Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/99bbdd25bb5393d90f8c219cb77bcf9a72278035.roa
File:                     99bbdd25bb5393d90f8c219cb77bcf9a72278035.roa (raw, json)
Hash identifier:          3Iw6NIzv5FGrGeZ9SirSs6TZXaHygyVhC14i4Jn+UY4=
Subject key identifier:   60:35:AA:09:3B:A4:5B:37:DF:D4:0D:14:05:3D:4F:A0:27:B6:E1:E8
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       0D8FF2
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/99bbdd25bb5393d90f8c219cb77bcf9a72278035.roa
Signing time:             Wed 24 Mar 2021 14:35:13 +0000
ROA not before:           Wed 24 Mar 2021 14:35:11 +0000
ROA not after:            Tue 24 Mar 2026 14:35:11 +0000
asID:                     19429
IP address blocks:        200.119.32.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888818 (0xd8ff2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Mar 24 14:35:11 2021 GMT
            Not After : Mar 24 14:35:11 2026 GMT
        Subject: CN=99bbdd25bb5393d90f8c219cb77bcf9a72278035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:39:f9:18:e0:43:0e:0a:a1:3f:30:42:0c:eb:
                    a0:49:6d:fc:48:fb:c3:45:67:8e:27:5f:4f:60:04:
                    09:38:87:1e:43:59:3a:04:ff:d3:15:12:e9:c9:49:
                    75:09:46:ed:d1:dd:d0:be:2a:1d:32:82:f7:74:80:
                    a2:f1:a1:e9:81:6e:5c:e8:10:11:c2:84:24:60:31:
                    24:7c:78:12:04:29:d0:49:ec:64:e4:c3:eb:ff:10:
                    6d:97:46:0b:5a:01:7d:66:70:34:41:55:9e:11:7d:
                    c6:b2:7b:ee:f7:d0:06:74:a3:13:31:62:e4:03:f1:
                    c0:67:e9:93:a6:24:72:9b:2d:70:0d:66:cb:d9:68:
                    0e:5f:4d:a5:09:ab:eb:25:40:aa:86:69:9d:6b:41:
                    b2:cc:be:01:b5:e6:7d:0c:0d:ed:51:05:c3:ce:fa:
                    ed:27:8c:34:14:ef:39:07:61:3b:1a:37:cf:ef:73:
                    27:a8:ff:94:2c:53:3d:94:4f:24:17:71:47:94:f2:
                    1f:56:00:2e:c2:23:97:e1:61:25:ad:db:2e:a4:5f:
                    d9:98:92:12:ad:24:65:82:a5:b1:4b:2b:df:44:4a:
                    78:98:f5:56:d0:68:27:6f:01:58:a6:4d:99:fa:39:
                    df:92:c2:a3:17:59:07:6f:cc:d7:40:f5:49:28:e5:
                    4e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:35:AA:09:3B:A4:5B:37:DF:D4:0D:14:05:3D:4F:A0:27:B6:E1:E8
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/99bbdd25bb5393d90f8c219cb77bcf9a72278035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         25:07:85:68:67:5d:e1:0c:42:f1:23:4a:f6:e9:fb:cb:a1:66:
         4c:04:d4:2f:9d:55:21:3c:fa:1c:b2:62:be:48:da:53:24:e1:
         3e:6f:c3:05:f6:01:72:05:1d:58:7f:7c:28:67:c8:ee:d6:dd:
         8c:38:41:56:94:61:99:7b:3b:c4:a8:5a:e7:09:01:d2:85:5f:
         d6:d1:da:70:20:03:4b:4a:24:9b:fb:a5:4a:76:3a:09:13:f0:
         43:fa:6b:19:06:52:9d:85:25:20:1f:5e:0f:0e:a9:d8:ed:cf:
         5d:1a:b2:56:40:e8:b7:ba:ea:64:70:58:d8:af:37:d5:60:bf:
         4c:85:d4:db:cb:91:ab:c6:14:9b:64:63:4e:8e:39:fe:68:97:
         d2:ca:f0:21:69:24:bc:26:15:f3:de:d3:c0:14:bd:b4:8f:a7:
         93:a3:cf:4e:30:d2:fc:47:c1:64:6d:1d:2d:1d:dd:ef:05:0a:
         95:a4:59:19:a6:ea:2c:fd:02:84:3a:b4:67:3e:49:d3:44:10:
         d8:3a:21:2a:05:8f:b5:71:71:74:db:6e:06:a7:73:0a:e1:a7:
         4b:60:80:fb:84:de:3e:71:4e:a4:a4:27:41:f4:58:97:df:76:
         ae:9f:2f:1f:a0:0f:a5:9e:81:27:63:49:88:f7:cf:49:c3:88:
         b0:b6:f2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----