Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/2e70c50d69fd0b21bad71ca3bba2a35760006197.roa
File:                     2e70c50d69fd0b21bad71ca3bba2a35760006197.roa (raw, json)
Hash identifier:          9prsDYvK1R/9I2mff05YHckT0+pb+FXcFwz02Mo1X0Y=
Subject key identifier:   EE:5C:17:90:81:F1:90:32:F3:2F:C3:64:1C:E7:11:74:DC:13:44:95
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       1CF67E
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/2e70c50d69fd0b21bad71ca3bba2a35760006197.roa
Signing time:             Fri 30 Sep 2022 01:55:21 +0000
ROA not before:           Tue 27 Sep 2022 14:14:13 +0000
ROA not after:            Fri 27 Sep 2024 14:14:13 +0000
asID:                     3816
IP address blocks:        200.89.208.0/20 maxlen: 20
                          200.89.210.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1898110 (0x1cf67e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Sep 27 14:14:13 2022 GMT
            Not After : Sep 27 14:14:13 2024 GMT
        Subject: CN=2e70c50d69fd0b21bad71ca3bba2a35760006197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:55:91:13:49:f2:2e:22:96:3a:ee:9f:0e:c8:
                    c1:56:c2:4b:d8:c6:38:d7:ee:84:c1:eb:60:db:85:
                    d5:76:72:55:b3:26:02:3f:01:4f:a1:d4:c8:c4:fd:
                    06:69:1d:98:2b:e1:d0:9c:4a:b9:4d:5a:60:75:3a:
                    c9:1c:fa:de:0a:7b:46:83:30:f7:e9:03:86:c6:91:
                    52:4f:7e:ef:20:60:a7:58:77:a1:80:09:bf:0d:44:
                    e1:43:b4:12:02:43:15:02:2e:c7:aa:04:ed:92:d0:
                    2e:63:54:62:89:fa:44:56:5e:af:df:5a:63:34:2b:
                    14:f9:af:50:39:d1:73:66:65:26:79:e5:df:b4:4f:
                    cf:cb:44:1e:33:cc:f9:9a:86:27:5b:cc:3e:9b:59:
                    d6:9f:ad:c9:c6:bd:c8:c8:60:1e:6e:26:db:a1:4f:
                    c2:52:25:9f:0b:b9:d5:7d:02:a3:fc:cb:5b:a1:82:
                    8b:06:51:e1:d3:93:83:45:9d:7a:80:dc:4a:62:43:
                    81:9f:15:77:e9:f1:55:a6:42:15:cd:fb:ac:c3:86:
                    6f:d2:ee:0c:68:90:44:f8:d6:f8:b4:06:6d:ac:c7:
                    81:0b:8a:a5:c9:fb:f8:38:ed:05:6e:d0:56:70:cc:
                    07:f8:0d:bc:26:4e:44:5b:6b:dc:9a:1e:65:30:e3:
                    9f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5C:17:90:81:F1:90:32:F3:2F:C3:64:1C:E7:11:74:DC:13:44:95
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/2e70c50d69fd0b21bad71ca3bba2a35760006197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.89.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         21:db:59:09:73:58:16:83:e2:84:94:37:17:96:1e:04:09:fe:
         b3:90:ef:bc:e0:3b:c2:2c:a5:aa:27:75:44:b4:df:73:c7:fd:
         d4:97:9e:d2:29:51:7e:50:74:ff:74:59:cb:b0:95:9b:22:1c:
         dd:23:3a:72:d9:08:83:fb:8f:56:bc:c1:95:97:6f:62:66:40:
         3b:ce:d8:29:6a:11:de:12:51:36:19:7d:70:89:e0:db:fb:8e:
         2d:04:a9:f1:50:fc:cb:8e:50:96:38:85:88:18:46:09:18:b5:
         98:40:cc:cf:e5:2c:42:67:78:4c:84:ef:25:df:63:8e:35:fb:
         6a:42:be:1f:00:c0:b1:7a:da:f8:ba:11:02:f9:88:8d:45:87:
         de:12:05:9e:5b:c7:19:20:88:b2:c6:8e:d9:53:19:79:2f:77:
         13:e9:2e:3d:d2:13:90:b6:2c:4e:d7:0d:fc:9f:a1:15:0b:72:
         c4:f6:b9:6c:20:4f:00:c7:a3:42:7f:85:37:9a:94:d4:41:b3:
         19:bf:61:37:5f:49:98:c8:8e:42:93:c7:4e:5a:7e:04:8f:a0:
         0e:24:da:f4:87:b0:83:da:3b:af:c0:82:ce:cf:d4:42:f3:f7:
         74:69:1a:5b:b8:6f:2d:60:8e:fc:17:a3:5f:a0:55:3b:bf:55:
         1b:dc:b0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----