Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cc4996a8-7677-4c1c-b313-011f25764fa5/bcfcefa286bf1d998d337461d9570a824f9f43e5.roa
File:                     bcfcefa286bf1d998d337461d9570a824f9f43e5.roa (raw, json)
Hash identifier:          CcXJHMAit9rkpxmOj1GFJDi9vSGXFDDItzwcjD2mBhU=
Subject key identifier:   40:C6:81:E5:D6:46:29:C0:57:4B:A3:A8:29:0E:92:35:BF:B4:00:3E
Certificate issuer:       /CN=a7526df002a574a7e96f1fd69133114135b1b5ee
Certificate serial:       FF0D
Authority key identifier: A6:56:B4:C3:93:21:23:14:A5:C4:B8:95:1B:73:4A:BC:70:A2:37:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7526df002a574a7e96f1fd69133114135b1b5ee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cc4996a8-7677-4c1c-b313-011f25764fa5/bcfcefa286bf1d998d337461d9570a824f9f43e5.roa
Signing time:             Wed 13 Oct 2021 19:51:03 +0000
ROA not before:           Wed 13 Oct 2021 03:00:00 +0000
ROA not after:            Fri 13 Oct 2023 03:00:00 +0000
asID:                     271973
IP address blocks:        201.222.43.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65293 (0xff0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7526df002a574a7e96f1fd69133114135b1b5ee
        Validity
            Not Before: Oct 13 03:00:00 2021 GMT
            Not After : Oct 13 03:00:00 2023 GMT
        Subject: CN=bcfcefa286bf1d998d337461d9570a824f9f43e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:24:77:e5:35:a5:c8:2f:5d:fe:e3:84:47:aa:
                    54:08:d8:fe:98:ae:fa:3c:6c:e0:91:5e:1c:16:3e:
                    b5:84:06:8f:74:48:20:4f:1d:63:44:e8:ea:b8:4b:
                    9f:1f:13:6e:f1:fb:64:83:4c:90:ef:85:50:d0:49:
                    c2:d8:ac:63:9d:c8:4b:1b:bc:e7:97:f5:b4:6c:b4:
                    c9:91:ba:3c:19:a1:94:bc:f5:72:67:d0:7f:ca:0b:
                    61:16:d1:79:a0:9e:f3:a9:e1:36:a7:e4:7a:6e:d1:
                    46:4c:74:ac:ed:11:c3:8c:22:59:f1:64:a5:4a:2f:
                    80:24:a6:57:f5:e6:bd:98:97:6f:17:8f:8e:59:44:
                    d0:ec:7c:89:bf:eb:10:5b:86:5f:96:50:fb:51:2a:
                    a8:0f:6c:b3:89:79:81:de:82:25:62:fb:1d:31:db:
                    4d:42:dd:67:3f:ea:4d:5e:e7:5d:87:83:c7:2a:4a:
                    2b:ec:f2:06:18:78:00:ab:9e:be:f3:02:75:8e:13:
                    e6:64:f2:5b:e4:cd:ad:4d:02:ab:11:4c:44:ac:e0:
                    2b:3d:b6:20:f8:13:ed:b2:6e:81:3b:e8:40:77:e7:
                    35:7b:63:f4:61:03:88:2f:1f:37:c6:09:69:34:9f:
                    f0:e8:63:45:82:e0:2c:d1:c7:f2:05:87:2a:34:d9:
                    37:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C6:81:E5:D6:46:29:C0:57:4B:A3:A8:29:0E:92:35:BF:B4:00:3E
            X509v3 Authority Key Identifier:
                keyid:A6:56:B4:C3:93:21:23:14:A5:C4:B8:95:1B:73:4A:BC:70:A2:37:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7526df002a574a7e96f1fd69133114135b1b5ee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cc4996a8-7677-4c1c-b313-011f25764fa5/bcfcefa286bf1d998d337461d9570a824f9f43e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cc4996a8-7677-4c1c-b313-011f25764fa5/a7526df002a574a7e96f1fd69133114135b1b5ee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:a2:63:39:84:b4:f1:ca:23:ba:ca:00:1c:c7:23:d4:f8:73:
         44:e3:04:68:68:c3:72:46:4a:93:29:ce:9b:1c:b7:41:6d:8c:
         72:41:a7:e3:7c:d0:1b:e5:a8:25:ee:64:5f:de:8b:c3:08:b6:
         87:50:fc:9b:9b:f9:8b:f1:38:0f:ba:fe:2a:db:7d:8a:25:f1:
         9f:f8:5d:b7:15:74:2c:8b:99:b6:b6:35:7e:6c:ec:17:63:73:
         72:b3:51:a1:e3:e9:8f:de:81:73:f0:20:67:ec:fb:2f:47:ce:
         2a:d2:66:d4:c6:87:4d:5a:58:de:91:b1:37:cd:96:56:5b:ed:
         91:f9:82:3e:be:f9:5b:7d:d8:c0:94:29:b4:1c:e3:8b:48:9f:
         c9:cc:67:ba:17:bc:37:c2:cb:31:18:55:3d:2f:12:f2:f5:c2:
         22:4f:2a:29:d5:ea:35:9b:bf:09:e4:92:99:e4:54:6c:ba:c3:
         7e:bf:d0:1f:ed:52:54:bf:3c:c2:42:2b:f7:c5:8e:50:e7:39:
         e1:8e:96:2e:2c:b4:5a:d7:55:c3:bc:23:d8:7a:77:ca:0e:69:
         b3:5e:15:28:7d:b4:18:9a:f1:b2:7e:b7:82:60:a8:8b:6f:c5:
         74:64:0e:60:c5:70:88:99:64:90:90:91:b0:bb:39:86:2b:61:
         2e:2c:a1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----