Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cc057650-a151-4a96-beb3-43bd19253c51/49a652206d983351e187adda062520cf77683913.roa
File:                     49a652206d983351e187adda062520cf77683913.roa (raw, json)
Hash identifier:          iGFzq+hdU7wKScrL7fiCiEla+iLFx0Jr2doynMjJ2Nk=
Subject key identifier:   D0:89:FA:93:8A:7E:B1:26:6B:90:AD:08:CC:A4:59:30:77:40:35:E3
Certificate issuer:       /CN=c9f9959a4af7ed016956f8404136fa80a861d193
Certificate serial:       0BDFF0
Authority key identifier: ED:B7:A8:9E:B4:8C:3B:84:03:6E:7C:A4:04:2F:3B:62:67:9F:AB:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c9f9959a4af7ed016956f8404136fa80a861d193.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cc057650-a151-4a96-beb3-43bd19253c51/49a652206d983351e187adda062520cf77683913.roa
Signing time:             Wed 24 Mar 2021 14:38:04 +0000
ROA not before:           Wed 24 Mar 2021 14:38:04 +0000
ROA not after:            Tue 24 Mar 2026 14:38:04 +0000
asID:                     27725
IP address blocks:        200.0.24.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 778224 (0xbdff0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9f9959a4af7ed016956f8404136fa80a861d193
        Validity
            Not Before: Mar 24 14:38:04 2021 GMT
            Not After : Mar 24 14:38:04 2026 GMT
        Subject: CN=49a652206d983351e187adda062520cf77683913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8d:56:02:eb:9d:26:0a:2d:fe:4e:bc:57:de:
                    e0:8d:fe:89:28:d4:f0:90:97:0a:7b:15:8f:65:aa:
                    c1:34:ef:60:fb:94:83:26:b0:e5:b6:0c:cb:ea:8e:
                    37:3c:8f:42:43:c9:28:76:13:41:00:5b:59:ba:44:
                    3d:b6:a0:d0:38:89:c5:82:20:27:73:a5:f9:cd:2c:
                    d3:27:a4:d7:7f:99:32:c0:3d:4b:46:7e:b0:9c:ed:
                    28:93:59:34:24:65:91:16:b8:0f:d9:4e:db:2b:a6:
                    a4:07:47:48:ea:80:15:e9:48:b2:20:46:7d:b4:a7:
                    e0:27:c1:ed:d9:13:52:af:3f:96:3a:d9:dd:43:82:
                    cc:96:ad:ef:16:ea:13:a7:15:dd:8c:95:99:99:6e:
                    db:a2:8b:72:78:4b:d0:31:c1:d0:42:1d:68:f3:32:
                    4c:30:e1:4e:e1:62:99:5b:0b:c7:e8:b5:3c:9e:f1:
                    fa:70:94:a4:b6:23:d6:17:07:5d:1c:14:d4:0c:68:
                    af:a7:a0:f5:00:23:f2:81:b0:71:af:10:58:a9:70:
                    fa:63:eb:97:55:1d:24:87:23:c2:89:c6:25:6b:ee:
                    6a:1e:5e:71:c9:b7:19:f1:b7:16:3d:ce:27:c2:79:
                    1f:df:8e:96:a7:5f:b1:67:ef:db:91:48:37:24:a0:
                    1d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:89:FA:93:8A:7E:B1:26:6B:90:AD:08:CC:A4:59:30:77:40:35:E3
            X509v3 Authority Key Identifier:
                keyid:ED:B7:A8:9E:B4:8C:3B:84:03:6E:7C:A4:04:2F:3B:62:67:9F:AB:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c9f9959a4af7ed016956f8404136fa80a861d193.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cc057650-a151-4a96-beb3-43bd19253c51/49a652206d983351e187adda062520cf77683913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cc057650-a151-4a96-beb3-43bd19253c51/c9f9959a4af7ed016956f8404136fa80a861d193.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:ed:e5:f9:a2:60:a8:53:09:64:50:b9:dd:62:f9:12:ea:39:
         27:36:b7:5b:55:40:4c:83:70:3d:be:17:b2:07:d0:ff:53:96:
         1e:87:37:1c:e0:42:6c:8c:40:e8:c8:7a:09:9f:74:b6:a8:ba:
         bd:8e:79:fd:dd:cc:e9:bc:fd:53:93:82:b1:59:d7:16:4a:f6:
         f4:bb:72:10:5c:06:4b:77:43:a9:69:f5:d0:1d:c8:c8:ff:69:
         b1:a1:88:56:0c:ff:e8:cd:19:82:78:1d:a3:b4:aa:6b:5c:93:
         0a:e8:be:2d:aa:73:31:67:18:48:62:5d:eb:80:fd:c7:54:6c:
         15:3c:41:62:95:ed:dd:ca:5b:d3:dc:48:13:1f:d4:ed:ff:33:
         14:07:bf:40:38:92:c8:47:cd:40:28:29:07:10:92:f0:f5:62:
         f8:4c:43:bd:35:6a:65:6c:7a:33:f3:ca:59:f4:f3:50:ae:46:
         78:56:83:59:de:bb:82:e0:92:64:14:42:7e:d2:e8:40:85:13:
         f7:5e:fa:8b:2e:44:74:ed:0e:1d:fc:36:ed:48:95:8d:88:9d:
         00:19:26:59:be:60:4e:8f:43:e7:52:39:81:ed:fc:0a:bc:f6:
         73:7f:0d:c2:bc:fd:d0:35:f0:5a:6b:60:ac:5b:86:5a:bd:85:
         ab:3a:43:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----