Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/4d112622c17ab0492364110bc54364a197afd1c7.roa
File:                     4d112622c17ab0492364110bc54364a197afd1c7.roa (raw, json)
Hash identifier:          0SfGxBwTIwHFBjh6EuUP8FgukPcNxL0ombmaEu2+Huc=
Subject key identifier:   DB:77:6E:DB:FB:8D:0B:C0:2E:DC:64:50:A0:B9:EB:55:E8:B6:34:71
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       0D72B6
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/4d112622c17ab0492364110bc54364a197afd1c7.roa
Signing time:             Wed 24 Mar 2021 14:35:12 +0000
ROA not before:           Wed 24 Mar 2021 14:35:11 +0000
ROA not after:            Tue 24 Mar 2026 14:35:11 +0000
asID:                     19429
IP address blocks:        200.75.32.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881334 (0xd72b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Mar 24 14:35:11 2021 GMT
            Not After : Mar 24 14:35:11 2026 GMT
        Subject: CN=4d112622c17ab0492364110bc54364a197afd1c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f5:85:0d:ab:e0:39:18:f6:67:1f:ce:4a:75:
                    61:41:8e:8c:b1:ef:cd:5e:52:80:b9:01:e3:ce:83:
                    1d:22:eb:07:77:a0:f0:35:83:de:2c:3a:81:a3:44:
                    1f:cc:a5:96:dd:a2:76:f7:b3:3c:f3:53:b2:42:93:
                    4b:3a:94:7c:c8:99:a6:07:01:ae:fd:e3:3d:61:af:
                    9e:50:ce:83:53:03:0a:79:91:6b:39:31:50:c3:23:
                    54:9a:45:be:fc:cf:2c:27:eb:9c:30:1e:29:bf:19:
                    28:11:43:21:b0:a1:f5:16:3d:58:e9:30:da:d9:bd:
                    d5:c0:da:cf:81:69:f4:88:2b:c9:31:51:92:aa:72:
                    86:77:5d:71:4c:9e:62:38:a6:c0:8f:2b:a7:a2:e5:
                    b6:b7:25:23:a9:ce:f6:e8:ed:01:40:1b:63:c0:0d:
                    8d:ac:d4:8a:2f:6a:94:f1:6d:59:c9:0a:ac:0f:4a:
                    55:c8:4a:69:67:17:08:7c:2a:68:6c:4b:1e:d2:1f:
                    58:94:bd:90:8c:1a:70:5e:b7:9b:84:fd:81:18:f5:
                    8c:46:bf:28:a5:73:16:bd:71:10:bf:2b:a3:93:f2:
                    a0:0e:44:7a:4e:3d:b3:3f:d4:07:3a:1f:a5:57:ab:
                    51:3e:0b:70:4d:09:0e:cf:a6:4c:a5:9f:07:f2:99:
                    70:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:77:6E:DB:FB:8D:0B:C0:2E:DC:64:50:A0:B9:EB:55:E8:B6:34:71
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/4d112622c17ab0492364110bc54364a197afd1c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8d:df:6a:3b:6e:7a:db:f3:b6:d4:11:2d:f3:6c:42:80:39:ea:
         43:a1:74:54:72:5b:ff:e6:d6:61:ee:5d:4b:1a:3f:85:c2:87:
         dd:6f:e2:71:00:b2:c0:3b:f0:d6:a6:e7:69:9b:32:6f:de:ad:
         9c:0d:a4:d4:ff:e0:9e:b8:3e:7f:26:87:84:de:82:59:66:41:
         af:8d:ac:a6:83:dd:fd:06:d9:9c:d4:1d:5e:5b:62:f4:45:04:
         c2:bd:a3:ad:bf:db:f7:24:dd:69:fc:20:41:7a:8b:16:22:d6:
         6d:18:80:15:71:53:c0:aa:f5:b2:1c:1e:6c:df:fd:5f:9a:4b:
         a0:26:cb:ba:9f:6f:08:47:3f:53:40:f2:e0:07:76:b1:15:79:
         4e:b5:9d:cc:c1:bd:fa:3c:8b:1c:ee:dc:76:df:17:96:62:bf:
         e1:72:42:06:23:d1:ca:8d:64:1b:01:08:65:89:bd:2b:8c:87:
         98:93:43:e9:bb:63:7d:15:74:62:c2:62:61:fa:35:32:9f:1f:
         4e:1c:f4:b2:fd:f8:a8:ea:f0:68:15:b4:b2:14:bd:95:f1:38:
         e2:00:f8:48:8e:79:68:19:52:02:24:25:74:58:07:f8:b2:f5:
         f6:e8:db:a0:9b:44:3e:d6:c6:10:65:ed:78:f4:15:db:fd:67:
         7a:5f:00:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----