Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/c4f055103b4161bc3e9e3a979b957a39ffbbe351.roa
File:                     c4f055103b4161bc3e9e3a979b957a39ffbbe351.roa (raw, json)
Hash identifier:          iLV1MaKIQDeAghVEDy8KNN0eOLyZrvS1JWAeCgyoxg8=
Subject key identifier:   A4:22:55:B6:0F:99:A1:22:1D:6C:75:70:E6:93:8B:B6:4E:D5:89:A2
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       0D8060
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/c4f055103b4161bc3e9e3a979b957a39ffbbe351.roa
Signing time:             Wed 24 Mar 2021 14:35:12 +0000
ROA not before:           Wed 24 Mar 2021 14:35:11 +0000
ROA not after:            Tue 24 Mar 2026 14:35:11 +0000
asID:                     19429
IP address blocks:        200.11.40.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 884832 (0xd8060)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Mar 24 14:35:11 2021 GMT
            Not After : Mar 24 14:35:11 2026 GMT
        Subject: CN=c4f055103b4161bc3e9e3a979b957a39ffbbe351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:db:6f:56:50:9f:f3:32:0b:64:5a:93:a2:96:
                    07:05:8e:f6:02:e4:fb:79:21:eb:20:ec:b8:0d:cd:
                    2c:ad:d1:6f:b3:37:fd:e3:0e:68:b2:7e:31:34:85:
                    05:a9:c0:88:80:af:5a:bd:c1:3c:f0:ec:5b:8f:1f:
                    6b:44:ed:f1:c7:55:a6:ff:f5:bd:25:1d:36:fd:e5:
                    5c:0c:0f:19:ad:e0:dd:5a:fd:ac:76:33:67:36:3f:
                    89:40:55:87:7b:7a:bf:0b:40:8a:0e:7c:fd:88:58:
                    57:67:66:22:1d:2d:ab:d2:7f:e4:75:bc:dd:b1:17:
                    05:ae:22:5a:de:10:a3:e0:0a:a9:6b:0d:7c:c9:59:
                    9b:f8:ae:a3:4e:55:db:22:c8:9d:08:9f:d8:87:3d:
                    e4:a2:1c:b8:71:74:99:cf:a3:11:7a:05:14:cc:39:
                    ad:ae:10:bd:b3:9b:4f:b1:4b:89:b2:a7:64:8a:81:
                    07:14:fc:76:60:98:c8:97:ed:22:fb:88:6a:ff:04:
                    46:3d:e8:85:b2:60:26:f4:8c:28:c2:c5:51:9a:be:
                    50:9e:9c:95:ec:34:c2:3a:a8:42:15:ae:74:dc:19:
                    2c:d1:b2:52:9e:c9:0b:a9:ab:ae:fd:41:27:4e:bc:
                    59:3e:f3:b7:b4:e3:ef:7f:66:10:00:21:91:bc:d0:
                    c7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:22:55:B6:0F:99:A1:22:1D:6C:75:70:E6:93:8B:B6:4E:D5:89:A2
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/c4f055103b4161bc3e9e3a979b957a39ffbbe351.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b5:75:82:fc:1a:6e:49:90:1b:20:ed:43:ab:1a:e8:be:20:71:
         65:9a:55:8a:7d:54:57:88:35:38:56:d0:2c:75:24:2a:d3:e6:
         2f:3e:a7:20:07:02:b1:bc:8d:73:34:c9:86:32:fc:6f:60:4f:
         25:a2:5f:71:66:d2:b8:68:be:c4:81:0f:53:8e:66:87:39:83:
         fc:28:d8:bc:68:36:3c:ee:7f:75:62:07:90:62:6a:dd:bf:e8:
         19:08:cf:4e:b8:10:a4:f2:d4:a5:02:08:5b:5f:63:cf:c3:38:
         ef:b9:cc:46:c3:04:23:d8:5d:20:8c:35:f6:3b:cc:68:de:8b:
         2a:94:15:3f:d8:a8:73:f5:5e:1f:14:bd:30:7b:30:ac:15:a4:
         ef:33:71:bd:3b:0f:1f:3c:c6:e3:8a:b2:ee:9a:15:6f:14:5e:
         b2:76:a7:db:cc:19:cb:67:02:2b:92:3d:b2:bf:94:79:3c:67:
         5f:b1:36:1d:75:b3:55:63:da:8d:12:98:36:9f:71:c8:77:0b:
         74:05:29:d2:20:0e:26:53:41:75:91:60:10:e4:8a:f4:02:38:
         16:6b:c3:78:f7:2b:ed:fe:02:39:ac:31:a6:42:11:86:a8:d8:
         0e:7f:67:db:23:4b:be:f7:7e:d6:df:9b:15:23:92:13:0d:37:
         7b:db:44:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----