Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/209b53e39940e3c51bb2e7d81580c9c2b02f346f.roa
File:                     209b53e39940e3c51bb2e7d81580c9c2b02f346f.roa (raw, json)
Hash identifier:          4Xc6mViPIWlHHSsM86Z8ZkPrpKuCvdioVIp1WGlq4uE=
Subject key identifier:   8B:62:EC:DB:00:46:7A:DE:12:DC:7D:3C:94:11:F9:1F:D9:31:BE:81
Certificate issuer:       /CN=2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2
Certificate serial:       171A8F
Authority key identifier: BB:C1:0F:CE:08:EE:32:4C:B3:F2:AF:7B:92:CA:EA:DA:A7:AE:3C:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/209b53e39940e3c51bb2e7d81580c9c2b02f346f.roa
Signing time:             Mon 14 Aug 2023 15:59:21 +0000
ROA not before:           Sun 13 Aug 2023 15:59:21 +0000
ROA not after:            Thu 14 Aug 2025 15:59:21 +0000
asID:                     197991
IP address blocks:        200.112.204.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1514127 (0x171a8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2
        Validity
            Not Before: Aug 13 15:59:21 2023 GMT
            Not After : Aug 14 15:59:21 2025 GMT
        Subject: CN=209b53e39940e3c51bb2e7d81580c9c2b02f346f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4c:94:45:22:38:74:24:42:d8:db:8a:76:37:
                    a4:4b:24:7e:72:ca:75:69:e3:e0:a0:88:8b:cd:92:
                    62:ba:7b:d2:de:34:b2:e9:ec:d1:ca:f6:48:4c:29:
                    1f:ea:cc:75:20:6a:db:dd:7c:73:94:05:eb:3f:1a:
                    00:b3:ac:82:2f:c7:cc:be:c5:89:60:fc:81:df:72:
                    93:2b:3b:62:b4:f9:9a:83:de:55:11:56:47:71:dc:
                    35:51:6e:6b:32:f5:05:61:6a:c0:fa:53:79:47:ac:
                    89:09:2e:32:e2:7b:05:d9:3a:7e:19:18:d0:5e:78:
                    40:8e:dd:e1:b5:9c:ba:50:78:61:3d:1e:c2:dd:9d:
                    a6:2e:eb:33:16:82:a9:f0:c3:3c:e4:9a:39:ba:29:
                    e9:21:17:4c:81:ba:a3:6d:cd:e6:40:72:b0:fb:72:
                    a8:c7:b6:be:1a:6f:55:4c:16:10:ef:40:49:39:ed:
                    f2:92:f5:95:70:bb:b7:a4:95:eb:6d:0c:eb:68:bf:
                    ac:b1:53:92:51:d9:23:94:be:c0:a2:1f:7c:10:29:
                    9d:81:4b:94:68:c9:6a:9b:51:f3:81:9a:12:0d:f1:
                    3c:ba:e6:ec:c1:76:1f:c6:74:56:f8:17:e9:62:9d:
                    4e:51:0d:0f:b2:46:fc:0d:96:85:12:5f:8e:72:5c:
                    89:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:62:EC:DB:00:46:7A:DE:12:DC:7D:3C:94:11:F9:1F:D9:31:BE:81
            X509v3 Authority Key Identifier:
                keyid:BB:C1:0F:CE:08:EE:32:4C:B3:F2:AF:7B:92:CA:EA:DA:A7:AE:3C:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/209b53e39940e3c51bb2e7d81580c9c2b02f346f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:71:e4:78:8f:be:f0:73:eb:88:2f:c3:5e:47:22:f7:9e:e1:
         e1:50:66:8d:81:7b:32:e7:3b:0a:f5:5d:06:a4:0b:14:c6:54:
         3f:52:b1:f9:a3:3e:bd:79:98:a6:0f:a3:5f:fb:75:70:ae:95:
         31:07:3f:6b:f0:aa:93:72:81:ba:98:10:f9:15:43:cd:24:b8:
         2f:75:a3:e7:e1:61:76:a3:0e:8f:e5:cb:4f:55:3c:50:d1:48:
         31:b1:b9:a6:02:23:fa:24:8c:31:99:df:3f:12:e8:14:c4:98:
         60:96:f3:f4:c4:60:6e:6c:53:dd:ac:2b:29:ba:42:5a:b2:69:
         c7:42:42:fc:26:72:40:fb:da:d0:35:cf:1a:05:95:81:8e:30:
         14:03:04:f3:45:8b:c7:b5:55:de:d9:be:35:65:fb:f5:79:26:
         fa:1d:b1:71:d7:08:bb:81:05:a8:9f:ec:46:1d:e1:a5:99:79:
         2c:4a:c1:5f:ee:b9:b3:f9:ef:fa:4c:f0:a1:0b:51:a9:cc:4f:
         94:bd:23:05:82:53:69:5b:dd:06:8e:3c:a0:3f:c2:99:69:e7:
         51:0f:ba:bb:60:b0:47:a8:5e:00:3f:85:ab:9a:25:44:51:fb:
         9d:7d:d7:4e:f0:d8:fe:d1:82:50:74:ed:c9:e2:00:7b:1a:e9:
         3f:93:0d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----