Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/20ef41dec3bd22157f0fa24964a6c6927d284770.roa
File:                     20ef41dec3bd22157f0fa24964a6c6927d284770.roa (raw, json)
Hash identifier:          JgPDC1GwNMbSeRFyLqc3ec5QsK4d1M3kvoBws0jv2so=
Subject key identifier:   37:52:97:09:49:46:90:C6:C4:10:B2:25:CA:3F:F5:E1:F6:F9:F1:12
Certificate issuer:       /CN=1e11687078667bdcd452bb7b0f00bb86dcfed972
Certificate serial:       03A73B
Authority key identifier: 33:35:32:94:02:20:DA:17:63:DB:44:42:BC:86:06:AC:1E:99:BF:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e11687078667bdcd452bb7b0f00bb86dcfed972.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/20ef41dec3bd22157f0fa24964a6c6927d284770.roa
Signing time:             Wed 24 Mar 2021 14:31:27 +0000
ROA not before:           Wed 24 Mar 2021 14:31:27 +0000
ROA not after:            Tue 24 Mar 2026 14:31:27 +0000
asID:                     267819
IP address blocks:        200.63.93.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239419 (0x3a73b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e11687078667bdcd452bb7b0f00bb86dcfed972
        Validity
            Not Before: Mar 24 14:31:27 2021 GMT
            Not After : Mar 24 14:31:27 2026 GMT
        Subject: CN=20ef41dec3bd22157f0fa24964a6c6927d284770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:53:48:13:00:12:23:5a:3f:d0:04:ee:1c:a0:
                    38:6f:2b:ad:56:0d:5a:28:ea:c8:17:fe:04:ac:ba:
                    f0:52:1d:4c:8d:e4:90:2b:86:b9:21:3c:89:2d:73:
                    5b:f6:51:e0:09:ce:fb:db:28:52:27:4b:66:b5:7c:
                    1e:4d:c2:67:54:7a:f3:90:8b:c8:f8:9e:66:5f:0c:
                    7a:f7:a2:62:4c:86:57:1a:99:47:35:40:29:39:7a:
                    a7:10:a4:f7:0a:1f:aa:20:5c:94:8c:8d:94:0c:52:
                    28:c4:52:66:39:89:d9:b3:8e:4d:28:50:19:73:c9:
                    67:13:a9:6e:61:a2:49:e1:ef:f5:58:e5:98:80:5d:
                    fb:f3:9b:b0:92:ef:9c:b6:de:2c:da:82:ec:29:04:
                    d4:9a:21:3d:d7:b1:03:84:5f:67:15:90:10:e6:84:
                    32:76:6f:8b:d7:14:6c:11:33:13:82:cc:d1:53:17:
                    08:b6:09:7e:34:46:83:64:b6:45:09:55:53:14:50:
                    cb:89:66:b5:55:66:4d:34:7b:bd:77:e6:fa:55:a8:
                    13:75:3b:27:a4:9d:e8:56:11:8c:27:2e:01:d0:90:
                    67:7e:a4:87:96:bb:79:01:fd:7f:0d:0e:df:53:7f:
                    31:b6:c3:43:ee:90:7b:ac:b1:89:89:89:f8:eb:33:
                    39:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:52:97:09:49:46:90:C6:C4:10:B2:25:CA:3F:F5:E1:F6:F9:F1:12
            X509v3 Authority Key Identifier:
                keyid:33:35:32:94:02:20:DA:17:63:DB:44:42:BC:86:06:AC:1E:99:BF:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e11687078667bdcd452bb7b0f00bb86dcfed972.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/20ef41dec3bd22157f0fa24964a6c6927d284770.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/1e11687078667bdcd452bb7b0f00bb86dcfed972.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:ab:8c:db:d9:b9:be:82:64:d9:5d:b9:fa:95:7c:ba:bf:94:
         82:4a:be:0f:de:48:27:58:b8:f1:57:08:af:37:f0:8e:70:3d:
         68:79:34:2e:74:3d:bb:5c:e3:c0:88:1b:21:5c:e0:90:c0:ae:
         2a:4b:2b:49:7a:4a:8c:17:0a:bf:2f:81:07:64:1a:e3:e5:4b:
         24:8b:5c:17:67:d7:5d:d4:c8:22:36:a1:6c:73:31:0d:07:96:
         79:de:01:f6:42:9c:79:90:20:6a:b8:f2:cd:ca:a3:fd:77:6b:
         0b:5f:96:b9:2f:09:07:76:c1:04:cf:e9:b7:bc:58:a6:ad:2d:
         e9:a7:44:a8:9f:57:dc:a3:19:3c:66:fa:f9:e7:62:d1:95:31:
         13:07:e4:9b:b3:53:5f:c9:e7:68:34:57:32:ff:d7:3b:55:50:
         b0:e7:1b:87:6f:a3:86:c2:4a:59:08:4d:10:75:18:f7:0d:32:
         c8:45:ff:3f:5f:5f:77:42:96:9b:ee:fa:e6:de:88:a8:ee:56:
         34:b4:3f:31:b8:c6:69:ef:82:f2:9e:2e:4e:84:68:31:6f:39:
         3a:99:a4:59:60:63:4e:42:ca:3b:31:bb:e9:3f:f1:84:df:73:
         76:85:bf:4c:d9:11:12:c4:3e:74:f0:3f:23:e2:b3:19:dc:96:
         f9:e5:81:0d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDA6c7MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFl
MTE2ODcwNzg2NjdiZGNkNDUyYmI3YjBmMDBiYjg2ZGNmZWQ5NzIwHhcNMjEwMzI0
MTQzMTI3WhcNMjYwMzI0MTQzMTI3WjAzMTEwLwYDVQQDEygyMGVmNDFkZWMzYmQy
MjE1N2YwZmEyNDk2NGE2YzY5MjdkMjg0NzcwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA3VNIEwASI1o/0ATuHKA4byutVg1aKOrIF/4ErLrwUh1MjeSQ
K4a5ITyJLXNb9lHgCc772yhSJ0tmtXweTcJnVHrzkIvI+J5mXwx696JiTIZXGplH
NUApOXqnEKT3Ch+qIFyUjI2UDFIoxFJmOYnZs45NKFAZc8lnE6luYaJJ4e/1WOWY
gF3785uwku+ctt4s2oLsKQTUmiE917EDhF9nFZAQ5oQydm+L1xRsETMTgszRUxcI
tgl+NEaDZLZFCVVTFFDLiWa1VWZNNHu9d+b6VagTdTsnpJ3oVhGMJy4B0JBnfqSH
lrt5Af1/DQ7fU38xtsND7pB7rLGJiYn46zM5kQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDdSlwlJRpDGxBCyJco/9eH2+fESMB8GA1UdIwQYMBaAFDM1MpQCINoXY9tE
QryGBqwemb+nMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWUxMTY4
NzA3ODY2N2JkY2Q0NTJiYjdiMGYwMGJiODZkY2ZlZDk3Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTU2YWJkY2MtZTBhNy00MzAyLWIyMGEtOGIwZTIw
M2FmOTE2LzIwZWY0MWRlYzNiZDIyMTU3ZjBmYTI0OTY0YTZjNjkyN2QyODQ3NzAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NTZhYmRjYy1lMGE3LTQzMDItYjIwYS04YjBl
MjAzYWY5MTYvMWUxMTY4NzA3ODY2N2JkY2Q0NTJiYjdiMGYwMGJiODZkY2ZlZDk3
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMg/XTANBgkqhkiG9w0BAQsFAAOCAQEAEquM29m5voJk2V25
+pV8ur+Ugkq+D95IJ1i48VcIrzfwjnA9aHk0LnQ9u1zjwIgbIVzgkMCuKksrSXpK
jBcKvy+BB2Qa4+VLJItcF2fXXdTIIjahbHMxDQeWed4B9kKceZAgarjyzcqj/Xdr
C1+WuS8JB3bBBM/pt7xYpq0t6adEqJ9X3KMZPGb6+edi0ZUxEwfkm7NTX8nnaDRX
Mv/XO1VQsOcbh2+jhsJKWQhNEHUY9w0yyEX/P19fd0KWm+765t6IqO5WNLQ/MbjG
ae+C8p4uToRoMW85OpmkWWBjTkLKOzG76T/xhN9zdoW/TNkREsQ+dPA/I+KzGdyW
+eWBDQ==
-----END CERTIFICATE-----