Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/badee91a-35c0-4634-be9b-5838535d4a02/dccff15077f83e4a4661d98a17460f10cf861e33.roa
File:                     dccff15077f83e4a4661d98a17460f10cf861e33.roa (raw, json)
Hash identifier:          7MUNfJDoVpLh/UD378Ohj5Yi6YYHXtFiFhunRA1PO50=
Subject key identifier:   71:FB:C4:95:0A:3E:01:59:DF:55:4E:6D:C2:97:F7:1F:F6:EE:2C:83
Certificate issuer:       /CN=71a464f59d46ac27cdbcbb0efe6e417e3717efd0
Certificate serial:       06273B
Authority key identifier: 50:06:D9:00:0E:20:81:07:C1:3A:6B:1F:EA:9B:3D:4C:9F:EF:69:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71a464f59d46ac27cdbcbb0efe6e417e3717efd0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/badee91a-35c0-4634-be9b-5838535d4a02/dccff15077f83e4a4661d98a17460f10cf861e33.roa
Signing time:             Wed 07 Jun 2023 20:36:29 +0000
ROA not before:           Tue 06 Jun 2023 20:36:29 +0000
ROA not after:            Sat 07 Jun 2025 20:36:29 +0000
asID:                     8026
IP address blocks:        200.4.16.0/20 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403259 (0x6273b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71a464f59d46ac27cdbcbb0efe6e417e3717efd0
        Validity
            Not Before: Jun  6 20:36:29 2023 GMT
            Not After : Jun  7 20:36:29 2025 GMT
        Subject: CN=dccff15077f83e4a4661d98a17460f10cf861e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:21:88:6e:d3:1b:13:97:7b:f5:01:6a:cd:88:
                    2f:28:6f:76:10:a2:93:32:f8:27:73:ba:8a:74:33:
                    84:d5:c0:d8:b0:30:2b:db:4c:34:04:22:be:72:21:
                    29:c0:dc:1f:0a:f1:98:d1:72:a3:3a:01:f7:35:10:
                    57:31:55:30:5b:29:74:48:81:d9:38:e8:39:a6:3a:
                    fd:a4:b5:d0:48:e7:4b:17:b2:db:94:82:1a:63:53:
                    01:2e:ee:dd:77:11:cd:64:5d:26:0b:93:19:ef:da:
                    98:a2:c8:81:0f:f8:84:08:7b:a7:30:0e:94:3a:80:
                    3a:4c:9a:6d:5e:87:84:6b:2d:c9:5b:67:99:6f:34:
                    7e:60:40:4d:67:11:e1:90:00:20:ef:4b:73:14:fa:
                    47:66:18:7b:3c:82:23:06:af:ff:be:ed:e3:a2:73:
                    fe:e9:9b:04:8c:fc:7d:ff:e8:c8:c4:22:07:6f:8e:
                    25:14:4d:af:a0:96:88:68:ca:a4:53:38:09:48:a0:
                    79:07:e8:f9:68:f4:f6:a4:53:99:5a:09:11:7a:4c:
                    77:08:98:21:92:5a:d5:c3:f1:fd:e5:70:04:7a:51:
                    9a:f4:c5:6d:10:96:98:a0:d8:81:48:29:8f:31:c5:
                    5b:08:5d:03:d0:30:ae:24:28:d7:32:68:e6:e1:cc:
                    c0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FB:C4:95:0A:3E:01:59:DF:55:4E:6D:C2:97:F7:1F:F6:EE:2C:83
            X509v3 Authority Key Identifier:
                keyid:50:06:D9:00:0E:20:81:07:C1:3A:6B:1F:EA:9B:3D:4C:9F:EF:69:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71a464f59d46ac27cdbcbb0efe6e417e3717efd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/badee91a-35c0-4634-be9b-5838535d4a02/dccff15077f83e4a4661d98a17460f10cf861e33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/badee91a-35c0-4634-be9b-5838535d4a02/71a464f59d46ac27cdbcbb0efe6e417e3717efd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.4.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         56:6f:39:85:96:45:dd:ee:fa:67:70:5a:dd:a3:3f:f5:5c:d4:
         38:97:46:42:2a:6b:e3:6d:c5:c6:33:a6:a0:9b:95:95:c4:26:
         dd:2e:72:1b:17:8d:48:f9:e9:a6:18:ac:ae:65:a2:bb:98:33:
         fb:d1:e0:b6:88:a9:3c:fc:b4:2c:b2:ad:2b:5a:c2:ed:75:65:
         56:84:c7:f9:e1:d0:d8:48:7d:98:d6:ee:5e:af:3b:fe:4f:0b:
         80:a2:43:5e:dc:ef:4b:f3:45:03:e8:ca:60:ba:df:54:08:e2:
         bf:93:a9:02:ac:49:38:09:83:81:54:bd:88:b0:45:13:46:e0:
         2d:1f:ef:f6:c8:af:d3:29:b3:b6:ca:55:6e:fe:d0:42:ea:d5:
         11:42:d1:f1:ef:17:16:a3:55:45:a0:4e:0d:25:9c:33:a8:2d:
         0a:71:84:c9:5c:23:5c:a9:2e:f4:6e:6d:8a:5f:0d:42:5c:ba:
         64:54:b3:c7:31:90:07:e8:bc:3c:39:2f:78:ef:2b:07:de:c6:
         e0:f2:f4:6d:31:98:5f:3d:ff:a5:21:c0:35:5a:02:16:ba:a6:
         da:5b:65:fb:98:0c:0e:3f:82:23:bf:e6:27:79:d9:84:6d:ff:
         42:e3:ba:0d:29:85:0d:ad:c8:ba:c1:92:6b:ab:62:86:f9:1f:
         5f:70:fa:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----