Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/227b8bef8d2fbf3c02d4307f548dd94b5e7c9ed1.roa
File:                     227b8bef8d2fbf3c02d4307f548dd94b5e7c9ed1.roa (raw, json)
Hash identifier:          sfxUW3IYU1isUDrlyTdrlm+POCaqg2uh0bMv+NDPqcM=
Subject key identifier:   71:3E:31:C7:AA:25:3C:36:A7:74:97:63:81:B1:97:40:AC:5C:A6:64
Certificate issuer:       /CN=41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a
Certificate serial:       269CA3
Authority key identifier: 41:61:06:95:EF:0C:3C:AD:D8:A2:16:37:1C:60:AB:51:07:E1:CE:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/227b8bef8d2fbf3c02d4307f548dd94b5e7c9ed1.roa
Signing time:             Fri 29 Dec 2023 03:40:03 +0000
ROA not before:           Fri 29 Dec 2023 03:40:03 +0000
ROA not after:            Mon 29 Dec 2025 03:40:03 +0000
asID:                     198980
IP address blocks:        200.108.128.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2530467 (0x269ca3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a
        Validity
            Not Before: Dec 29 03:40:03 2023 GMT
            Not After : Dec 29 03:40:03 2025 GMT
        Subject: CN=227b8bef8d2fbf3c02d4307f548dd94b5e7c9ed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b0:0f:3d:8e:a1:f2:58:fb:17:0b:f5:49:20:
                    63:8b:03:b7:2f:ce:3c:76:25:46:a6:cc:2c:1d:c4:
                    86:80:6b:89:8d:a1:9a:44:0e:f4:8f:fd:4e:28:b8:
                    c6:ae:b2:72:3d:04:96:b2:3e:fe:b3:20:da:95:7e:
                    e4:7c:2b:58:47:22:46:6d:59:2c:56:98:32:69:8c:
                    c9:30:37:38:4b:ab:8b:aa:d8:b8:a1:30:be:ea:a6:
                    01:c6:d0:a3:fd:82:2a:04:75:18:e7:25:80:6e:45:
                    8f:e5:02:e1:dc:ef:17:cd:2e:93:98:ba:1c:2b:69:
                    db:a6:b8:32:25:c4:e6:ef:99:c6:5d:2d:91:f2:3f:
                    4f:fa:69:55:7e:8d:59:ed:1a:e7:a3:ed:3d:75:5a:
                    fd:c8:27:a8:f7:da:c0:3f:b2:09:2c:b6:af:bc:bd:
                    fc:c9:52:cf:93:04:95:c5:30:06:cf:39:94:c0:5b:
                    07:5e:55:ce:bd:0a:2d:8d:e7:78:80:f6:2e:63:af:
                    65:1b:7a:9a:2d:cb:5c:f3:1f:f1:9f:12:e1:b9:82:
                    a8:3c:de:5e:05:56:46:98:f8:ed:09:c3:d4:35:52:
                    3b:eb:97:8c:5d:44:ff:fb:4f:c3:ee:7a:65:ca:96:
                    aa:ab:b3:8a:84:42:b9:04:36:c2:06:16:c4:b2:ad:
                    0c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3E:31:C7:AA:25:3C:36:A7:74:97:63:81:B1:97:40:AC:5C:A6:64
            X509v3 Authority Key Identifier:
                keyid:41:61:06:95:EF:0C:3C:AD:D8:A2:16:37:1C:60:AB:51:07:E1:CE:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/227b8bef8d2fbf3c02d4307f548dd94b5e7c9ed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:2b:d4:48:78:3d:64:63:16:d0:ad:5f:76:63:8f:b5:c6:5b:
         29:c5:79:bd:c1:7c:ea:15:5f:f0:57:64:db:04:c0:3b:c2:a8:
         cc:98:e8:cf:fd:1b:b5:cb:23:12:bc:f3:52:52:b5:6f:bc:a5:
         bd:df:72:04:e1:0d:49:3b:28:d0:31:80:c9:33:9f:ea:b6:ae:
         08:70:bf:1d:d1:a0:df:33:ac:74:73:95:2d:f2:1b:80:4b:58:
         8c:56:f6:c2:85:85:5e:66:fb:1e:36:df:b6:6f:46:6d:31:9f:
         b3:9e:09:7d:c7:91:a7:62:29:0e:b9:6f:04:50:84:11:a0:9c:
         68:2b:6e:1f:00:1a:45:24:9d:89:0c:98:70:57:39:d6:f8:fa:
         47:d5:0f:17:5a:70:3a:f9:d6:8b:03:0a:6d:e8:4b:72:cb:a0:
         8b:fe:a0:32:03:fb:06:7d:30:49:4b:f4:bc:ef:36:00:f0:38:
         e6:30:2c:49:a1:6a:54:e3:65:5f:0d:e2:c9:72:53:43:ca:48:
         aa:3d:e4:26:20:70:d2:53:86:25:c4:40:04:24:1d:fb:77:df:
         9d:cc:42:5d:e9:a8:d5:de:2b:08:65:b5:07:04:7a:22:d5:f2:
         f5:05:cf:fb:8b:c2:13:f3:50:c4:55:52:ba:f9:09:93:14:ce:
         f5:7b:ea:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----