Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/7a4c0fcd6b26e29b2e377cafc379858f7576d863.roa
File:                     7a4c0fcd6b26e29b2e377cafc379858f7576d863.roa (raw, json)
Hash identifier:          gWrV8mpF9t1vTjmmtSUrCZtFMQgvsX4MxBE4+cyrZl8=
Subject key identifier:   EB:C6:BC:6C:2D:CF:15:87:12:10:73:09:D6:56:46:36:C7:CE:19:5A
Certificate issuer:       /CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
Certificate serial:       0D28A2
Authority key identifier: AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/7a4c0fcd6b26e29b2e377cafc379858f7576d863.roa
Signing time:             Wed 24 Mar 2021 14:43:09 +0000
ROA not before:           Wed 24 Mar 2021 14:43:08 +0000
ROA not after:            Tue 24 Mar 2026 14:43:08 +0000
asID:                     28509
IP address blocks:        201.174.200.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862370 (0xd28a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
        Validity
            Not Before: Mar 24 14:43:08 2021 GMT
            Not After : Mar 24 14:43:08 2026 GMT
        Subject: CN=7a4c0fcd6b26e29b2e377cafc379858f7576d863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ba:e8:e1:58:d1:f2:94:7e:df:ef:f6:c3:cf:
                    aa:32:c8:cb:6f:72:f5:a9:73:c6:6b:6b:77:85:98:
                    89:2a:14:c7:f6:50:7a:cf:36:b6:52:0b:13:66:c5:
                    b4:be:c1:fa:cf:e2:4f:87:9c:1e:c2:3c:b3:0a:0c:
                    93:b9:14:0b:80:7f:70:a2:3c:dd:39:78:5b:7a:8b:
                    24:9c:11:8d:1d:59:8b:4e:f4:13:01:34:8a:b5:ff:
                    6a:ce:58:82:72:e8:0d:70:3e:9d:b4:ae:19:7c:4b:
                    76:ef:31:21:37:97:56:70:b9:db:20:8a:46:ea:31:
                    0b:2d:74:eb:7b:f4:ac:55:16:74:27:8b:65:27:48:
                    ec:43:e3:9e:ba:23:4a:b8:26:2c:9c:b3:c2:87:2e:
                    0c:2e:65:85:89:c6:0f:f1:0a:18:f8:fe:cf:89:3a:
                    48:81:54:b1:fc:fe:df:ac:58:c0:aa:d2:65:fa:78:
                    06:b2:d1:29:4a:cf:40:41:a0:51:ab:a7:4c:25:26:
                    5e:d5:51:fd:cc:9e:a7:56:44:a0:cf:f0:96:bc:20:
                    7e:81:17:87:95:a6:21:e3:99:99:c0:64:51:5d:6f:
                    5f:24:18:13:bf:25:b4:79:0e:2e:12:9a:bc:34:82:
                    34:b6:2b:77:57:37:bf:45:59:38:b9:a0:b1:53:61:
                    9c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C6:BC:6C:2D:CF:15:87:12:10:73:09:D6:56:46:36:C7:CE:19:5A
            X509v3 Authority Key Identifier:
                keyid:AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/7a4c0fcd6b26e29b2e377cafc379858f7576d863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a4:a1:9c:5e:47:2c:10:44:4f:53:da:c3:c9:1e:1e:8c:5f:06:
         d8:83:a0:cd:dc:e2:4f:3e:f9:62:88:5d:7e:2c:95:45:e1:90:
         84:9a:57:e4:f0:f8:18:d4:10:94:45:b6:37:4a:ac:e7:cf:2a:
         d3:91:0c:0e:f7:e6:33:57:85:d0:e4:9d:aa:96:fb:a4:60:3d:
         ac:53:34:ad:d3:29:36:0a:33:f2:6f:01:25:79:71:77:fc:f0:
         20:94:20:4e:82:83:9a:fa:5b:30:4f:f1:00:4c:40:59:c4:06:
         16:99:72:a1:4f:78:74:e9:64:01:a9:f1:23:4f:26:89:17:17:
         2e:fa:1a:9b:32:eb:15:9f:0c:7a:99:3b:94:c8:59:c1:29:4d:
         24:68:6d:4d:01:e9:79:68:86:df:b8:65:ed:b1:de:d0:e3:32:
         00:be:6b:e3:02:93:e4:f8:25:0e:84:d5:33:d2:3d:b1:99:f7:
         06:95:1a:8a:f6:57:b7:b3:c2:b1:a1:a2:14:41:3b:33:59:c7:
         52:3d:21:e2:fd:ea:d5:e5:dc:4a:c8:6a:e0:d2:df:4a:0d:5d:
         84:6b:56:75:72:d3:24:47:eb:b5:e2:23:cf:f8:1e:88:7a:36:
         50:98:58:5e:54:e0:27:34:b3:60:d1:a0:9d:f1:da:ce:f1:07:
         c1:4d:02:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----