Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/04326251a245ddd4fb890c62e37f7a41cd9469c0.roa
File:                     04326251a245ddd4fb890c62e37f7a41cd9469c0.roa (raw, json)
Hash identifier:          MUIUm5g1Dn79ptVioP1J6zoxFFikBRQPnbYAi5l8rDo=
Subject key identifier:   5D:4A:03:A0:6B:0D:29:E4:12:46:D5:EE:7C:A0:10:40:57:38:84:0B
Certificate issuer:       /CN=f97eb9b253fa546f87b3f76167f283bcc3700361
Certificate serial:       158BCF
Authority key identifier: E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/04326251a245ddd4fb890c62e37f7a41cd9469c0.roa
Signing time:             Sun 13 Feb 2022 14:49:00 +0000
ROA not before:           Sun 13 Feb 2022 03:00:00 +0000
ROA not after:            Tue 13 Feb 2024 03:00:00 +0000
asID:                     13786
IP address blocks:        200.25.80.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1412047 (0x158bcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97eb9b253fa546f87b3f76167f283bcc3700361
        Validity
            Not Before: Feb 13 03:00:00 2022 GMT
            Not After : Feb 13 03:00:00 2024 GMT
        Subject: CN=04326251a245ddd4fb890c62e37f7a41cd9469c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2c:b6:b9:ee:d5:42:51:ad:92:a7:dc:7d:0c:
                    4f:11:01:f3:dd:95:cb:7a:32:1f:5e:a6:09:fd:45:
                    d3:92:2c:2f:c2:d9:7b:9b:1c:05:71:61:cf:ab:e0:
                    1b:57:68:bc:7b:48:ea:55:f4:d6:83:db:30:50:46:
                    01:c8:bd:bf:be:35:01:51:e8:6a:83:56:54:dd:b2:
                    d6:52:b7:ca:43:8f:a9:78:2e:e3:7a:b9:62:88:6a:
                    d4:54:e1:64:1c:97:b4:63:d3:e2:b4:3e:b4:6b:7b:
                    c1:6f:51:30:e2:de:f0:99:de:d7:b9:82:75:2b:f8:
                    c1:73:df:0e:0c:67:fc:ad:7b:b5:e2:54:64:fa:af:
                    f7:02:fb:9c:1c:19:b5:57:f4:02:dc:07:1d:85:33:
                    50:e2:14:f6:6c:24:fd:e4:29:c7:17:9a:5f:ee:44:
                    0d:87:f9:9f:cf:16:59:62:1b:fa:5f:69:cc:83:11:
                    13:dd:1e:e4:fe:0d:a7:ad:6a:f5:aa:17:7c:62:8b:
                    43:41:d7:6e:14:75:cd:00:9d:6d:80:03:3f:81:fb:
                    47:3a:11:ca:ac:77:f6:71:fd:93:eb:fc:e7:5b:5c:
                    60:33:0e:12:0f:c5:52:7d:dc:25:d2:16:0e:bf:26:
                    80:41:a9:e9:45:97:8d:1a:6c:67:cc:f5:9a:9e:84:
                    cf:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4A:03:A0:6B:0D:29:E4:12:46:D5:EE:7C:A0:10:40:57:38:84:0B
            X509v3 Authority Key Identifier:
                keyid:E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/04326251a245ddd4fb890c62e37f7a41cd9469c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/f97eb9b253fa546f87b3f76167f283bcc3700361.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.25.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:fc:33:07:69:28:20:a8:0e:1a:dc:3c:0e:58:cb:df:ab:20:
         86:f4:2d:dd:7f:b8:e3:d2:69:07:b0:95:83:21:04:5b:bd:a0:
         7f:61:1e:d2:c2:5e:0c:b2:b7:47:81:19:8c:8f:33:85:95:04:
         bf:07:e8:cf:21:b8:42:dd:c7:2e:0b:b4:57:63:96:5d:bb:a6:
         28:5c:fb:19:7a:a6:95:89:e9:b1:7f:f7:2d:af:c7:c9:5e:f0:
         49:64:ad:99:9a:14:dd:14:8b:c2:af:81:f6:c8:f5:e5:91:ae:
         24:03:2b:ae:56:af:89:aa:c9:70:c5:f7:e0:4c:95:5e:ac:1c:
         b3:ba:e4:6f:4f:9e:c3:eb:07:af:ac:c5:bc:ee:f6:3b:4f:47:
         a9:c1:bf:b0:2b:cd:c0:a9:42:35:73:dd:62:00:1d:c3:f0:19:
         6f:db:a8:fa:03:dd:fe:c1:44:1d:cc:36:3f:7d:9f:df:1d:89:
         02:66:7c:5e:db:56:c4:a6:c3:fb:50:7f:60:7c:d6:f2:82:b0:
         c2:ba:21:1e:46:31:3b:6b:44:de:26:b3:d7:23:73:c4:49:a2:
         73:7a:6c:a7:76:60:9c:18:c9:17:a1:28:f9:67:48:21:5c:de:
         9f:78:08:f5:99:7b:15:98:73:d4:f3:c8:77:c8:bb:2f:67:a0:
         40:13:fe:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----