Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/11404730ff9a4dea9dafcc9b47ddd5ea6dbd239f.roa
File:                     11404730ff9a4dea9dafcc9b47ddd5ea6dbd239f.roa (raw, json)
Hash identifier:          waKcGi//2ga6lsZO5Sts1Fwkd0e/bdn/lXbBXkRykHU=
Subject key identifier:   8D:90:93:0A:4D:78:B0:0A:18:31:4B:5D:AF:18:5A:D1:0D:F8:5F:12
Certificate issuer:       /CN=41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a
Certificate serial:       229E55
Authority key identifier: 41:61:06:95:EF:0C:3C:AD:D8:A2:16:37:1C:60:AB:51:07:E1:CE:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/11404730ff9a4dea9dafcc9b47ddd5ea6dbd239f.roa
Signing time:             Tue 25 Jul 2023 19:30:07 +0000
ROA not before:           Mon 24 Jul 2023 19:30:07 +0000
ROA not after:            Fri 25 Jul 2025 19:30:07 +0000
asID:                     27669
IP address blocks:        200.108.128.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2268757 (0x229e55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a
        Validity
            Not Before: Jul 24 19:30:07 2023 GMT
            Not After : Jul 25 19:30:07 2025 GMT
        Subject: CN=11404730ff9a4dea9dafcc9b47ddd5ea6dbd239f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:66:06:96:21:8d:b1:3b:2a:48:98:24:23:b0:
                    ed:f1:8c:a8:87:45:25:85:07:b2:1d:39:d4:df:20:
                    68:81:31:ee:01:5d:d2:91:61:45:c9:53:1c:17:e5:
                    09:a7:58:e0:5f:57:ba:0c:dd:5b:c0:dd:2d:bb:69:
                    84:2f:c5:2f:bd:9d:2a:12:a9:96:20:bb:92:27:1b:
                    10:79:3d:13:74:82:54:15:60:84:00:b5:07:b7:f1:
                    cb:57:61:5e:57:ee:3b:e2:18:ee:af:69:44:8d:5d:
                    7f:03:4d:cb:92:e8:94:9f:8b:d5:32:c0:0f:d3:df:
                    b9:f5:8a:3d:f9:e6:0a:c0:a7:4a:d7:cf:22:78:a0:
                    84:1b:3f:82:3e:d4:57:74:87:d3:33:96:6e:94:c8:
                    ce:79:77:48:19:77:95:d2:53:0b:44:aa:67:8b:e3:
                    1c:e6:61:ca:22:9b:ae:6e:6a:47:35:5d:21:35:fd:
                    79:b6:a8:0a:74:45:53:f0:2f:5c:03:73:3c:76:2e:
                    c0:e3:2b:bd:77:29:76:02:62:d6:fb:de:b4:64:5e:
                    37:33:c8:13:65:8f:88:1c:9c:19:0a:1a:e1:77:05:
                    0f:7c:da:08:a2:3e:ff:2a:69:57:3f:27:3f:0e:41:
                    c7:7d:e8:7d:86:3a:70:57:58:f4:e7:e7:28:af:bd:
                    79:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:90:93:0A:4D:78:B0:0A:18:31:4B:5D:AF:18:5A:D1:0D:F8:5F:12
            X509v3 Authority Key Identifier:
                keyid:41:61:06:95:EF:0C:3C:AD:D8:A2:16:37:1C:60:AB:51:07:E1:CE:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/11404730ff9a4dea9dafcc9b47ddd5ea6dbd239f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:3f:89:ac:1f:df:1e:c0:56:9c:bd:a4:e4:78:e7:6c:c1:13:
         b1:3e:e4:a7:43:79:51:d6:c8:f0:10:92:c8:92:63:9f:b4:d4:
         a3:27:53:fe:26:d6:0e:d3:4b:3b:16:1b:1d:dc:fd:c6:a2:35:
         b3:f8:73:72:c2:2c:ee:8d:92:91:ea:66:00:13:93:ab:27:6a:
         41:76:cd:98:9e:11:33:4d:db:13:71:e5:54:d5:da:10:cb:a4:
         b5:ba:65:65:08:88:5c:9e:ca:a3:48:1a:8f:11:62:97:aa:83:
         5f:ff:f8:a7:72:ae:33:a1:e1:8b:31:a2:2a:69:1d:b9:e2:45:
         f5:00:da:30:83:ea:90:4f:e4:e4:04:25:48:39:be:8f:96:27:
         8c:fd:4b:4e:34:4a:13:0c:f8:67:c4:15:78:ac:9c:1a:ef:e4:
         41:05:24:df:e5:b2:ad:71:61:ea:94:18:85:ae:69:26:54:57:
         62:3b:20:76:13:91:12:7a:ca:5e:8d:5b:b4:bf:94:fe:c6:24:
         d9:a6:67:68:5c:2f:d5:05:04:fe:99:0c:e4:0c:8b:4e:89:17:
         8c:ea:47:8e:44:cf:02:8b:f8:89:43:82:14:9e:e4:42:94:a2:
         be:e5:52:52:23:a7:a6:7a:aa:15:26:ed:b2:d6:db:f7:16:74:
         b3:02:9f:c0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIp5VMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQx
ZDRjOTk0ZWI2YWM1NzJiNTc3OWIxYmQxYThiNWIzN2IyMGU5MWEwHhcNMjMwNzI0
MTkzMDA3WhcNMjUwNzI1MTkzMDA3WjAzMTEwLwYDVQQDEygxMTQwNDczMGZmOWE0
ZGVhOWRhZmNjOWI0N2RkZDVlYTZkYmQyMzlmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA3mYGliGNsTsqSJgkI7Dt8Yyoh0UlhQeyHTnU3yBogTHuAV3S
kWFFyVMcF+UJp1jgX1e6DN1bwN0tu2mEL8UvvZ0qEqmWILuSJxsQeT0TdIJUFWCE
ALUHt/HLV2FeV+474hjur2lEjV1/A03LkuiUn4vVMsAP09+59Yo9+eYKwKdK188i
eKCEGz+CPtRXdIfTM5ZulMjOeXdIGXeV0lMLRKpni+Mc5mHKIpuubmpHNV0hNf15
tqgKdEVT8C9cA3M8di7A4yu9dyl2AmLW+960ZF43M8gTZY+IHJwZChrhdwUPfNoI
oj7/KmlXPyc/DkHHfeh9hjpwV1j05+cor715GwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFI2QkwpNeLAKGDFLXa8YWtEN+F8SMB8GA1UdIwQYMBaAFEFhBpXvDDyt2KIW
Nxxgq1EH4c7LMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDFkNGM5
OTRlYjZhYzU3MmI1Nzc5YjFiZDFhOGI1YjM3YjIwZTkxYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTFiYWJlNWUtYmM5Ni00MDMzLWI1MDctZTViMWE4
YzhiZjZmLzExNDA0NzMwZmY5YTRkZWE5ZGFmY2M5YjQ3ZGRkNWVhNmRiZDIzOWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMWJhYmU1ZS1iYzk2LTQwMzMtYjUwNy1lNWIx
YThjOGJmNmYvNDFkNGM5OTRlYjZhYzU3MmI1Nzc5YjFiZDFhOGI1YjM3YjIwZTkx
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhsgDANBgkqhkiG9w0BAQsFAAOCAQEAGT+JrB/fHsBWnL2k
5HjnbMETsT7kp0N5UdbI8BCSyJJjn7TUoydT/ibWDtNLOxYbHdz9xqI1s/hzcsIs
7o2SkepmABOTqydqQXbNmJ4RM03bE3HlVNXaEMuktbplZQiIXJ7Ko0gajxFil6qD
X//4p3KuM6HhizGiKmkdueJF9QDaMIPqkE/k5AQlSDm+j5YnjP1LTjRKEwz4Z8QV
eKycGu/kQQUk3+WyrXFh6pQYha5pJlRXYjsgdhOREnrKXo1btL+U/sYk2aZnaFwv
1QUE/pkM5AyLTokXjOpHjkTPAov4iUOCFJ7kQpSivuVSUiOnpnqqFSbtstbb9xZ0
swKfwA==
-----END CERTIFICATE-----