Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/c0a5a44ea80b1850b086c76ac637cfd29d3b1960.roa
File:                     c0a5a44ea80b1850b086c76ac637cfd29d3b1960.roa (raw, json)
Hash identifier:          OqfY6rhtRA2TmE0xZZK0OItvhjQa4WtAmBmjKkingyM=
Subject key identifier:   27:C1:29:D6:D0:02:0F:8B:6E:15:C2:BE:74:9B:FD:A8:CF:7F:34:70
Certificate issuer:       /CN=665130a1c940d46872c6be287d312bbd14fb8bd7
Certificate serial:       0DFCED
Authority key identifier: 46:0E:34:67:31:F8:0B:24:98:6C:DE:01:D4:60:13:3A:B0:2D:60:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/665130a1c940d46872c6be287d312bbd14fb8bd7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/c0a5a44ea80b1850b086c76ac637cfd29d3b1960.roa
Signing time:             Wed 24 Mar 2021 22:49:43 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     52419
IP address blocks:        200.31.241.0/24 maxlen: 24
                          200.31.242.0/24 maxlen: 24
                          200.31.243.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 916717 (0xdfced)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665130a1c940d46872c6be287d312bbd14fb8bd7
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=c0a5a44ea80b1850b086c76ac637cfd29d3b1960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bf:55:a9:15:34:e1:12:ba:b1:c1:2f:8f:d5:
                    59:fe:db:53:7e:4e:da:93:40:8a:4e:f2:81:2f:fe:
                    63:3b:4e:20:34:3d:9b:6d:34:4a:eb:cb:8c:60:af:
                    88:90:8d:fd:d8:1f:2d:01:c4:3f:11:d5:c6:9a:04:
                    8f:9d:72:47:d4:68:5f:5c:0a:ce:34:a9:68:37:ab:
                    71:1f:21:c3:99:07:39:6e:fb:69:23:7a:c1:72:0f:
                    ef:f5:2a:e6:66:34:46:3b:8e:d2:24:9d:3f:da:07:
                    52:49:c6:47:1c:60:07:38:3e:79:a8:e6:c0:c5:80:
                    b0:78:52:5f:29:09:0a:cb:63:b5:67:dc:da:35:ad:
                    59:3d:05:82:94:78:84:3f:80:f3:c9:ae:c9:53:8f:
                    c9:1a:3f:44:a5:03:00:2d:dc:62:a5:80:29:a3:cb:
                    e9:7f:e3:3f:57:d6:77:65:f3:3a:92:99:e2:76:91:
                    e5:36:d9:ec:11:81:b1:7d:2d:98:7b:9c:32:e4:92:
                    55:59:1a:3c:23:4e:1a:5a:7d:a0:9b:54:e7:6f:c2:
                    14:8a:a6:b7:e3:6c:e7:4d:50:ac:5a:13:1d:67:a7:
                    ee:6a:16:68:23:04:70:13:89:4a:d3:67:0e:4f:89:
                    03:31:c5:9c:eb:cc:01:47:a5:20:12:07:56:d3:9f:
                    f4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C1:29:D6:D0:02:0F:8B:6E:15:C2:BE:74:9B:FD:A8:CF:7F:34:70
            X509v3 Authority Key Identifier:
                keyid:46:0E:34:67:31:F8:0B:24:98:6C:DE:01:D4:60:13:3A:B0:2D:60:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/665130a1c940d46872c6be287d312bbd14fb8bd7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/c0a5a44ea80b1850b086c76ac637cfd29d3b1960.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/665130a1c940d46872c6be287d312bbd14fb8bd7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.31.241.0-200.31.243.255

    Signature Algorithm: sha256WithRSAEncryption
         35:b4:3c:ce:23:f4:01:d4:b6:a6:6e:5f:dd:50:04:d6:9c:e7:
         d7:0d:cd:11:61:81:3a:cb:52:31:9f:39:9c:fc:6c:b4:0c:0c:
         11:b2:09:49:f7:cf:05:08:0f:f0:3b:aa:8d:ac:6d:ef:ec:7e:
         d8:53:0d:3b:d9:62:a3:93:b4:8a:25:0d:93:78:bb:25:c0:ab:
         de:a2:39:7c:45:7b:36:3e:a9:cc:84:89:0d:0d:8a:3f:b9:23:
         3d:28:df:39:d6:f7:9f:3d:6f:b9:12:c2:e5:9e:47:ea:1b:f8:
         ee:34:5e:18:2f:ed:3a:db:90:9c:4d:6b:e7:41:63:72:4a:62:
         97:e5:6b:14:55:87:33:b6:b5:00:9d:2e:06:23:49:93:7a:20:
         11:f5:ef:fc:8b:be:e5:b0:bf:fe:bd:6c:01:71:78:00:c5:ed:
         3e:27:c4:7f:1f:30:cd:1b:b9:6a:e7:ea:32:ee:ad:23:98:cf:
         ee:ac:12:fb:da:6a:2c:9c:76:30:e3:81:34:17:b1:5e:af:3a:
         22:bf:81:d0:ee:7b:8d:5f:e2:20:5b:2d:c4:22:92:57:ab:80:
         f7:2b:c2:14:2e:b4:0a:6a:cc:3f:9d:78:8e:eb:a8:51:a0:db:
         d8:50:78:a8:e1:15:dc:bb:06:66:c4:69:df:a6:1e:d2:70:8b:
         5b:3b:8a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----