Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d03c1c2c-2d3c-4330-be09-3e5783ec8851/3a8efb5f2fe1600732e7c22ca5903f582c8eead0.roa
File:                     3a8efb5f2fe1600732e7c22ca5903f582c8eead0.roa (raw, json)
Hash identifier:          gTKLGFJpA/GapoRfheaJbycILtBJnHqmFtuFJEVr4Hk=
Subject key identifier:   7F:2E:C4:BA:BA:28:6A:37:D4:78:C8:16:78:BB:32:AF:5A:08:F8:86
Certificate issuer:       /CN=19acadaa5cb52d9c8afd95a91c962350eb57d619
Certificate serial:       27E8
Authority key identifier: 87:40:83:10:97:9F:E2:1E:8F:D3:0F:FA:D5:A2:93:4F:86:94:9E:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19acadaa5cb52d9c8afd95a91c962350eb57d619.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d03c1c2c-2d3c-4330-be09-3e5783ec8851/3a8efb5f2fe1600732e7c22ca5903f582c8eead0.roa
Signing time:             Mon 10 Apr 2023 20:55:14 +0000
ROA not before:           Sun 09 Apr 2023 20:46:24 +0000
ROA not after:            Thu 10 Apr 2025 20:46:24 +0000
asID:                     8048
IP address blocks:        200.5.40.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10216 (0x27e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19acadaa5cb52d9c8afd95a91c962350eb57d619
        Validity
            Not Before: Apr  9 20:46:24 2023 GMT
            Not After : Apr 10 20:46:24 2025 GMT
        Subject: CN=3a8efb5f2fe1600732e7c22ca5903f582c8eead0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:04:fc:6b:69:45:87:c2:fa:4c:de:3d:88:2a:
                    e4:a5:b7:4b:66:bc:6c:b9:68:08:e0:42:17:46:d9:
                    c6:3f:f6:b4:54:50:22:f0:dd:0f:1d:84:d1:6e:7b:
                    00:34:19:06:31:6f:04:49:86:24:4b:f5:2e:1a:33:
                    95:7f:90:fd:7a:eb:04:13:7b:32:cb:5e:d8:15:4c:
                    f5:3f:74:af:ba:f3:7e:3d:0f:a7:85:d9:32:1f:df:
                    f4:b5:78:46:12:0c:d1:d3:a9:2a:d8:03:0d:5a:aa:
                    b9:85:13:b9:ed:83:81:5c:c6:ba:42:d1:79:4a:94:
                    90:44:62:28:d1:8f:d2:2c:30:69:c4:44:bf:45:5f:
                    bc:ce:9e:43:1a:37:df:d9:b3:fb:9f:4d:45:3a:24:
                    10:41:87:c7:c0:59:02:cf:9f:02:8e:34:48:e3:17:
                    d6:61:58:69:b7:a1:bc:2f:5c:f8:c3:91:96:1a:28:
                    9e:e4:cd:00:65:bb:4c:54:6f:15:c1:40:24:7f:09:
                    96:38:92:f0:37:85:48:80:04:96:ef:14:7a:94:2e:
                    2c:2f:3a:a7:66:b4:c2:31:2d:c1:da:69:91:bb:d2:
                    6a:04:cd:45:e0:71:6f:6f:83:83:6a:b9:74:a0:a9:
                    f6:6f:da:a7:83:e9:38:a5:a5:2c:ed:86:d8:4a:6e:
                    36:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2E:C4:BA:BA:28:6A:37:D4:78:C8:16:78:BB:32:AF:5A:08:F8:86
            X509v3 Authority Key Identifier:
                keyid:87:40:83:10:97:9F:E2:1E:8F:D3:0F:FA:D5:A2:93:4F:86:94:9E:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19acadaa5cb52d9c8afd95a91c962350eb57d619.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d03c1c2c-2d3c-4330-be09-3e5783ec8851/3a8efb5f2fe1600732e7c22ca5903f582c8eead0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d03c1c2c-2d3c-4330-be09-3e5783ec8851/19acadaa5cb52d9c8afd95a91c962350eb57d619.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.5.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         16:2b:da:b7:38:78:72:3d:ec:1d:b9:49:54:18:be:a8:c6:f9:
         57:f8:a1:78:bf:ff:3f:bc:05:0c:c0:4c:fd:53:69:fc:91:24:
         d7:db:2a:cb:df:27:68:d5:d8:d7:37:d9:60:f3:0c:d9:b2:d0:
         d5:69:88:59:9a:09:7d:3b:e0:5e:e2:8a:d7:09:b7:2b:c9:b1:
         20:2d:51:f6:21:39:31:4b:08:0e:7c:98:51:97:93:d4:23:41:
         85:ea:e8:8e:a7:7d:08:fc:a9:a3:2f:a8:86:44:d3:73:7e:d2:
         31:ca:cf:4f:8b:60:96:a7:65:9d:34:b7:26:40:7d:31:6d:4b:
         9d:23:9e:f2:b3:49:07:22:ad:9c:a3:7b:e0:8e:41:b1:b8:de:
         ae:28:b1:fa:a7:f1:af:98:86:ee:d9:e6:3b:4f:47:1a:c1:94:
         af:58:3d:11:85:02:2e:54:76:f2:c5:17:2e:6a:c8:b8:fa:9c:
         20:f8:87:d3:ba:33:07:53:1a:94:dc:b7:1f:4e:38:3e:3c:47:
         02:f2:6d:9c:f9:a6:b2:9c:4b:8b:19:77:c4:78:8b:cf:53:bb:
         56:9e:b5:af:72:93:52:29:ae:c4:a4:9a:13:cd:bf:d3:5a:4b:
         4b:38:a8:4b:da:f7:8d:b3:5d:33:92:38:19:9c:30:fb:ac:ad:
         87:e7:c2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----