Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/bb5b7469abdf6df50c82a5aa8d5a084e422b1def.roa
File:                     bb5b7469abdf6df50c82a5aa8d5a084e422b1def.roa (raw, json)
Hash identifier:          5jOx/laCPlO1ZSZ0pZfH64W9SiVzR8bOPr7NFxGnKnM=
Subject key identifier:   BC:68:51:54:82:9E:61:0E:FD:7A:1A:57:5C:7E:E1:E5:74:23:CD:A4
Certificate issuer:       /CN=6e4a182506cc3d6396e00aa2873b9f3c87963395
Certificate serial:       0D7700
Authority key identifier: FC:AE:D6:FE:15:E0:50:9A:08:BB:73:77:2C:E4:D9:28:F4:5D:16:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e4a182506cc3d6396e00aa2873b9f3c87963395.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/bb5b7469abdf6df50c82a5aa8d5a084e422b1def.roa
Signing time:             Wed 24 Mar 2021 14:39:17 +0000
ROA not before:           Wed 24 Mar 2021 14:39:17 +0000
ROA not after:            Tue 24 Mar 2026 14:39:17 +0000
asID:                     19114
IP address blocks:        200.14.34.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882432 (0xd7700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e4a182506cc3d6396e00aa2873b9f3c87963395
        Validity
            Not Before: Mar 24 14:39:17 2021 GMT
            Not After : Mar 24 14:39:17 2026 GMT
        Subject: CN=bb5b7469abdf6df50c82a5aa8d5a084e422b1def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2b:24:8e:9a:87:63:41:94:0d:26:1f:f2:95:
                    7e:8a:f7:28:b6:cc:cd:7a:1a:ff:24:9f:aa:97:72:
                    27:64:24:fb:20:f7:cb:07:19:05:58:ea:2d:3b:1d:
                    af:44:0c:07:61:9d:19:78:07:11:8b:ce:39:c6:e2:
                    c5:59:3a:b1:26:23:68:47:64:35:31:2c:86:ca:f1:
                    01:78:c6:94:51:43:52:69:19:81:af:68:e1:f3:4a:
                    1d:db:69:db:b5:35:cb:7d:28:1a:17:5a:51:2c:ec:
                    d4:f8:70:c0:52:7b:d2:a2:6c:bd:b7:9d:e4:15:29:
                    8e:eb:8c:8c:ab:24:e8:9e:0a:b2:f9:9e:7f:90:ed:
                    17:6c:ea:52:c9:4f:b6:58:77:ce:67:38:97:ff:d8:
                    b8:54:57:11:58:b0:10:00:eb:14:29:9f:a2:40:64:
                    10:c3:a4:23:58:f0:91:e5:4a:73:5e:82:a2:d5:5b:
                    83:0e:1a:6d:d4:ed:94:1e:02:b2:47:b0:7a:0d:0f:
                    9d:d6:5c:73:70:39:fc:11:dd:20:05:82:19:b4:4f:
                    1a:0f:13:97:9f:9c:16:5d:ff:3c:18:36:8f:3d:98:
                    d3:81:c2:a4:3c:69:b4:f2:97:ad:9c:e8:b7:42:a4:
                    97:b7:2c:e6:ce:ab:3c:c0:8c:fe:aa:f0:e1:cc:b9:
                    29:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:68:51:54:82:9E:61:0E:FD:7A:1A:57:5C:7E:E1:E5:74:23:CD:A4
            X509v3 Authority Key Identifier:
                keyid:FC:AE:D6:FE:15:E0:50:9A:08:BB:73:77:2C:E4:D9:28:F4:5D:16:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e4a182506cc3d6396e00aa2873b9f3c87963395.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/bb5b7469abdf6df50c82a5aa8d5a084e422b1def.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/6e4a182506cc3d6396e00aa2873b9f3c87963395.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:04:55:b7:4c:02:86:8b:a8:71:46:17:24:8f:3e:8d:0b:e4:
         a8:db:7c:62:45:ed:35:29:5d:ce:e0:ae:38:76:17:72:18:0d:
         1a:1f:35:cd:88:ab:69:4c:b9:c5:42:4a:07:9a:82:ce:19:f0:
         20:32:c9:2d:4e:d3:5b:b2:96:1d:fb:f8:02:9e:b7:ad:5b:e8:
         00:9d:04:bf:77:c8:64:15:3a:21:42:74:dc:d4:2c:85:bb:5f:
         f1:db:87:23:68:d9:d0:94:2e:d8:d3:82:49:fd:1d:d0:15:73:
         04:8a:2d:ee:98:bc:a3:b8:1a:57:fd:96:62:b9:8b:74:87:ba:
         6a:c5:91:f1:54:ca:29:6c:11:de:1d:3e:34:75:e2:27:8e:91:
         d4:4c:cc:18:98:4b:86:b1:dc:40:9e:02:dd:0c:0a:35:43:3c:
         34:67:b3:55:76:ab:c3:ab:75:3b:38:42:a7:9c:48:da:6f:50:
         a9:76:9a:42:f4:f9:9c:c2:29:1f:aa:f1:62:a9:1e:2e:ef:a1:
         00:da:db:72:d7:e3:b3:54:b6:36:4f:37:23:28:9f:c1:5e:1c:
         45:9e:df:d7:16:55:50:03:66:29:81:ea:2d:fa:63:f5:7d:de:
         d5:3c:eb:5e:9d:7f:2b:99:c1:49:77:f7:19:7e:1e:f9:aa:44:
         12:1a:22:e3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDXcAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZl
NGExODI1MDZjYzNkNjM5NmUwMGFhMjg3M2I5ZjNjODc5NjMzOTUwHhcNMjEwMzI0
MTQzOTE3WhcNMjYwMzI0MTQzOTE3WjAzMTEwLwYDVQQDEyhiYjViNzQ2OWFiZGY2
ZGY1MGM4MmE1YWE4ZDVhMDg0ZTQyMmIxZGVmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuiskjpqHY0GUDSYf8pV+ivcotszNehr/JJ+ql3InZCT7IPfL
BxkFWOotOx2vRAwHYZ0ZeAcRi845xuLFWTqxJiNoR2Q1MSyGyvEBeMaUUUNSaRmB
r2jh80od22nbtTXLfSgaF1pRLOzU+HDAUnvSomy9t53kFSmO64yMqyTongqy+Z5/
kO0XbOpSyU+2WHfOZziX/9i4VFcRWLAQAOsUKZ+iQGQQw6QjWPCR5UpzXoKi1VuD
Dhpt1O2UHgKyR7B6DQ+d1lxzcDn8Ed0gBYIZtE8aDxOXn5wWXf88GDaPPZjTgcKk
PGm08petnOi3QqSXtyzmzqs8wIz+qvDhzLkpmQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLxoUVSCnmEO/XoaV1x+4eV0I82kMB8GA1UdIwQYMBaAFPyu1v4V4FCaCLtz
dyzk2Sj0XRblMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmU0YTE4
MjUwNmNjM2Q2Mzk2ZTAwYWEyODczYjlmM2M4Nzk2MzM5NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjcyN2YwZWMtODIxYy00NDNlLWI0YzAtZjM4YTA4
M2IzM2NhL2JiNWI3NDY5YWJkZjZkZjUwYzgyYTVhYThkNWEwODRlNDIyYjFkZWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iNzI3ZjBlYy04MjFjLTQ0M2UtYjRjMC1mMzhh
MDgzYjMzY2EvNmU0YTE4MjUwNmNjM2Q2Mzk2ZTAwYWEyODczYjlmM2M4Nzk2MzM5
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgOIjANBgkqhkiG9w0BAQsFAAOCAQEAFARVt0wChouocUYX
JI8+jQvkqNt8YkXtNSldzuCuOHYXchgNGh81zYiraUy5xUJKB5qCzhnwIDLJLU7T
W7KWHfv4Ap63rVvoAJ0Ev3fIZBU6IUJ03NQshbtf8duHI2jZ0JQu2NOCSf0d0BVz
BIot7pi8o7gaV/2WYrmLdIe6asWR8VTKKWwR3h0+NHXiJ46R1EzMGJhLhrHcQJ4C
3QwKNUM8NGezVXarw6t1OzhCp5xI2m9QqXaaQvT5nMIpH6rxYqkeLu+hANrbctfj
s1S2Nk83IyifwV4cRZ7f1xZVUANmKYHqLfpj9X3e1TzrXp1/K5nBSXf3GX4e+apE
Ehoi4w==
-----END CERTIFICATE-----