Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/9507e69aa11205f86a4def8096179b87c75da9a5.roa
File:                     9507e69aa11205f86a4def8096179b87c75da9a5.roa (raw, json)
Hash identifier:          qeSaRw3fUDBmwr9xyHDi9vNqukwv0xGprxKNIAVsKQ4=
Subject key identifier:   C4:40:FA:A8:CF:D5:DB:3E:E4:A7:EB:65:F2:1C:88:18:A7:0E:A4:19
Certificate issuer:       /CN=c6e6abb9e295aea3473895245eb2e4f25f175b38
Certificate serial:       1E725C
Authority key identifier: C0:CA:27:17:C5:5C:E3:9E:55:4B:B4:3B:F7:AD:12:09:3C:36:7E:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c6e6abb9e295aea3473895245eb2e4f25f175b38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/9507e69aa11205f86a4def8096179b87c75da9a5.roa
Signing time:             Tue 14 Feb 2023 22:32:27 +0000
ROA not before:           Sun 21 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     27814
IP address blocks:        200.110.112.0/21 maxlen: 24
                          200.110.122.0/23 maxlen: 24
                          200.110.124.0/23 maxlen: 24
                          200.110.126.0/24 maxlen: 24
                          200.110.127.0/24 maxlen: 24
                          2001:13c7:6f00::/45 maxlen: 48
                          2001:13c7:6f08::/48 maxlen: 48
                          2001:13c7:6f09::/48 maxlen: 48
                          2001:13c7:6f10::/45 maxlen: 48
                          2001:13c7:6f10::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1995356 (0x1e725c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e6abb9e295aea3473895245eb2e4f25f175b38
        Validity
            Not Before: Mar 21 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=9507e69aa11205f86a4def8096179b87c75da9a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:67:a0:80:33:0d:bc:ac:98:63:32:13:d8:ec:
                    fc:ff:f2:7b:ea:68:52:f6:ac:4a:46:d3:3c:6d:21:
                    9d:b2:d5:ea:13:5e:2c:bb:f1:90:38:4f:0e:fb:83:
                    1c:e0:e5:96:21:3e:5b:55:e0:de:70:97:de:5d:71:
                    aa:6d:91:3d:b3:5a:a5:34:97:d2:97:a8:30:05:89:
                    b5:ea:2f:31:6a:66:94:1a:c8:45:45:7e:c8:60:be:
                    ef:6a:0b:2d:ba:18:a3:9a:11:ff:dd:77:49:b5:20:
                    73:cd:89:9a:58:cb:c9:32:f3:4d:6c:53:a5:e9:f5:
                    1f:15:a0:49:54:6e:8b:2f:d5:b1:b2:12:92:e0:40:
                    78:c1:30:17:b4:65:55:5f:29:14:e8:1b:35:ce:1b:
                    a3:ac:06:b4:5a:91:00:ee:0c:63:45:46:09:c8:79:
                    12:e1:bf:97:53:ea:c8:ee:4d:5f:8b:f6:43:58:c9:
                    a7:11:95:b1:fe:fa:8a:c5:16:30:8d:b7:a8:e2:44:
                    6f:ba:d3:09:96:d4:3f:1c:1c:aa:4f:ee:7c:37:bb:
                    cb:a8:ce:c1:62:01:dd:c3:96:77:eb:55:91:89:b6:
                    14:87:47:61:f0:8d:fb:7f:f7:61:0f:d3:ed:88:00:
                    2f:3e:50:9d:f8:58:ea:06:34:39:5f:44:56:2b:7e:
                    20:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:40:FA:A8:CF:D5:DB:3E:E4:A7:EB:65:F2:1C:88:18:A7:0E:A4:19
            X509v3 Authority Key Identifier:
                keyid:C0:CA:27:17:C5:5C:E3:9E:55:4B:B4:3B:F7:AD:12:09:3C:36:7E:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c6e6abb9e295aea3473895245eb2e4f25f175b38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/9507e69aa11205f86a4def8096179b87c75da9a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/c6e6abb9e295aea3473895245eb2e4f25f175b38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.112.0/21
                  200.110.122.0-200.110.127.255
                IPv6:
                  2001:13c7:6f00::-2001:13c7:6f09:ffff:ffff:ffff:ffff:ffff
                  2001:13c7:6f10::/45

    Signature Algorithm: sha256WithRSAEncryption
         c4:12:dc:bd:c5:bf:7e:91:06:15:16:95:ee:bf:9f:6a:2c:8b:
         db:69:c5:c9:35:81:19:1d:4f:5f:25:dc:40:d7:86:e2:e2:fb:
         5c:2f:5d:dc:4e:f9:32:e5:25:c2:20:b0:50:b1:2c:39:c6:8a:
         54:51:e2:9a:de:af:65:33:09:93:c5:aa:5f:c5:48:4a:94:9a:
         6a:8d:1e:ac:e4:af:a5:cc:2e:22:40:81:96:f0:21:20:47:63:
         cf:df:2e:13:c1:8f:e3:1d:69:bb:dc:be:fa:e7:e2:ba:8b:6c:
         37:81:96:cb:4d:26:39:63:5f:a6:cc:ec:c6:c3:2e:9b:8b:14:
         bb:9c:f6:35:af:8e:cf:e1:66:82:5c:b3:6b:7b:00:31:bf:a9:
         85:dc:7c:dc:87:88:37:d0:06:e7:0d:c9:7b:16:b0:a9:69:57:
         1f:b3:8d:67:ad:8b:ed:f4:4a:a2:e1:e8:08:a0:ca:fd:01:1f:
         b9:78:3b:01:15:60:dc:67:d2:71:56:d4:bf:1b:fe:09:6f:8a:
         f8:67:c3:0c:a8:88:49:7b:79:c6:ef:c4:4f:20:8a:ee:bb:63:
         03:c6:53:90:4d:7f:0b:95:03:a8:06:fb:32:54:35:a4:fe:5e:
         4d:36:e8:7b:8d:19:cd:50:48:ca:bb:11:c8:d1:f1:ca:9e:9c:
         e8:c1:e1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----