Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/bfe4401e605f334fdfb77a2dcd8013598493a925.roa
File:                     bfe4401e605f334fdfb77a2dcd8013598493a925.roa (raw, json)
Hash identifier:          SCKm0wUOxfYikRXB4SqaEhTf5GEx8176Ofu+jYn+3Qs=
Subject key identifier:   9C:26:25:B3:41:25:8B:29:87:FA:51:D0:08:A9:C0:17:9D:7A:84:F0
Certificate issuer:       /CN=ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e
Certificate serial:       1FBED6
Authority key identifier: 3F:46:A7:68:94:87:EC:8F:A5:6D:E1:97:A4:70:6E:9F:46:71:F0:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/bfe4401e605f334fdfb77a2dcd8013598493a925.roa
Signing time:             Thu 27 Apr 2023 14:39:15 +0000
ROA not before:           Wed 26 Apr 2023 14:39:15 +0000
ROA not after:            Sun 27 Apr 2025 14:39:15 +0000
asID:                     28089
IP address blocks:        200.35.142.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2080470 (0x1fbed6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e
        Validity
            Not Before: Apr 26 14:39:15 2023 GMT
            Not After : Apr 27 14:39:15 2025 GMT
        Subject: CN=bfe4401e605f334fdfb77a2dcd8013598493a925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8a:17:1b:86:76:fb:5a:ce:ea:95:9b:4a:37:
                    0b:f6:26:7c:bc:58:57:03:75:be:67:f9:d0:46:c6:
                    99:e5:69:49:a0:b7:1f:13:51:31:9b:bf:ee:b9:8e:
                    a7:c7:ac:dd:42:8a:37:fc:5d:77:53:39:fa:b7:ad:
                    b7:28:20:c6:da:ac:f1:70:5a:01:81:15:f2:30:f9:
                    6e:7d:f6:90:38:99:4b:fa:8b:7a:12:34:ba:d0:ec:
                    d4:bd:5e:6b:e7:b7:f8:fc:81:47:bb:ac:53:fa:60:
                    ee:f6:16:45:b1:ac:84:4c:ae:50:d3:83:43:2b:52:
                    87:ee:eb:01:aa:94:fe:33:ab:ea:2e:9a:61:78:38:
                    23:4a:30:dd:e1:70:78:11:81:5c:33:9d:67:29:be:
                    7f:4e:5f:a2:92:6c:7e:b1:08:b3:cc:1e:07:f0:f7:
                    a3:e2:36:b5:9d:fe:c6:06:b9:97:e4:03:4f:71:9b:
                    bd:49:45:b6:d4:fb:67:f7:80:7d:e5:aa:54:95:7a:
                    c2:41:3f:8f:1d:f4:4e:d6:69:cc:f7:b0:87:c6:34:
                    7d:b7:58:96:85:91:33:be:17:55:af:4e:84:1f:8b:
                    8c:f1:1a:bb:64:59:e3:bc:a2:d3:4d:cf:5c:3b:cc:
                    af:1a:0d:01:35:18:41:1c:29:8e:17:66:7e:7e:b9:
                    46:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:26:25:B3:41:25:8B:29:87:FA:51:D0:08:A9:C0:17:9D:7A:84:F0
            X509v3 Authority Key Identifier:
                keyid:3F:46:A7:68:94:87:EC:8F:A5:6D:E1:97:A4:70:6E:9F:46:71:F0:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/bfe4401e605f334fdfb77a2dcd8013598493a925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:f1:b6:07:a7:45:a0:ba:63:ca:f8:01:b9:ff:16:b0:a5:4b:
         70:8d:50:41:e7:42:d4:aa:81:35:b5:a7:9d:71:b7:ef:ba:9d:
         0c:e0:a9:c9:84:b6:5f:51:e8:21:b9:00:55:24:86:09:b3:6d:
         30:c0:8a:ce:d7:23:3c:f6:b3:10:bf:2a:88:c3:59:d0:d5:2a:
         78:fa:24:78:94:d5:cf:97:ff:44:89:56:be:da:ce:80:a3:47:
         e5:33:7c:58:fc:4a:65:00:82:5b:cd:67:1a:0a:1f:04:b0:1e:
         b5:dd:10:bd:24:91:05:03:df:5e:34:45:ba:99:dd:42:b9:0e:
         b3:2c:aa:1c:52:9d:6b:37:75:bd:a9:07:44:78:9b:96:88:1a:
         b6:52:10:44:f2:de:b7:bc:f5:ce:70:ee:b1:37:c0:64:d0:b5:
         fd:28:52:c5:13:3f:78:9d:14:1c:40:d4:37:25:ea:6e:10:48:
         c8:dd:14:89:f0:b2:23:6f:a3:db:3b:c4:bc:a2:8b:db:15:c7:
         7f:dd:4e:b9:f6:a7:22:da:61:94:9f:ed:04:dc:71:04:1b:73:
         ff:07:63:2b:e0:76:f0:09:c1:31:0c:b7:f5:4a:e0:8b:02:2a:
         72:ed:6b:8f:6e:b2:aa:62:38:66:fa:4d:53:48:22:fd:29:06:
         e0:61:0c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----