Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/963a84d1267cd8864f10222e8f156f46373b4d86.roa
File:                     963a84d1267cd8864f10222e8f156f46373b4d86.roa (raw, json)
Hash identifier:          pNYxArUng03xksbr/oT/rZObXy4vwtmzI8YMb1kgHzw=
Subject key identifier:   6B:25:DE:37:F8:49:01:79:83:70:CE:95:AD:6C:15:1E:AE:66:66:3D
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       0D759C
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/963a84d1267cd8864f10222e8f156f46373b4d86.roa
Signing time:             Wed 24 Mar 2021 14:35:12 +0000
ROA not before:           Wed 24 Mar 2021 14:35:11 +0000
ROA not after:            Tue 24 Mar 2026 14:35:11 +0000
asID:                     19429
IP address blocks:        200.119.64.0/18 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882076 (0xd759c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Mar 24 14:35:11 2021 GMT
            Not After : Mar 24 14:35:11 2026 GMT
        Subject: CN=963a84d1267cd8864f10222e8f156f46373b4d86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:15:e4:01:3b:88:5e:e3:bc:9c:5d:89:a4:98:
                    e7:62:66:2d:0f:89:8e:6a:42:71:a8:aa:af:c1:72:
                    29:f8:79:8c:19:b1:e7:e8:e3:f8:e0:87:08:da:d0:
                    32:d3:7d:d4:9e:68:81:6a:2d:7e:e7:b6:ee:69:0c:
                    92:96:1e:e2:92:98:31:15:15:c7:45:78:94:f3:bd:
                    64:fa:57:26:95:69:00:e8:d0:1d:fb:36:7d:e3:1a:
                    a1:48:b6:33:09:20:89:7a:dd:ca:0a:5a:ec:5d:8e:
                    e9:36:08:6e:f1:dd:8e:1f:bb:a8:86:bf:6b:bc:94:
                    fa:03:8c:f8:19:57:10:66:e4:a0:e9:79:32:11:13:
                    24:9e:00:aa:4b:51:8e:9d:9c:36:63:58:70:97:bd:
                    fb:3b:40:1d:c4:e4:4f:79:6c:3f:de:89:1f:ce:76:
                    da:00:e0:93:f6:21:11:f0:b1:86:c6:7d:62:f7:a5:
                    e1:58:68:d2:13:5f:16:58:07:ae:9f:fd:e1:a3:fe:
                    7a:54:aa:d8:57:ed:d1:13:ba:b4:8b:5e:df:04:f2:
                    b0:5e:2c:2c:c3:9f:b9:b3:f4:45:46:56:d6:7b:39:
                    3b:57:78:13:00:a9:cd:20:9d:64:72:b0:95:b4:75:
                    f1:14:85:94:64:91:1f:b9:0d:1d:ac:41:85:cb:9f:
                    d4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:25:DE:37:F8:49:01:79:83:70:CE:95:AD:6C:15:1E:AE:66:66:3D
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/963a84d1267cd8864f10222e8f156f46373b4d86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         e7:38:db:79:79:bd:b9:3c:f9:e1:43:52:f3:56:e1:53:9b:11:
         eb:e1:4f:17:c9:2a:ae:32:51:ac:4e:b6:cb:78:a3:da:d7:92:
         23:fd:77:0b:db:ee:5a:6c:8f:9f:0c:6c:c3:e3:1d:d9:ca:03:
         87:da:27:af:e5:96:44:d7:f2:24:76:e9:f1:e3:58:d9:0e:e8:
         22:99:2d:fa:0b:2a:2a:0e:21:f5:93:83:43:79:44:7a:ff:8d:
         5e:56:67:81:1a:c4:a5:76:7a:d4:59:ea:db:38:8d:99:2f:30:
         10:1c:43:9b:6c:0e:49:44:62:76:4a:c0:e2:42:51:67:1f:76:
         ba:22:5a:df:5d:38:fc:6f:29:5a:68:a7:84:4e:aa:96:e0:6a:
         68:25:cd:64:5e:dd:85:c1:ad:5a:1c:2c:bd:ce:46:30:9c:3a:
         7d:63:d5:58:ee:03:c9:8e:21:a7:d4:e6:5b:73:a2:01:be:35:
         e9:c1:c7:d9:7d:d8:20:f0:b2:67:41:a6:57:cd:d7:79:10:7c:
         4a:63:04:2b:79:b9:1d:2f:f0:f4:61:53:54:28:ff:fc:6c:b3:
         af:02:ad:9e:63:6d:49:06:66:9e:fc:18:4f:ca:ef:2c:75:9f:
         36:03:33:ef:58:5b:a2:cb:98:83:00:84:2f:a8:1e:63:7c:09:
         7a:b1:e5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----