Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8648ad1a-3f4d-4485-8db2-529ee5624a21/ce51445770f19fe3c9cf89d3405f8305bce8c9b8.roa
File:                     ce51445770f19fe3c9cf89d3405f8305bce8c9b8.roa (raw, json)
Hash identifier:          qMKzIQ/4Y6aPHN95hrBU0sXaTai1IA2d+J579xM/r0Y=
Subject key identifier:   D3:48:5D:41:15:23:2A:A8:54:6B:B2:E7:5A:21:4F:0F:1D:04:99:64
Certificate issuer:       /CN=677e61affc2207b19cf569eaf59f1aa53af06efd
Certificate serial:       0C38CE
Authority key identifier: E2:B5:34:5A:B6:AB:EE:BA:07:CB:14:AB:54:F2:AD:0D:E3:E5:97:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/677e61affc2207b19cf569eaf59f1aa53af06efd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8648ad1a-3f4d-4485-8db2-529ee5624a21/ce51445770f19fe3c9cf89d3405f8305bce8c9b8.roa
Signing time:             Wed 24 Mar 2021 14:43:26 +0000
ROA not before:           Wed 24 Mar 2021 14:43:26 +0000
ROA not after:            Tue 24 Mar 2026 14:43:26 +0000
asID:                     23031
IP address blocks:        207.248.114.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 800974 (0xc38ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677e61affc2207b19cf569eaf59f1aa53af06efd
        Validity
            Not Before: Mar 24 14:43:26 2021 GMT
            Not After : Mar 24 14:43:26 2026 GMT
        Subject: CN=ce51445770f19fe3c9cf89d3405f8305bce8c9b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0a:d0:92:6e:6d:10:38:6a:1c:cd:1f:79:77:
                    8c:18:4f:2e:91:c3:10:b9:18:b3:f1:1f:5a:4f:13:
                    34:27:aa:2d:64:c8:0a:83:70:9b:59:f9:45:1b:e5:
                    54:5e:6d:65:cb:6d:4e:5e:05:e5:7d:2c:5c:98:d3:
                    d4:2c:29:36:b0:b0:54:80:a2:cf:d2:46:36:2e:1e:
                    ab:89:a6:37:02:46:b8:b7:16:86:f0:ee:30:ad:16:
                    92:0b:9b:4d:03:36:0a:7d:3c:30:31:f1:8d:bd:31:
                    9c:68:32:14:7f:e9:2c:bc:8f:d6:84:35:3f:64:c8:
                    d7:99:77:cb:8c:cd:ef:14:76:54:c3:ae:ba:25:5a:
                    eb:1e:d7:03:37:b8:5c:3b:8a:51:bb:61:88:f8:02:
                    5d:5a:b5:7d:c7:54:2d:f8:05:65:47:e9:8e:1d:97:
                    35:26:fa:58:68:83:59:92:dc:8e:f7:35:81:74:b2:
                    1a:82:39:6a:c2:8a:9d:f3:93:e5:e0:ed:71:3a:9f:
                    1e:b2:e6:83:6b:78:5e:4f:95:df:6f:f3:71:a7:0b:
                    c1:63:fc:26:42:2c:47:22:53:c4:11:f0:73:ee:2c:
                    1f:37:c0:ed:f6:18:89:67:bb:de:db:93:9c:af:e3:
                    b3:d9:5b:92:32:8b:c7:21:9c:30:18:3d:87:4a:ed:
                    fb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:48:5D:41:15:23:2A:A8:54:6B:B2:E7:5A:21:4F:0F:1D:04:99:64
            X509v3 Authority Key Identifier:
                keyid:E2:B5:34:5A:B6:AB:EE:BA:07:CB:14:AB:54:F2:AD:0D:E3:E5:97:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/677e61affc2207b19cf569eaf59f1aa53af06efd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8648ad1a-3f4d-4485-8db2-529ee5624a21/ce51445770f19fe3c9cf89d3405f8305bce8c9b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8648ad1a-3f4d-4485-8db2-529ee5624a21/677e61affc2207b19cf569eaf59f1aa53af06efd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:01:3e:d6:f9:61:dd:46:43:8b:b2:a5:28:f0:b6:f4:e4:52:
         1f:ef:51:7c:1e:98:3c:5a:34:25:5b:05:85:b2:75:cc:3b:5c:
         14:7d:1c:c2:dc:c1:9f:5a:96:4c:18:c3:4a:50:df:92:ec:ba:
         39:9c:4a:02:fd:26:aa:01:a7:4a:ed:61:07:dc:f2:ba:e4:3d:
         2b:e3:e7:91:b0:16:32:b9:b7:86:75:1e:69:5a:8e:5e:ff:fe:
         76:97:4a:17:45:e1:ae:0e:ea:97:8f:28:02:de:a2:c7:d3:49:
         b7:2d:8c:31:86:11:04:c6:00:c4:de:30:e4:69:f3:1e:f2:f3:
         e7:9e:2f:ee:07:bf:80:12:b0:fe:ec:77:33:89:5c:25:85:09:
         ca:2b:47:01:3c:1b:e4:27:0a:ed:c9:4f:2a:4c:88:a4:7b:ca:
         58:f3:81:4e:db:a4:72:22:c6:6a:bc:9e:6f:73:1a:32:70:05:
         fa:38:af:4c:ae:91:92:32:62:a7:d3:6a:fe:a8:aa:31:54:a2:
         ea:ff:67:a7:f1:aa:78:d8:ad:1e:54:54:dc:17:4e:f2:b1:13:
         81:b7:b4:f5:c2:e2:23:13:91:da:6b:70:55:0c:52:d0:7a:9c:
         02:e7:ff:d5:2a:b0:be:db:54:8e:a7:ef:96:9b:a6:e2:73:9b:
         03:49:a4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----