Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/c61cd55736f770d85824ee5243a54bcd5dd9bded.roa
File:                     c61cd55736f770d85824ee5243a54bcd5dd9bded.roa (raw, json)
Hash identifier:          nuAjufQem6+rPhsAQgVDKhrw9z/Zj8Cz/Rb/GmRdgr4=
Subject key identifier:   BE:8F:A6:8E:3F:73:8A:17:4B:1A:40:DF:D0:B1:DA:62:48:97:CC:8B
Certificate issuer:       /CN=1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74
Certificate serial:       0DD9FB
Authority key identifier: A1:E4:E1:3C:B6:59:EA:49:A5:D8:B1:A9:42:B5:D0:F6:16:93:58:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/c61cd55736f770d85824ee5243a54bcd5dd9bded.roa
Signing time:             Wed 24 Mar 2021 14:37:25 +0000
ROA not before:           Wed 24 Mar 2021 14:37:25 +0000
ROA not after:            Tue 24 Mar 2026 14:37:25 +0000
asID:                     52468
IP address blocks:        200.229.145.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 907771 (0xdd9fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74
        Validity
            Not Before: Mar 24 14:37:25 2021 GMT
            Not After : Mar 24 14:37:25 2026 GMT
        Subject: CN=c61cd55736f770d85824ee5243a54bcd5dd9bded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8f:ac:52:8c:da:d5:ef:62:05:da:bd:8b:89:
                    6d:4b:b9:51:c6:4b:1b:9e:b5:c6:71:2b:e2:6a:a6:
                    e4:27:5a:e2:69:d3:ab:f6:d0:af:d5:07:15:38:f4:
                    d8:8c:0c:c8:e6:07:64:33:a7:93:41:28:16:42:d4:
                    53:37:33:c1:d7:a2:83:a5:ff:95:8c:25:24:d7:12:
                    bd:14:40:56:e8:77:af:2b:c4:40:f4:0c:c1:4f:ae:
                    cd:5d:61:e8:30:c9:dd:1f:e2:d7:23:16:0e:49:3e:
                    c0:5e:57:1f:1c:66:9b:27:55:71:eb:44:3d:68:4b:
                    6f:52:83:6c:7d:d4:02:9c:bb:43:d8:d4:58:a5:c1:
                    93:af:a8:a8:4e:5d:e2:92:21:49:e1:d6:e5:bb:87:
                    18:a9:88:5f:29:5d:c6:39:37:aa:33:f5:8a:e5:76:
                    12:36:c5:09:85:7a:9e:e0:74:f1:73:70:72:e4:b0:
                    5c:14:3b:a5:db:ce:ec:22:bf:8e:26:07:d0:2a:74:
                    75:92:56:99:b9:5e:90:cb:99:3f:b5:c2:9b:71:f1:
                    cc:13:18:f6:38:41:ba:f0:e3:65:ae:ad:be:27:71:
                    e7:b3:28:24:09:a6:63:7e:fa:c0:4e:2c:6d:78:2d:
                    57:99:8d:9b:81:68:11:90:67:59:d8:0c:8f:27:f9:
                    c7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8F:A6:8E:3F:73:8A:17:4B:1A:40:DF:D0:B1:DA:62:48:97:CC:8B
            X509v3 Authority Key Identifier:
                keyid:A1:E4:E1:3C:B6:59:EA:49:A5:D8:B1:A9:42:B5:D0:F6:16:93:58:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/c61cd55736f770d85824ee5243a54bcd5dd9bded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:31:29:1e:2f:95:0e:08:da:47:31:4f:f4:eb:78:19:98:e2:
         eb:b8:fa:06:d7:67:02:dc:d2:4d:02:e2:31:12:d7:ea:32:85:
         fc:1c:0a:0b:87:a4:55:37:cc:0f:c0:f6:b2:5e:75:bc:5a:a7:
         2d:1a:3f:53:88:83:27:24:48:c9:7c:6a:7d:3a:dd:53:2a:cf:
         69:cd:05:08:91:84:02:19:8a:96:7d:40:01:7e:ec:cd:a9:35:
         e9:0d:27:66:8a:2f:cd:52:63:36:28:fc:90:ec:a9:a2:05:38:
         14:50:47:bf:c1:05:33:be:96:d2:b5:e0:f2:75:2f:1d:0d:06:
         84:a9:31:b6:05:e1:de:45:8f:3e:38:df:6a:89:d9:7b:59:9b:
         fc:04:ae:86:a8:c7:39:b1:a4:00:2b:1e:3d:86:9b:77:3a:c1:
         17:97:b4:ac:73:6c:c6:69:4c:20:b8:13:6a:01:a4:e8:f1:95:
         c9:22:65:9f:70:23:89:3a:09:b8:59:5a:ba:bd:e1:16:d5:26:
         91:72:4c:d5:d0:3c:89:84:9b:4f:8f:c2:22:60:ad:89:f0:67:
         2a:5a:ce:53:b6:61:b5:e1:26:7f:cf:8e:d5:f6:01:22:7d:96:
         b9:a5:55:81:d6:0b:4d:6c:af:33:f3:6d:05:88:0a:45:66:6b:
         59:27:b8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----