Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/37c3186b92e6509f828b0c42f73b35075db0599c.roa
File:                     37c3186b92e6509f828b0c42f73b35075db0599c.roa (raw, json)
Hash identifier:          4ZckKkj82oTr+MffjPiBI7DzhYo7n2Mse6F2DwZBcp4=
Subject key identifier:   FD:5B:A5:8E:4A:DB:3E:4D:5B:FC:A3:F7:AE:2E:47:02:9D:A8:36:D9
Certificate issuer:       /CN=4d6514d89948e6d41988b60c1228765a24fd7536
Certificate serial:       154F65
Authority key identifier: BB:CC:4E:12:80:1C:0A:59:B3:BF:A3:EE:9A:B2:28:AB:F3:33:D0:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d6514d89948e6d41988b60c1228765a24fd7536.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/37c3186b92e6509f828b0c42f73b35075db0599c.roa
Signing time:             Tue 15 Feb 2022 12:58:12 +0000
ROA not before:           Tue 15 Feb 2022 03:00:00 +0000
ROA not after:            Thu 15 Feb 2024 03:00:00 +0000
asID:                     272041
IP address blocks:        200.12.255.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1396581 (0x154f65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d6514d89948e6d41988b60c1228765a24fd7536
        Validity
            Not Before: Feb 15 03:00:00 2022 GMT
            Not After : Feb 15 03:00:00 2024 GMT
        Subject: CN=37c3186b92e6509f828b0c42f73b35075db0599c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:14:d8:fd:e0:79:7f:fe:a4:0a:83:4a:15:77:
                    ca:8a:25:0c:71:85:56:05:da:4f:0c:6c:e5:ed:7d:
                    8d:34:20:fc:31:ab:5f:ec:4b:22:63:53:f3:bb:36:
                    f9:38:7e:5c:d4:d4:47:5e:74:18:db:3b:f7:35:72:
                    1f:7d:1f:d8:ef:14:9d:d1:4a:88:c2:1a:05:64:28:
                    0f:38:ad:82:ee:56:e3:df:93:d3:f8:2c:f8:77:36:
                    dd:df:26:27:b3:98:ac:3d:1f:0f:0c:8d:d4:c1:e6:
                    21:f3:85:9c:fd:25:81:c3:b7:dc:69:ea:ef:ae:75:
                    0f:34:e7:b8:f5:11:96:5d:11:a5:35:69:e7:67:9d:
                    45:91:8b:9d:fd:ae:bd:61:83:ff:ef:6b:3f:34:e3:
                    fa:0e:22:6a:5b:af:0f:35:72:ee:3b:0f:8b:7d:63:
                    26:92:dc:b4:93:a1:7d:70:15:b5:94:a5:26:f4:ac:
                    17:ba:de:78:62:4c:21:bb:cc:59:61:93:08:9f:10:
                    fd:4e:4e:99:b1:1d:5d:49:40:a2:1c:f9:a4:a3:03:
                    2a:11:48:95:73:95:2f:7b:35:12:ac:be:35:4b:e4:
                    1f:2d:6b:41:3f:81:d1:f0:30:86:22:8a:cb:b5:a2:
                    f0:3e:bf:43:c5:b1:b5:cf:e4:13:91:22:e4:65:f9:
                    49:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5B:A5:8E:4A:DB:3E:4D:5B:FC:A3:F7:AE:2E:47:02:9D:A8:36:D9
            X509v3 Authority Key Identifier:
                keyid:BB:CC:4E:12:80:1C:0A:59:B3:BF:A3:EE:9A:B2:28:AB:F3:33:D0:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d6514d89948e6d41988b60c1228765a24fd7536.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/37c3186b92e6509f828b0c42f73b35075db0599c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/4d6514d89948e6d41988b60c1228765a24fd7536.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:14:82:92:cf:af:c7:6e:e0:df:c2:31:c1:5d:e6:fa:8e:00:
         ec:95:f3:19:24:78:69:83:b2:5b:cf:ec:fe:46:22:56:7b:49:
         97:7a:6b:c7:aa:70:a7:d5:e8:93:70:e4:96:2f:ea:e0:85:b1:
         d2:e0:d3:85:f8:7f:d2:d2:9e:9e:a4:e2:93:c7:06:1f:ed:23:
         83:9c:a9:3c:a5:88:57:9f:17:a2:74:0b:a9:ec:7e:aa:bb:f6:
         d5:8e:b8:b7:1e:ff:b7:0b:86:5b:7a:69:f2:0c:39:da:74:07:
         17:ff:ca:37:8a:ba:b8:69:1e:d3:f8:e6:70:db:95:40:63:3f:
         21:17:6a:c9:f6:65:89:40:16:00:48:19:4c:18:82:c6:01:ce:
         f0:7e:ac:dc:03:ce:90:59:91:90:3e:37:c7:7c:09:e8:4a:b9:
         9e:80:dd:c7:9d:e1:50:d7:85:73:16:08:7a:38:3a:f0:e9:0d:
         b6:7c:74:57:23:1a:2e:74:89:e8:8e:b2:b3:92:bf:3d:12:53:
         ca:78:22:7d:45:cc:43:74:1f:aa:b1:f4:b5:a4:7a:77:a7:d8:
         a8:38:b4:04:c4:a7:67:ee:93:0f:8d:19:3a:aa:a9:5c:87:98:
         ab:66:79:ab:68:5f:41:df:35:b1:5c:7c:6a:95:ec:0c:59:19:
         21:34:0d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----