Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/1a47924cb389d14570bd57727715d15318759f8f.roa
File:                     1a47924cb389d14570bd57727715d15318759f8f.roa (raw, json)
Hash identifier:          OO4geY3CKYlGmHDnyU7AZUkpIL0vRmSQOh/gl4aRwGc=
Subject key identifier:   22:17:4A:C4:1B:18:86:04:32:B4:D8:80:90:4C:CF:95:EB:D1:5B:24
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       0D8E42
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/1a47924cb389d14570bd57727715d15318759f8f.roa
Signing time:             Wed 24 Mar 2021 14:35:13 +0000
ROA not before:           Wed 24 Mar 2021 14:35:11 +0000
ROA not after:            Tue 24 Mar 2026 14:35:11 +0000
asID:                     19429
IP address blocks:        200.119.0.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888386 (0xd8e42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Mar 24 14:35:11 2021 GMT
            Not After : Mar 24 14:35:11 2026 GMT
        Subject: CN=1a47924cb389d14570bd57727715d15318759f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3a:c4:94:d4:35:53:05:fc:b2:ad:42:d2:90:
                    5e:b2:84:9b:25:6a:4d:75:98:ed:68:d1:d4:0e:10:
                    ec:58:a2:fb:63:83:42:94:49:8d:47:10:a9:b9:32:
                    ac:d4:e1:22:69:aa:89:f7:f6:bf:ff:ce:76:77:ab:
                    30:1a:ed:20:02:c4:ba:22:ff:ff:2d:c9:3e:f2:8c:
                    a7:b8:26:0a:3a:db:fc:25:a8:01:97:f4:70:e0:ab:
                    67:22:09:15:26:89:7a:c5:1a:40:93:98:96:af:55:
                    24:db:b0:e9:83:4c:d3:2b:19:55:4b:58:71:9e:49:
                    fc:71:39:8d:54:12:70:30:ee:18:12:a7:9f:1a:e1:
                    d3:68:d5:5e:a4:0e:8d:77:26:5f:d0:c3:ed:bd:75:
                    da:39:df:cb:16:97:c7:fd:fc:9d:81:75:17:da:f4:
                    89:9b:13:bf:94:26:45:d0:7e:5d:1c:fc:60:94:14:
                    31:00:57:44:da:e5:07:82:90:73:3c:83:97:4a:92:
                    55:4b:f3:3b:fe:88:04:03:52:42:4a:26:66:d0:02:
                    da:99:3c:11:a1:2a:f5:d1:cc:36:6c:d6:f6:08:6a:
                    b2:88:c5:f7:75:88:dc:6f:a2:c3:b6:95:96:14:66:
                    ee:fd:99:e3:41:5e:51:d3:3b:72:86:32:ef:f0:4d:
                    c4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:17:4A:C4:1B:18:86:04:32:B4:D8:80:90:4C:CF:95:EB:D1:5B:24
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/1a47924cb389d14570bd57727715d15318759f8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9e:f0:cb:ff:12:4d:20:00:48:9a:50:1c:d5:e0:69:b0:5c:1b:
         51:b2:92:5e:42:b3:37:4d:64:86:04:71:75:1c:9c:70:3c:d7:
         a5:c0:aa:0e:d7:4a:bd:41:8b:d9:b1:6d:38:e2:6e:de:a3:52:
         b9:c0:63:72:18:0e:d5:c0:1f:59:00:26:e3:a6:6b:35:6a:26:
         c0:c2:2e:20:dd:64:33:a2:74:94:a6:0f:00:78:fe:9a:df:b2:
         c8:82:b5:06:db:41:b0:8a:e5:27:fe:27:5e:90:4f:cd:4d:e8:
         a5:20:ec:3c:ff:dd:04:1d:ea:f4:1e:02:6f:6b:0d:89:02:9d:
         bc:25:1c:52:d9:bc:50:75:81:d6:88:fb:84:98:37:73:67:91:
         d0:48:d5:63:1f:cc:ff:b8:d0:41:90:9e:36:29:c3:33:22:9c:
         87:ef:0a:68:10:25:df:4d:f9:01:88:51:c1:c6:28:8b:13:7c:
         d7:cb:94:01:db:a3:5d:4b:f8:27:ac:e2:37:69:8a:f9:83:43:
         b0:70:fb:dd:7f:17:53:a1:04:f9:24:fe:f8:8d:d8:b5:c9:25:
         30:4e:28:4f:0b:f6:30:83:6f:8d:e3:6e:6f:b4:f8:7d:4f:a8:
         f4:69:48:88:ed:09:0f:e4:d9:10:3c:8e:2a:33:38:f8:77:fb:
         09:4c:a2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----