Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/ca2aa9b0922833cbe7f3d1d8e6b232bf192dfde2.roa
File:                     ca2aa9b0922833cbe7f3d1d8e6b232bf192dfde2.roa (raw, json)
Hash identifier:          kHbxvKu1vjhB1cbzCWq8kXnvYzAq5XiM7yzSpPcKl8Y=
Subject key identifier:   50:83:83:BF:9E:CE:19:86:0D:2C:97:B8:EA:18:29:EC:04:FE:BC:D0
Certificate issuer:       /CN=f97eb9b253fa546f87b3f76167f283bcc3700361
Certificate serial:       13019C
Authority key identifier: E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/ca2aa9b0922833cbe7f3d1d8e6b232bf192dfde2.roa
Signing time:             Mon 01 Nov 2021 20:13:32 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Tue 18 Aug 2026 03:00:00 +0000
asID:                     64124
IP address blocks:        200.25.13.0/24 maxlen: 24
                          200.25.68.0/24 maxlen: 24
                          2800:1e0:2100::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1245596 (0x13019c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97eb9b253fa546f87b3f76167f283bcc3700361
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2026 GMT
        Subject: CN=ca2aa9b0922833cbe7f3d1d8e6b232bf192dfde2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a2:b7:55:57:46:42:aa:ff:2c:fb:c2:07:6b:
                    b3:f8:a9:af:72:7f:b8:10:bd:1a:89:e8:be:71:90:
                    c2:b6:50:8f:e5:5b:94:67:d8:3b:57:35:75:cc:c7:
                    a3:c9:85:07:8e:29:01:3a:a5:e4:47:1a:c9:93:cb:
                    4b:22:7b:f4:0c:01:48:69:fd:6d:8d:e2:98:a9:7b:
                    e6:71:e9:36:5e:6a:ca:fd:06:bc:04:14:36:88:6d:
                    f5:22:63:fd:05:63:36:5e:c5:42:d4:58:d1:43:66:
                    20:d6:eb:e1:4a:7a:36:f4:67:07:a5:de:95:b3:b7:
                    9f:c4:d8:60:a9:55:23:e6:1d:f5:31:a3:69:30:6b:
                    fa:2e:72:19:52:12:53:ad:20:2f:44:48:90:42:ce:
                    4f:45:8d:68:2b:c2:e1:69:3e:06:7e:ea:1d:e6:da:
                    48:70:bb:91:05:39:bb:3c:bb:aa:f7:c2:72:20:22:
                    70:87:92:e8:bc:eb:52:a3:91:0d:27:21:31:07:d2:
                    6d:3c:e7:d1:ef:6e:6e:82:cb:25:78:00:1d:68:8a:
                    01:bb:f3:4b:36:92:fb:0d:e6:bb:22:28:6c:ed:5f:
                    4f:b9:1f:3a:55:42:46:73:cc:00:97:04:69:9e:d8:
                    2c:ec:43:0d:de:f9:1c:00:6f:bd:ec:ce:7e:6c:e9:
                    96:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:83:83:BF:9E:CE:19:86:0D:2C:97:B8:EA:18:29:EC:04:FE:BC:D0
            X509v3 Authority Key Identifier:
                keyid:E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/ca2aa9b0922833cbe7f3d1d8e6b232bf192dfde2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/f97eb9b253fa546f87b3f76167f283bcc3700361.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.25.13.0/24
                  200.25.68.0/24
                IPv6:
                  2800:1e0:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         57:eb:42:c8:61:64:05:d4:2d:51:a8:7e:f8:fa:d5:fd:f8:b4:
         04:fc:3e:ce:7d:1d:1d:3a:53:62:08:ed:b9:c0:d5:99:95:24:
         f2:5e:54:1f:07:70:99:64:21:e9:ab:e6:69:16:c7:91:92:2b:
         37:eb:ca:2c:3a:a2:55:09:65:ad:c1:a9:33:84:4c:77:21:8f:
         b3:06:f8:8a:3d:5d:e7:15:e6:f8:d0:74:6b:37:93:7e:14:9d:
         e2:08:53:82:fc:09:68:33:4a:b8:fd:ad:42:d8:7b:fb:8a:00:
         63:53:66:d5:31:be:7d:41:5c:55:3b:d5:e5:7e:49:15:23:d8:
         57:ea:63:34:11:0b:b3:f7:ea:fa:8c:66:58:f3:a2:5f:6b:80:
         c1:a9:bd:4f:c2:0d:31:2b:6e:01:51:c1:79:e5:c9:43:15:2f:
         3d:d6:c0:01:0a:d8:c0:a3:cb:0d:73:8e:4c:3e:12:64:b5:0c:
         9b:f8:4c:d1:7a:12:09:c9:43:f0:72:89:f3:d0:f3:f1:08:a9:
         3b:56:d4:11:6f:0b:59:62:dc:b5:84:94:7c:5e:49:8f:29:9f:
         55:4e:ec:a0:b9:1e:e4:be:d2:83:d2:54:f9:3e:63:e7:22:a6:
         fe:90:7b:a7:0f:6b:00:55:3e:ef:d0:e3:c2:40:6a:22:e1:67:
         74:e2:cd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----