Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/c4f905f15d34b76d42f92ab520ab164eda771376.roa
File:                     c4f905f15d34b76d42f92ab520ab164eda771376.roa (raw, json)
Hash identifier:          VxApGwbfY1Qib49llHlMld+zmX5lkAcg07Ru6C6eMhk=
Subject key identifier:   72:3B:8C:7D:76:E9:BE:65:AE:3D:89:1C:37:44:48:BB:3E:C8:C6:D5
Certificate issuer:       /CN=77235f66b6c5d5c31869066c4d405d67062012cf
Certificate serial:       172D7E
Authority key identifier: 0A:4A:B9:05:85:69:40:10:64:D0:F6:94:9F:37:33:29:72:06:DD:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77235f66b6c5d5c31869066c4d405d67062012cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/c4f905f15d34b76d42f92ab520ab164eda771376.roa
Signing time:             Thu 28 Apr 2022 21:38:47 +0000
ROA not before:           Thu 28 Apr 2022 03:00:00 +0000
ROA not after:            Sun 28 Apr 2024 03:00:00 +0000
asID:                     14618
IP address blocks:        200.12.197.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1518974 (0x172d7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77235f66b6c5d5c31869066c4d405d67062012cf
        Validity
            Not Before: Apr 28 03:00:00 2022 GMT
            Not After : Apr 28 03:00:00 2024 GMT
        Subject: CN=c4f905f15d34b76d42f92ab520ab164eda771376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e7:17:2c:2c:60:b1:c2:5c:cb:81:9e:e8:e2:
                    88:47:71:ad:94:3a:8e:cc:d5:b5:e8:51:c1:91:00:
                    39:ba:7a:59:74:f3:eb:58:8a:9f:e0:c9:5f:39:b9:
                    5e:92:d8:ed:dd:7b:fc:a3:7b:94:28:cd:eb:64:b2:
                    f5:68:c2:86:5f:bc:5b:7c:63:6e:a9:80:a1:18:67:
                    23:44:73:58:0a:52:ba:aa:2d:47:71:74:a7:c4:58:
                    f1:e2:1a:3f:92:f8:d2:65:d7:50:6a:eb:71:c9:be:
                    36:6f:4e:a5:0f:70:3c:a3:11:df:f6:fe:5d:28:e1:
                    ac:18:56:e5:88:d6:5e:40:eb:21:3f:7c:53:f5:f4:
                    73:b2:18:28:31:f2:93:23:b0:5c:8f:dc:3c:66:3c:
                    d0:96:2d:ca:61:c1:72:2b:06:c8:5c:65:71:93:cc:
                    ed:e6:22:44:6f:3d:8c:45:1a:8a:ee:fb:3e:85:62:
                    e3:72:f0:e9:54:aa:23:a0:b2:b2:14:45:48:fa:fd:
                    40:37:fe:71:30:61:e4:c3:f8:3f:a3:b5:62:90:29:
                    9a:8b:c6:e9:79:1f:11:e3:9b:98:25:09:3c:25:b1:
                    c5:e4:74:27:9c:94:ec:59:aa:27:3f:dd:c5:c6:83:
                    84:04:e7:a4:f2:9d:8d:5a:50:34:93:1a:5d:79:b5:
                    b6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3B:8C:7D:76:E9:BE:65:AE:3D:89:1C:37:44:48:BB:3E:C8:C6:D5
            X509v3 Authority Key Identifier:
                keyid:0A:4A:B9:05:85:69:40:10:64:D0:F6:94:9F:37:33:29:72:06:DD:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77235f66b6c5d5c31869066c4d405d67062012cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/c4f905f15d34b76d42f92ab520ab164eda771376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/77235f66b6c5d5c31869066c4d405d67062012cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:7c:be:c7:fb:2c:93:a7:ab:65:15:51:7b:9b:44:cc:f5:ed:
         03:d8:4a:b5:01:d2:a9:d7:06:12:e1:6a:d4:c7:2a:f9:ca:71:
         9f:92:a1:e1:01:3c:67:e9:95:7e:60:db:a7:b3:73:62:04:17:
         72:f0:2f:ca:6c:e8:ee:3b:0c:c6:d4:66:74:13:9b:0e:d5:9b:
         c4:be:bf:98:0a:9b:b9:27:e8:04:25:c0:57:cb:5f:df:83:1b:
         cf:05:82:ef:ed:fc:34:b2:54:46:c7:2a:1a:f2:85:df:f0:eb:
         a1:e6:53:46:79:03:af:f6:81:02:13:7e:7a:d9:0b:d4:c8:f4:
         6d:56:52:fe:15:55:28:83:00:bb:45:55:89:4f:ff:29:82:c1:
         80:7c:c8:f1:4c:74:76:8e:22:e9:42:ff:f5:ba:24:7d:eb:d2:
         1b:e7:af:01:7b:ac:8a:d2:e0:f5:c0:30:35:6e:de:9d:c0:91:
         97:ef:66:cd:fe:dd:9b:37:4c:c7:b3:30:43:c0:f4:c6:01:ed:
         f0:30:c7:bd:fe:a3:3d:10:b4:c4:35:31:8e:10:ab:f7:6c:e4:
         7e:9d:d1:ad:01:8a:1f:cb:c2:3b:e7:6a:68:62:72:e9:09:a4:
         a2:a4:6f:85:dd:84:b6:7d:32:74:42:bf:f5:5b:9d:f2:21:62:
         a8:7a:a8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----