Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/6c970886e682e9ed9c5839a45b811883eb8d4d92.roa
File:                     6c970886e682e9ed9c5839a45b811883eb8d4d92.roa (raw, json)
Hash identifier:          sQdSPQRnVXLUbNt0t3kJxz3FKOmWUDYxGDUdP+XL+r8=
Subject key identifier:   0F:B5:79:FD:84:35:49:B5:F2:B0:A2:2A:44:E4:D7:23:03:A5:3C:B8
Certificate issuer:       /CN=4d6514d89948e6d41988b60c1228765a24fd7536
Certificate serial:       0D5AE4
Authority key identifier: BB:CC:4E:12:80:1C:0A:59:B3:BF:A3:EE:9A:B2:28:AB:F3:33:D0:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d6514d89948e6d41988b60c1228765a24fd7536.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/6c970886e682e9ed9c5839a45b811883eb8d4d92.roa
Signing time:             Wed 24 Mar 2021 14:32:56 +0000
ROA not before:           Wed 24 Mar 2021 14:32:56 +0000
ROA not after:            Tue 24 Mar 2026 14:32:56 +0000
asID:                     263242
IP address blocks:        200.12.248.0/21 maxlen: 24
                          2803:1180::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 875236 (0xd5ae4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d6514d89948e6d41988b60c1228765a24fd7536
        Validity
            Not Before: Mar 24 14:32:56 2021 GMT
            Not After : Mar 24 14:32:56 2026 GMT
        Subject: CN=6c970886e682e9ed9c5839a45b811883eb8d4d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:36:64:a5:7c:48:7e:93:1c:77:23:c4:41:fd:
                    59:83:bb:ad:c1:e8:4c:2c:d6:30:10:13:d2:8a:c7:
                    22:0f:cd:33:b9:92:2f:c8:27:c2:a3:a4:5a:12:3f:
                    81:41:0e:ed:78:ae:24:54:5b:bd:16:34:66:b9:9e:
                    7b:75:21:d9:76:77:65:ac:ed:b8:72:b6:8b:33:00:
                    f5:6e:5b:80:f9:5f:ca:89:93:a6:89:a9:4f:4d:a9:
                    6f:cd:42:69:33:f6:e3:b1:22:0f:25:01:9b:67:c8:
                    26:ad:45:6b:c5:41:46:7b:2f:5f:f5:ba:88:c9:ef:
                    3e:ee:c5:57:74:ea:d7:4a:02:f4:cd:a7:29:4a:ae:
                    cb:7c:0e:35:22:17:1c:a5:5b:71:03:62:0b:71:60:
                    0c:f3:8a:c0:a3:f5:d7:93:8e:3d:a3:c6:cd:2a:5e:
                    c6:24:f1:f8:ec:5a:54:9c:96:64:96:12:67:c4:31:
                    75:23:42:22:ff:c7:d4:13:0f:a6:5c:a6:ac:87:5e:
                    15:4a:6a:b9:80:ba:c4:5d:aa:6e:a8:1e:12:e5:ec:
                    67:8a:b2:7b:41:be:17:be:63:72:61:fc:a4:fe:91:
                    31:eb:79:d2:0d:8e:1a:b8:13:2a:c0:a6:7e:f1:78:
                    e9:fb:96:c1:37:99:91:2d:07:0d:0a:d0:62:b2:1f:
                    8a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B5:79:FD:84:35:49:B5:F2:B0:A2:2A:44:E4:D7:23:03:A5:3C:B8
            X509v3 Authority Key Identifier:
                keyid:BB:CC:4E:12:80:1C:0A:59:B3:BF:A3:EE:9A:B2:28:AB:F3:33:D0:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d6514d89948e6d41988b60c1228765a24fd7536.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/6c970886e682e9ed9c5839a45b811883eb8d4d92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/4d6514d89948e6d41988b60c1228765a24fd7536.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.248.0/21
                IPv6:
                  2803:1180::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:ac:30:cd:bc:49:55:c8:7e:e2:41:b8:b4:ab:9e:0c:83:b5:
         b7:6f:20:30:ab:ed:89:a8:67:ff:eb:dc:03:d8:cf:12:6f:63:
         f6:9f:a2:2e:58:8d:a1:ca:37:90:78:de:06:90:c0:39:9b:b6:
         e9:1d:04:98:a3:cd:c0:59:19:b1:44:92:ee:4e:4a:ed:78:53:
         92:ed:f5:af:fb:70:79:ca:ec:9e:bd:7a:4e:08:0e:65:20:fc:
         0c:7a:34:bc:ea:93:5f:1e:a2:d4:01:ee:60:95:9f:a3:29:1f:
         77:66:ce:50:1b:78:2a:7d:04:67:7d:87:50:4b:4d:5a:22:1a:
         19:2e:f8:e5:3a:fb:0c:43:0e:cc:2b:23:df:11:61:89:54:b5:
         07:56:3d:78:fe:19:ce:de:9d:55:f3:05:9b:1a:4d:aa:c6:4f:
         23:19:85:53:f5:36:1d:ca:f5:c7:cb:29:71:3e:2c:31:97:c0:
         75:3f:94:82:18:b1:f7:8a:bd:de:66:c2:b2:70:78:de:90:2a:
         12:f1:42:51:3f:31:0e:83:66:a5:30:c8:cd:be:28:c8:d0:7e:
         77:5c:c9:e1:37:c4:a9:e7:69:e8:f6:0b:18:a3:a8:60:44:f4:
         13:e9:ef:c4:bb:24:be:d7:fe:89:d2:de:3d:50:f4:11:e7:90:
         ee:63:47:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----