59:96:a6:33:b3:03:
                    75:fc:13:2a:dd:75:03:c2:a9:13:23:31:bd:cc:27:
                    7b:d2:81:1f:0f:d4:db:84:1f:e8:3d:a0:0b:39:a4:
                    87:d9:6b:24:c8:98:64:fd:28:06:4f:ad:f2:63:27:
                    1b:00:ca:5e:09:ee:1f:ac:7b:ba:bf:ef:3f:8f:cd:
                    97:a5:21:7c:59:2d:01:43:d0:44:fc:13:2b:dc:a2:
                    02:db:7f:da:04:8d:42:72:9f:a7:63:3e:e3:f0:8d:
                    47:50:16:b8:f4:ef:24:50:29:49:df:f6:63:6d:fc:
                    b3:05:8d:31:fc:19:91:75:35:a8:dc:08:0f:2f:8c:
                    13:9a:c4:12:a6:c5:9f:35:5a:fc:82:a8:ae:f0:b1:
                    8f:d0:d4:7c:9b:2f:2c:06:06:fc:9e:15:df:fd:cc:
                    42:96:da:db:58:70:ef:f6:2f:a1:8b:e9:f1:6a:d0:
                    b0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C7:AA:52:23:94:19:B7:D3:EE:B7:C8:16:0F:CF:7B:C8:4C:F9:34
            X509v3 Authority Key Identifier:
                keyid:13:F4:92:3E:90:2F:4B:52:42:C1:18:1F:7D:58:FF:6F:88:EF:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/138405134343f63286b605fe9165839fd04a4252.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/3639d3dbaac1600b8c733c2b3e740317dbdbe909.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/138405134343f63286b605fe9165839fd04a4252.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:fc:10:57:0f:e4:61:0d:82:e5:2e:f3:dd:99:cd:c8:f6:ff:
         d4:d6:1e:9c:45:37:ad:f8:1d:a6:40:fe:2b:f8:20:59:1e:6e:
         31:60:e0:60:6f:e0:a4:4f:1e:48:ae:88:2c:12:4e:7d:eb:7f:
         dd:51:28:a3:fb:c7:99:af:a3:71:02:8c:df:0a:78:23:47:e3:
         1d:99:b5:69:76:e6:96:4e:aa:e6:f8:17:b8:8e:01:dd:b2:3a:
         8d:64:d0:f3:47:8e:3e:bb:4b:35:2c:28:7c:fc:27:02:35:23:
         92:9b:4a:11:b4:94:e2:65:5a:a2:d2:53:47:f5:d5:f2:9f:a4:
         e0:f9:34:6b:41:ec:3c:89:f6:b8:5f:bd:ec:9a:c1:b0:9a:74:
         cd:84:97:37:6b:46:1f:c0:95:10:85:ed:bd:87:40:59:b5:4b:
         87:03:2a:9c:04:0d:f6:0a:06:3a:fb:b4:81:77:89:98:d0:aa:
         72:c1:14:9f:b1:50:2e:dd:b2:b3:25:a3:6d:14:f1:ac:81:b2:
         0b:ab:42:04:16:20:8e:f4:7a:06:cc:0b:3a:c8:c3:be:9c:b0:
         8e:c7:2d:0f:1b:74:71:fa:e3:79:b1:11:22:c1:73:fd:06:84:
         1a:bf:65:54:11:81:d3:fc:2b:41:0d:01:54:a5:52:6d:7a:f8:
         85:6d:2e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----