Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/e9f8c981c062090cdd32c619de25a939f5ba727e.roa
File:                     e9f8c981c062090cdd32c619de25a939f5ba727e.roa (raw, json)
Hash identifier:          9MDVSbsb2KU9GNAWuwbd/BXbS95M5WMa8J7u8jEy+l4=
Subject key identifier:   04:AF:B0:CC:3B:C9:6B:42:25:D9:38:8D:67:C7:EE:CF:48:3F:CF:2A
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       0A0C2A
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/e9f8c981c062090cdd32c619de25a939f5ba727e.roa
Signing time:             Wed 24 Mar 2021 14:43:17 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     18734
IP address blocks:        200.57.0.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 658474 (0xa0c2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=e9f8c981c062090cdd32c619de25a939f5ba727e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:50:c4:92:f1:bd:15:61:dd:37:44:97:b5:7d:
                    8c:a9:d0:09:64:a3:6e:7c:72:76:da:e7:ab:47:da:
                    45:3a:d9:ae:5a:57:89:0a:cc:b9:2b:02:2c:b0:12:
                    1c:1b:7b:a5:28:aa:04:cf:62:20:c9:b3:f0:8c:20:
                    92:34:2f:c8:00:f6:71:6a:cb:df:ad:d7:94:99:f0:
                    f6:af:58:76:e5:ee:02:3a:39:bd:14:22:aa:98:50:
                    21:d6:d9:c0:e9:47:7d:d8:fa:1e:49:cd:7d:5e:71:
                    72:38:f5:9a:51:04:ad:f2:b1:10:88:20:9f:c5:15:
                    ff:8a:e3:13:2f:b9:de:fd:e5:c7:02:d0:5a:07:29:
                    b9:9e:73:88:43:60:53:b3:0e:f1:f8:13:48:b4:1b:
                    85:11:e0:12:1c:c8:5b:0b:b4:44:fd:d0:14:ed:10:
                    7f:83:b0:d1:11:d8:c9:47:ed:2e:36:bd:0c:3a:5d:
                    d6:bf:6e:0f:c8:47:1c:fa:83:4b:a2:0d:19:15:e7:
                    38:bc:c4:94:ff:fa:46:13:58:ab:ad:f4:cc:27:11:
                    e5:a3:17:28:7a:02:a3:07:13:98:23:bc:a2:ca:ab:
                    8a:9a:57:f9:a1:0a:ea:52:72:85:7e:f4:cb:ec:06:
                    38:44:27:f6:94:a0:da:f1:29:13:c2:d2:2e:7e:71:
                    bf:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AF:B0:CC:3B:C9:6B:42:25:D9:38:8D:67:C7:EE:CF:48:3F:CF:2A
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/e9f8c981c062090cdd32c619de25a939f5ba727e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.57.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5f:74:08:e2:35:92:62:7d:1c:23:e1:86:18:87:af:b1:e9:31:
         a6:65:2f:92:82:97:b7:cc:77:8b:d0:c4:be:40:43:14:34:f0:
         41:98:58:b2:fc:75:f5:97:cd:ce:d3:34:db:19:26:f8:8f:b3:
         66:aa:d8:0b:5f:26:07:28:14:7d:3d:a8:f5:3e:14:14:e1:29:
         f4:48:9b:1c:50:a2:78:70:56:1e:0f:25:32:86:e6:67:7f:5f:
         00:a8:41:30:c5:9c:7a:1a:35:93:b7:e2:43:de:bc:6f:85:27:
         95:09:e3:fc:f2:68:1c:47:50:95:77:0c:f3:8a:64:17:f0:37:
         a9:45:a4:91:d5:01:dd:67:d7:cd:67:6c:e9:6d:be:96:ef:10:
         94:45:b4:bb:cd:55:d1:76:74:a3:94:60:81:22:9b:4d:a4:5e:
         6e:c0:d7:ac:4f:bb:ea:e5:39:fb:68:5c:26:23:0f:61:13:85:
         2a:cd:e0:73:ca:60:4f:9e:56:f9:19:d1:d2:fa:15:45:96:52:
         de:8f:1f:35:22:6b:0c:5b:66:c4:84:6e:c6:da:16:29:c4:3f:
         a4:2a:95:db:50:34:9f:24:f5:01:b4:65:e6:2d:68:68:03:00:
         50:87:04:3e:f9:ce:00:44:2f:b6:ec:8b:10:83:19:90:4f:48:
         97:da:be:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----