Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/2d39285b61d0ad4efc3d9abd53342e6dcbd202f6.roa
File:                     2d39285b61d0ad4efc3d9abd53342e6dcbd202f6.roa (raw, json)
Hash identifier:          ho0VcGMQAqSW/WuNf0DUPjnnQXcsoVb0vWkODmdow7w=
Subject key identifier:   C8:8A:06:D3:6D:E7:3C:A1:27:41:9B:05:78:5A:92:06:97:27:7D:45
Certificate issuer:       /CN=665130a1c940d46872c6be287d312bbd14fb8bd7
Certificate serial:       1FA5A7
Authority key identifier: 46:0E:34:67:31:F8:0B:24:98:6C:DE:01:D4:60:13:3A:B0:2D:60:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/665130a1c940d46872c6be287d312bbd14fb8bd7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/2d39285b61d0ad4efc3d9abd53342e6dcbd202f6.roa
Signing time:             Fri 24 Mar 2023 08:30:22 +0000
ROA not before:           Thu 23 Mar 2023 08:30:21 +0000
ROA not after:            Sat 22 Mar 2025 08:30:21 +0000
asID:                     52419
IP address blocks:        200.31.241.0/24 maxlen: 24
                          200.31.242.0/24 maxlen: 24
                          200.31.243.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2074023 (0x1fa5a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665130a1c940d46872c6be287d312bbd14fb8bd7
        Validity
            Not Before: Mar 23 08:30:21 2023 GMT
            Not After : Mar 22 08:30:21 2025 GMT
        Subject: CN=2d39285b61d0ad4efc3d9abd53342e6dcbd202f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b8:19:b5:21:a8:68:ee:97:57:4e:d1:8f:a1:
                    dd:85:df:d1:11:c3:bf:2d:04:6d:86:14:7f:66:bc:
                    ae:6c:92:99:09:79:6c:8d:d4:b1:85:31:26:d3:cd:
                    f5:a0:26:65:cd:f2:af:05:90:ef:26:19:14:4b:05:
                    52:b0:dd:32:fa:ec:fc:0d:2f:57:5f:17:ce:30:1b:
                    73:4c:dc:0f:2e:cf:0e:7d:f5:70:22:30:cf:52:77:
                    4c:af:ca:88:cd:ce:6f:9d:d9:d6:0b:55:9f:6a:8f:
                    7d:12:47:80:28:c7:e7:d8:85:5a:38:9e:9f:9c:bd:
                    64:97:bb:89:95:aa:73:85:4d:0e:40:f1:7d:35:15:
                    4c:7a:61:de:45:0b:76:0b:e9:da:e0:80:81:73:67:
                    4e:05:35:2e:36:b1:69:d9:85:04:3b:ff:9a:91:dc:
                    ec:f8:c6:7a:a4:4c:0d:14:c7:03:fd:12:66:fc:40:
                    0c:51:d1:cb:b5:76:ea:65:c1:c4:cf:1b:4b:07:a8:
                    2a:da:c2:81:02:ee:27:b5:5b:7e:8d:29:4f:34:bc:
                    b9:e3:ce:ee:d5:ea:ec:41:e1:62:5c:01:9a:52:1a:
                    ce:25:03:9a:12:4e:eb:c3:5f:67:7a:cd:63:ca:a1:
                    57:dc:61:2e:b4:79:83:15:2c:ca:cc:eb:c3:aa:7b:
                    bd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8A:06:D3:6D:E7:3C:A1:27:41:9B:05:78:5A:92:06:97:27:7D:45
            X509v3 Authority Key Identifier:
                keyid:46:0E:34:67:31:F8:0B:24:98:6C:DE:01:D4:60:13:3A:B0:2D:60:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/665130a1c940d46872c6be287d312bbd14fb8bd7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/2d39285b61d0ad4efc3d9abd53342e6dcbd202f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/665130a1c940d46872c6be287d312bbd14fb8bd7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.31.241.0-200.31.243.255

    Signature Algorithm: sha256WithRSAEncryption
         0f:35:ea:14:a3:48:05:c3:02:56:0a:ff:82:88:ca:e4:cf:5b:
         19:af:07:60:9b:89:bc:fd:3f:a2:c7:3b:b0:82:72:04:50:02:
         93:bb:5e:d5:9d:f6:13:25:ee:3f:ba:05:5d:99:f0:f0:62:7a:
         fd:b6:46:c7:1b:13:4c:87:81:93:48:5a:3b:7b:3a:ef:bd:b4:
         b7:b9:1e:2f:9d:67:db:7c:d2:ca:a2:6d:a7:0e:a8:cf:7a:e1:
         2b:cb:e6:80:4d:bc:95:1f:d3:8c:e5:20:b0:68:ea:38:66:fd:
         6a:d3:23:fd:85:0a:3f:fd:e7:2e:9d:43:08:6a:53:f2:d0:7c:
         17:81:1a:d9:5b:0a:b2:4b:3a:c0:c9:a2:68:bc:57:0b:42:c2:
         f6:c9:aa:1f:b1:8d:90:df:df:8a:81:a7:88:12:41:75:19:41:
         5c:1e:9d:e7:8b:99:20:40:7e:09:1b:56:55:e7:50:58:cc:f4:
         e2:d2:bd:87:b9:02:81:a5:8b:a0:a6:7e:e8:b8:32:54:5b:53:
         5d:ce:bd:0f:45:b1:13:aa:6f:a1:b5:28:50:40:2b:b5:0c:4f:
         09:49:ed:32:4d:36:b0:3e:23:66:70:06:62:93:62:8f:1e:fe:
         a2:8f:ad:c4:c5:38:8b:80:64:fd:5d:0e:4c:fd:2e:3b:8f:1d:
         e4:2c:cb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----