Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/80b612631abbbccbba6900cecdac41fa40a693b4.roa
File:                     80b612631abbbccbba6900cecdac41fa40a693b4.roa (raw, json)
Hash identifier:          C++dn8cQZqdAdYSG1OgUZNx/HlIGbMMCUIniQ5r4vfM=
Subject key identifier:   31:7A:78:E2:5D:76:12:5A:3B:7E:07:53:30:74:95:E4:56:D3:DA:C7
Certificate issuer:       /CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
Certificate serial:       0BFCCA
Authority key identifier: 26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/80b612631abbbccbba6900cecdac41fa40a693b4.roa
Signing time:             Wed 24 Mar 2021 14:43:23 +0000
ROA not before:           Wed 24 Mar 2021 14:43:23 +0000
ROA not after:            Tue 24 Mar 2026 14:43:23 +0000
asID:                     7438
IP address blocks:        200.39.0.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785610 (0xbfcca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
        Validity
            Not Before: Mar 24 14:43:23 2021 GMT
            Not After : Mar 24 14:43:23 2026 GMT
        Subject: CN=80b612631abbbccbba6900cecdac41fa40a693b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:2a:48:76:5a:fa:a0:9c:e4:b8:58:a9:5d:
                    68:1f:ec:1d:20:9c:94:e9:e6:9c:c8:00:99:af:b8:
                    23:26:85:3e:a2:ca:a3:c3:69:3b:5f:77:75:ec:13:
                    1c:df:fa:ed:0a:eb:7d:7c:16:61:3c:26:1e:61:c1:
                    d2:42:0d:cd:a2:fd:dc:03:ef:71:e8:df:0d:b5:c9:
                    e7:5a:19:69:7d:de:bd:13:13:e1:ca:c0:84:cf:f6:
                    2b:a9:62:3f:d5:31:66:ee:07:10:a1:3b:97:b6:59:
                    95:83:cd:65:ee:88:5e:91:5d:b6:a8:b1:ba:dd:f6:
                    e9:51:35:75:29:06:34:8d:3d:6c:b2:ac:31:81:e5:
                    c1:81:6b:9c:cc:f4:7b:c5:7d:e8:be:42:10:a4:d0:
                    40:6b:6d:29:fc:4e:25:7a:d3:60:af:9f:9f:d7:78:
                    aa:d0:de:0d:fe:6e:e4:5d:82:ef:48:b6:43:63:46:
                    7a:28:9d:90:ce:96:b9:89:27:15:26:b0:6f:5a:4e:
                    3c:86:47:58:78:f1:a7:48:27:8f:b1:db:a2:b6:73:
                    1c:bf:93:80:32:26:a1:97:41:99:5a:ed:6f:65:40:
                    83:e0:68:f5:81:f8:7b:a8:05:de:00:ec:40:82:00:
                    a8:d8:c8:cb:31:1a:7c:63:17:28:0d:74:08:ba:00:
                    d1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7A:78:E2:5D:76:12:5A:3B:7E:07:53:30:74:95:E4:56:D3:DA:C7
            X509v3 Authority Key Identifier:
                keyid:26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/80b612631abbbccbba6900cecdac41fa40a693b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/82a0f3b8699157d02e2e70513969f2e77b6b9db5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1d:40:ad:27:21:0a:86:af:bd:38:03:34:b3:2d:20:32:33:43:
         06:c4:3b:f3:73:99:79:0d:ce:51:88:9b:b2:a7:0a:31:9a:5b:
         0f:aa:99:98:13:31:59:a2:1f:54:74:88:93:f0:76:f8:35:70:
         7d:7e:a1:8c:3c:99:f7:d8:2a:9c:63:af:3b:23:90:ae:ae:4b:
         9f:68:61:e7:f5:43:e7:52:98:b6:5e:47:e8:19:cf:ba:dc:66:
         c4:61:39:07:ad:be:c7:5f:06:1b:41:93:5d:32:d8:8f:fc:4f:
         30:d2:29:75:93:ef:06:72:ec:fa:14:ba:7e:b5:83:f9:31:67:
         ef:be:ed:66:89:4b:85:46:1b:b4:9a:24:0a:22:22:b0:1e:b8:
         cb:06:74:0b:95:b6:39:a1:f1:55:9c:a9:95:27:43:cc:07:9d:
         6c:f2:dc:00:3d:07:e7:c1:b6:de:33:f3:c5:3f:f7:98:bb:18:
         30:eb:41:c9:2f:66:54:c3:b9:14:b0:2d:30:f0:e7:2d:4f:4d:
         10:46:69:52:39:e7:94:45:8c:7b:54:cc:b8:27:61:fa:8a:69:
         fe:36:31:1c:30:8b:aa:6e:7c:f2:95:b0:54:77:7b:51:43:3f:
         e6:fc:9f:52:d1:09:4a:05:5d:c8:b8:34:b9:9a:2b:20:0d:54:
         7b:cb:b4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----