Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/09b98aedf4e240cc63f7dab15ebad8e3f7a993d4.roa
File:                     09b98aedf4e240cc63f7dab15ebad8e3f7a993d4.roa (raw, json)
Hash identifier:          JoHndYpzUuwb/+8fMPWcSwWIz0ErImNI65y2CRAsL9o=
Subject key identifier:   52:B4:F2:28:08:49:C9:64:8B:32:F7:15:53:97:88:3D:98:4D:C7:FF
Certificate issuer:       /CN=d407c72537519f11553c7ee9eb83baa042334380
Certificate serial:       11B53A
Authority key identifier: 44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/09b98aedf4e240cc63f7dab15ebad8e3f7a993d4.roa
Signing time:             Fri 30 Jun 2023 17:33:40 +0000
ROA not before:           Thu 29 Jun 2023 17:33:34 +0000
ROA not after:            Fri 30 Jun 2028 17:33:34 +0000
asID:                     834
IP address blocks:        200.26.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1160506 (0x11b53a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d407c72537519f11553c7ee9eb83baa042334380
        Validity
            Not Before: Jun 29 17:33:34 2023 GMT
            Not After : Jun 30 17:33:34 2028 GMT
        Subject: CN=09b98aedf4e240cc63f7dab15ebad8e3f7a993d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ee:30:6c:1b:e2:4c:18:43:39:4a:ff:27:a5:
                    75:4a:64:5b:fa:51:79:0a:a4:ca:a5:a9:6c:0d:8c:
                    94:b7:37:99:41:f8:38:a4:14:14:df:68:2a:d9:53:
                    26:76:d0:6f:f5:5c:0a:d7:0e:84:63:20:3c:c7:10:
                    23:8f:74:d2:e6:35:1b:d3:d4:b4:e7:07:54:0d:83:
                    3a:c6:3d:6c:18:cf:9f:08:64:97:42:e8:28:92:be:
                    6d:54:90:87:a9:c4:33:30:e3:55:7d:9e:66:39:50:
                    50:0f:06:40:ec:13:3c:23:6b:cb:d2:1c:b8:57:37:
                    9f:2a:be:76:e0:f6:e5:fe:74:71:3f:e5:98:be:63:
                    c8:34:c6:0d:5e:7d:c8:ca:f9:a9:56:aa:8e:95:70:
                    3f:5a:46:a8:b8:c2:26:22:59:67:b6:0b:a6:93:f1:
                    28:6c:4b:a7:8d:f7:87:37:1b:7f:72:62:e1:0a:fe:
                    a9:93:43:cf:cd:50:e9:c4:1a:7e:77:0e:ce:9e:c3:
                    87:ee:9e:9f:78:a9:f1:d8:69:bb:30:77:b7:dd:ee:
                    56:26:13:61:c0:26:9a:e9:ec:be:2c:05:7d:df:7d:
                    91:4a:4c:02:7c:c8:c8:7f:32:ac:7b:b0:a4:47:c0:
                    1b:d6:4f:7a:df:82:e2:b3:68:16:40:b8:9e:50:13:
                    53:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B4:F2:28:08:49:C9:64:8B:32:F7:15:53:97:88:3D:98:4D:C7:FF
            X509v3 Authority Key Identifier:
                keyid:44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/09b98aedf4e240cc63f7dab15ebad8e3f7a993d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/d407c72537519f11553c7ee9eb83baa042334380.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:40:59:21:46:4a:65:50:11:5b:2f:f8:9e:ad:2a:6f:09:4b:
         ec:95:6a:98:d1:99:86:70:14:bc:ae:c7:e7:77:58:e3:01:14:
         cb:a1:0d:85:8b:28:7b:a9:db:44:cc:8c:40:f6:81:56:04:c5:
         10:c9:39:69:eb:f6:32:f8:66:a1:08:72:fc:59:7e:ef:60:89:
         18:01:ab:c4:bf:02:69:e8:f8:c3:de:31:15:f0:6d:9b:18:b6:
         53:39:79:73:0b:fa:4d:d9:29:18:7f:a3:9d:ee:a5:77:11:3c:
         aa:30:68:fd:23:f5:65:6b:ac:1c:60:db:d4:e8:76:60:27:ff:
         0d:8e:b3:19:e2:a2:f6:4a:da:82:aa:30:ab:02:63:0c:58:61:
         3c:7b:00:21:f2:00:c0:87:e2:df:6f:46:f4:d6:d5:b6:fe:61:
         c7:dd:7d:e7:7f:60:d7:58:49:e6:f1:10:ce:17:17:17:d0:9e:
         85:95:f6:a2:6b:74:bd:f0:f9:09:70:d9:d5:35:15:88:31:45:
         80:0d:ae:36:59:ca:0d:48:ff:e8:9b:69:64:dc:1b:2d:d1:a4:
         54:b4:ae:01:20:ac:34:5a:11:6d:26:69:8c:dc:81:6f:64:0a:
         5f:d4:b9:88:d6:36:78:b0:05:8c:f6:e7:18:e7:48:f2:ba:24:
         9b:00:f0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----