Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6efe7cbf-b560-44ef-bfb8-aa5a5d58e638/449c34df6f22fd738abe298d5fd52187e24c938e.roa
File:                     449c34df6f22fd738abe298d5fd52187e24c938e.roa (raw, json)
Hash identifier:          bRxY4fIFWwgKUG7VBKelRLMjmE/7jlgrSA0Y3sBTql4=
Subject key identifier:   82:A2:88:D6:3D:70:2F:35:20:12:B6:C1:06:45:F9:02:B1:0D:D4:1F
Certificate issuer:       /CN=8dbdc246cceb1862805c4dbe107d7326b0ae88ef
Certificate serial:       0D6594
Authority key identifier: 1F:39:4B:B9:88:11:6E:B1:96:9D:65:DF:42:AD:11:B9:61:4B:E8:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8dbdc246cceb1862805c4dbe107d7326b0ae88ef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6efe7cbf-b560-44ef-bfb8-aa5a5d58e638/449c34df6f22fd738abe298d5fd52187e24c938e.roa
Signing time:             Wed 24 Mar 2021 14:32:47 +0000
ROA not before:           Wed 24 Mar 2021 14:32:47 +0000
ROA not after:            Tue 24 Mar 2026 14:32:47 +0000
asID:                     265708
IP address blocks:        200.85.136.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 877972 (0xd6594)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dbdc246cceb1862805c4dbe107d7326b0ae88ef
        Validity
            Not Before: Mar 24 14:32:47 2021 GMT
            Not After : Mar 24 14:32:47 2026 GMT
        Subject: CN=449c34df6f22fd738abe298d5fd52187e24c938e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d3:8f:a9:d9:63:fa:4b:c7:8b:03:b1:98:f1:
                    9d:0b:cc:db:44:49:5b:74:5c:fd:69:23:26:a0:58:
                    e8:51:4c:6f:d6:10:5e:f5:e0:47:12:04:6f:7e:c1:
                    41:d2:26:3b:3f:e1:00:1c:ef:50:09:7c:24:32:79:
                    ed:a7:80:89:76:5c:cc:c5:45:76:6c:f3:a4:5f:e7:
                    70:c0:2f:83:78:e6:34:4a:49:27:b8:2d:50:f6:68:
                    1c:d3:13:b7:64:97:ac:64:03:58:49:13:00:7b:13:
                    8a:78:e5:50:ba:5c:89:a1:b3:89:a6:8f:bd:54:8f:
                    73:9d:d3:38:89:c6:83:4d:fd:2f:65:e3:1c:49:8c:
                    ea:15:61:7b:24:17:2c:d3:fc:96:db:5a:50:95:48:
                    8c:53:3b:09:48:4d:7c:f2:bc:97:4a:93:23:2d:2b:
                    a5:32:df:b9:ed:fd:b7:b1:a3:3d:19:42:d8:50:e7:
                    37:c3:41:2f:87:d9:89:a2:d3:96:f5:f7:9d:3d:a6:
                    b4:fc:94:7b:2a:35:19:2d:51:14:c1:a6:2e:12:cc:
                    3c:b6:87:90:4a:b4:7b:0e:2b:fe:07:c6:63:d3:9d:
                    5e:cc:0d:c9:65:55:bb:b3:c4:b8:9f:04:71:f9:03:
                    ad:84:0b:24:4b:2a:9e:50:14:ef:cd:14:0b:bc:97:
                    59:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A2:88:D6:3D:70:2F:35:20:12:B6:C1:06:45:F9:02:B1:0D:D4:1F
            X509v3 Authority Key Identifier:
                keyid:1F:39:4B:B9:88:11:6E:B1:96:9D:65:DF:42:AD:11:B9:61:4B:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8dbdc246cceb1862805c4dbe107d7326b0ae88ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6efe7cbf-b560-44ef-bfb8-aa5a5d58e638/449c34df6f22fd738abe298d5fd52187e24c938e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6efe7cbf-b560-44ef-bfb8-aa5a5d58e638/8dbdc246cceb1862805c4dbe107d7326b0ae88ef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:49:bf:24:8e:4f:c3:a0:9c:8d:3f:c5:31:42:98:cb:b5:6c:
         e1:7a:5e:d6:5a:5f:50:d9:66:de:ce:c9:c8:a2:ca:b9:9d:47:
         9f:93:dc:8f:c2:2e:64:48:2a:71:e6:87:ac:6a:83:16:65:fd:
         24:5d:2b:4a:3d:65:2d:96:3e:01:21:a0:48:2a:d9:10:4d:ba:
         ef:5a:88:1f:9f:f4:03:e7:93:db:4b:35:72:cf:c1:d4:b9:83:
         2a:98:a2:82:43:7d:9c:7a:55:c8:48:c6:6a:66:90:93:07:ff:
         42:32:80:ea:79:25:e0:5f:55:52:5c:c5:f4:4c:76:3f:38:d8:
         17:23:c8:17:69:e6:2c:dd:70:3f:6c:c8:63:c6:99:94:b3:34:
         2d:c3:5b:ca:b6:4d:04:23:2b:10:e3:0f:45:47:37:85:be:1d:
         14:7b:8e:73:af:96:3a:fd:7f:76:af:f2:ae:40:04:2f:d8:36:
         0d:1f:25:12:f3:11:c9:c8:e7:91:c6:b1:0f:24:dd:c2:8f:6a:
         7b:76:6b:ab:82:c8:ea:6f:f6:bc:ae:b5:c1:fd:81:08:3f:28:
         df:68:78:af:0a:0e:70:68:a1:18:b8:58:be:4e:2e:d7:08:f3:
         36:9d:49:b1:81:be:e7:a1:ad:36:8d:97:7f:4e:db:2d:22:a0:
         89:70:45:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----