Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/e2d116a3a1345c91f9f84dda0258a4fe6007b138.roa
File:                     e2d116a3a1345c91f9f84dda0258a4fe6007b138.roa (raw, json)
Hash identifier:          5fTP5o+BLrEx5IItqmwv6LaNYp+dd+QQfcZjwYHDOCU=
Subject key identifier:   37:5B:1A:F9:4E:47:C6:62:AB:21:F3:71:2C:C6:AD:42:A0:47:C6:99
Certificate issuer:       /CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Certificate serial:       094C6E
Authority key identifier: 33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/e2d116a3a1345c91f9f84dda0258a4fe6007b138.roa
Signing time:             Tue 24 Aug 2021 13:07:17 +0000
ROA not before:           Tue 24 Aug 2021 03:00:00 +0000
ROA not after:            Thu 24 Aug 2023 03:00:00 +0000
asID:                     270066
IP address blocks:        200.219.4.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609390 (0x94c6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
        Validity
            Not Before: Aug 24 03:00:00 2021 GMT
            Not After : Aug 24 03:00:00 2023 GMT
        Subject: CN=e2d116a3a1345c91f9f84dda0258a4fe6007b138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:52:8e:35:dc:15:4f:c3:7b:ec:9e:f9:ec:fa:
                    8b:0f:f5:c7:bc:60:7a:dc:bf:6b:24:a3:bb:ff:63:
                    e9:02:e2:3f:ba:22:6b:34:e5:f2:aa:9f:df:fd:7b:
                    40:1e:8d:e1:7e:64:98:51:91:72:57:ba:96:26:46:
                    7c:68:cd:1e:0c:f6:47:f8:7a:a1:f5:45:86:08:f8:
                    13:bc:a6:8f:6e:28:87:ba:99:6a:a8:85:95:3c:94:
                    0a:24:e2:85:09:6a:02:43:b1:9b:37:3e:7c:3b:ce:
                    ae:31:00:38:cf:5b:4d:3d:c3:bd:d5:36:93:82:35:
                    39:67:b7:6e:0e:60:59:60:f9:31:ec:00:33:51:11:
                    90:77:fa:0e:8f:01:89:87:e2:52:2b:1e:67:8a:5c:
                    da:cf:a6:af:4a:91:59:f5:dd:f6:b5:d8:5b:eb:2a:
                    be:2b:80:1c:f6:ed:2d:05:ec:e6:89:0a:ae:bf:ac:
                    e0:16:92:31:ad:80:b0:b0:bb:12:1a:90:9d:7a:7c:
                    7d:6e:47:75:98:56:0e:71:34:6c:01:b5:e3:11:07:
                    7b:85:5d:04:4c:15:e0:7b:8c:ed:11:d9:26:2b:09:
                    34:39:dd:07:6f:46:3a:ae:4c:85:de:15:2e:a0:15:
                    85:58:af:4d:00:7d:74:3c:f6:b9:be:f7:3a:5d:72:
                    10:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5B:1A:F9:4E:47:C6:62:AB:21:F3:71:2C:C6:AD:42:A0:47:C6:99
            X509v3 Authority Key Identifier:
                keyid:33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/e2d116a3a1345c91f9f84dda0258a4fe6007b138.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:f4:55:5b:db:38:58:69:2c:03:82:6d:4a:d2:4c:c0:52:dc:
         18:5a:86:20:d6:96:e4:30:42:bd:6c:8e:55:c9:5d:40:bd:44:
         bf:3c:95:0c:cb:78:83:ee:eb:f8:d6:e6:eb:71:6f:97:84:4a:
         3b:d4:97:3a:28:3e:01:4e:db:af:f1:38:f0:eb:46:04:bc:60:
         b3:9b:28:c4:76:78:54:40:c2:32:bf:c6:d6:9b:0b:ba:c0:83:
         2b:45:6f:7e:b6:7a:0e:09:2f:db:d1:a9:06:fd:e4:67:6b:69:
         78:8d:3c:e0:6d:ea:e5:d5:24:4d:2a:6c:90:84:41:b1:4e:f6:
         1e:67:46:36:e9:4a:af:c9:29:67:74:44:ed:3c:6a:f3:ff:e1:
         c5:76:9e:71:8d:3b:55:a6:90:05:50:88:c6:9a:6a:8c:e1:fc:
         86:89:a9:cc:62:3a:8f:ea:1d:a6:63:cc:ae:84:5a:f4:e0:da:
         b9:6d:b2:03:81:db:c4:78:54:0e:5e:94:8d:c7:92:88:cd:58:
         aa:3c:d9:ba:e9:6c:9c:1e:87:1a:47:47:c7:c2:ad:27:39:88:
         44:b9:36:ae:9a:4e:15:38:c5:1e:6b:9f:a1:22:07:79:04:d5:
         84:c1:fe:34:e9:07:dd:6c:98:ed:f1:ae:a9:ee:41:6e:53:a9:
         d5:d7:b8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----