Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/09ca87533598160d9e69b899d9caae6db3878851.roa
File:                     09ca87533598160d9e69b899d9caae6db3878851.roa (raw, json)
Hash identifier:          LJhY/1vSasPu4tbBRCVhl9bPod8U4M1biVHxykk5+m8=
Subject key identifier:   DF:DA:3A:63:A9:7F:76:B5:4C:8A:61:0A:10:9F:C1:53:D9:59:70:81
Certificate issuer:       /CN=77235f66b6c5d5c31869066c4d405d67062012cf
Certificate serial:       1729D9
Authority key identifier: 0A:4A:B9:05:85:69:40:10:64:D0:F6:94:9F:37:33:29:72:06:DD:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77235f66b6c5d5c31869066c4d405d67062012cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/09ca87533598160d9e69b899d9caae6db3878851.roa
Signing time:             Thu 28 Apr 2022 21:38:06 +0000
ROA not before:           Thu 28 Apr 2022 03:00:00 +0000
ROA not after:            Sun 28 Apr 2024 03:00:00 +0000
asID:                     16509
IP address blocks:        200.12.197.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1518041 (0x1729d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77235f66b6c5d5c31869066c4d405d67062012cf
        Validity
            Not Before: Apr 28 03:00:00 2022 GMT
            Not After : Apr 28 03:00:00 2024 GMT
        Subject: CN=09ca87533598160d9e69b899d9caae6db3878851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6b:c2:52:ea:bd:a8:b5:57:15:5d:e7:e1:3e:
                    c0:4a:7b:6a:b6:92:2f:5a:2b:c5:b9:f5:53:cf:ff:
                    bf:6c:68:73:b1:e7:5b:09:2d:1b:5f:c5:d7:ef:63:
                    fb:60:33:70:91:88:14:06:f4:58:30:e2:8f:a2:2d:
                    1a:24:0f:8d:49:30:59:a5:14:0c:62:5e:bf:93:9f:
                    b0:dd:84:0e:ae:04:e8:62:56:f4:08:53:6d:b2:cb:
                    38:b2:b8:31:df:a9:5b:c6:c4:85:73:72:76:6f:50:
                    78:49:91:87:d9:9e:4f:7f:82:d7:42:21:1b:f2:8b:
                    06:c5:c7:f5:48:45:56:fd:6a:6d:4c:65:d4:8b:1e:
                    af:8b:05:3d:eb:27:72:f1:16:b1:74:73:21:65:13:
                    fb:9d:77:24:71:60:0d:cb:f4:68:83:1c:72:50:f4:
                    cc:e4:04:0e:b5:ea:d4:c8:4a:6e:31:22:1d:ee:72:
                    d4:4e:8c:29:e0:d1:82:f8:4a:14:a8:bc:9b:12:69:
                    11:de:32:b5:7f:f8:38:4e:ef:64:ac:59:8f:8f:ac:
                    1c:e6:dd:cf:1c:71:1f:6e:d7:3d:ca:29:fa:60:1b:
                    75:fe:28:f5:cf:c6:cc:63:34:bf:15:34:34:8f:0e:
                    08:b1:eb:40:b7:0a:7e:2c:42:d3:7b:da:35:4f:cf:
                    ea:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DA:3A:63:A9:7F:76:B5:4C:8A:61:0A:10:9F:C1:53:D9:59:70:81
            X509v3 Authority Key Identifier:
                keyid:0A:4A:B9:05:85:69:40:10:64:D0:F6:94:9F:37:33:29:72:06:DD:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77235f66b6c5d5c31869066c4d405d67062012cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/09ca87533598160d9e69b899d9caae6db3878851.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/77235f66b6c5d5c31869066c4d405d67062012cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:64:09:87:64:37:4a:d9:0e:4e:53:23:42:fd:03:6b:39:bd:
         4f:3a:7f:a5:79:40:80:d6:cf:30:3a:b6:55:f7:f4:09:bf:40:
         fd:9d:aa:e0:fa:ee:33:1b:a8:e3:e9:82:42:e5:df:e7:8d:08:
         46:f8:87:a7:41:48:c5:dd:cd:80:d4:37:a8:00:8f:03:df:d8:
         f7:db:8a:fb:f0:e1:7d:f1:71:fc:eb:63:8e:ba:3d:a2:e5:d2:
         aa:42:0a:b2:2a:44:6c:28:69:e8:a8:e4:a0:b7:ed:11:ba:9a:
         ec:cf:89:ae:42:ae:6a:16:dc:92:2f:7d:6a:d1:7a:2b:a1:6c:
         4f:d2:1b:4f:e6:db:c3:ed:16:41:3d:0d:fd:07:79:48:7f:50:
         07:c8:52:3a:c4:9c:bb:a7:63:82:b8:d6:60:84:be:95:12:bc:
         d9:a1:59:12:59:f6:c9:21:fa:c6:9d:70:7a:80:4c:cf:10:ab:
         3b:eb:4c:5d:d0:16:ce:cc:92:d7:bc:e9:5f:2a:ca:37:9f:42:
         ad:bf:79:94:3e:b1:45:bd:8e:ee:8c:d5:5a:af:f3:1d:a4:71:
         9a:38:fd:a2:dc:ad:86:93:48:5e:e1:44:cc:67:49:fd:00:a4:
         15:bb:ec:7e:d3:6a:f9:0d:2c:3a:c1:64:70:ac:9a:5f:dc:a9:
         7a:b9:7b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----