Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed62acef-68ee-439e-b426-ebbc9500eae0/e70af29f4f02c8d4413b019ea3856345620a0248.roa
File:                     e70af29f4f02c8d4413b019ea3856345620a0248.roa (raw, json)
Hash identifier:          ELBISUdhaWCbbsZ8sg2KsRgRYOJUlTva/OG0mOC8shI=
Subject key identifier:   69:7A:71:FB:DA:B4:BF:78:68:99:CB:10:F9:73:EB:9B:BB:87:13:99
Certificate issuer:       /CN=d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6
Certificate serial:       04D7
Authority key identifier: 01:EC:ED:84:71:BF:F5:D7:89:74:1B:59:3F:86:DA:BA:09:70:64:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed62acef-68ee-439e-b426-ebbc9500eae0/e70af29f4f02c8d4413b019ea3856345620a0248.roa
Signing time:             Wed 20 Apr 2022 07:10:24 +0000
ROA not before:           Wed 20 Apr 2022 03:00:00 +0000
ROA not after:            Sat 20 Apr 2024 03:00:00 +0000
asID:                     269919
IP address blocks:        200.115.96.0/22 maxlen: 22
                          2803:42e0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1239 (0x4d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6
        Validity
            Not Before: Apr 20 03:00:00 2022 GMT
            Not After : Apr 20 03:00:00 2024 GMT
        Subject: CN=e70af29f4f02c8d4413b019ea3856345620a0248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d3:06:b1:aa:c3:22:cc:c0:8a:80:50:cb:74:
                    a6:9f:98:d8:7a:58:57:60:ae:26:8f:c7:8e:3d:d2:
                    65:f7:7f:7d:38:cf:69:8a:f0:f3:96:88:d9:18:5f:
                    20:b3:cb:05:c7:ee:b3:f2:18:fe:52:41:46:c6:c5:
                    b3:8c:42:70:03:cc:8e:2d:31:ac:91:d3:c0:b7:b9:
                    e5:eb:41:84:d3:fe:65:4e:ce:82:74:53:4f:c6:66:
                    34:82:32:c1:d8:05:94:15:9c:6c:71:ec:68:1b:3d:
                    43:b6:2e:c7:80:cb:04:b0:bc:0a:f1:af:61:af:15:
                    a7:4f:e2:44:60:d5:e2:89:10:04:e4:69:f8:ad:ba:
                    f8:9a:b1:ae:34:ee:20:74:3c:b2:a4:b9:bf:d8:1f:
                    96:49:2d:ff:8e:87:ba:f5:a9:72:80:f1:da:08:f0:
                    13:46:99:a2:ef:bd:84:bf:39:a2:0e:42:f8:a7:e9:
                    38:a9:2d:74:f8:4a:94:58:35:db:30:8e:d5:a3:0d:
                    1b:dc:1d:3b:80:fb:fb:13:f1:f5:c2:39:c3:a6:59:
                    90:2f:cc:e6:c8:8f:24:34:22:7a:d0:d9:19:b1:7e:
                    d5:cc:ab:b4:fc:87:82:ec:88:e4:8f:96:2e:1d:9f:
                    e1:56:77:5c:d5:7c:0d:73:e1:95:2e:7e:9f:e9:08:
                    54:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7A:71:FB:DA:B4:BF:78:68:99:CB:10:F9:73:EB:9B:BB:87:13:99
            X509v3 Authority Key Identifier:
                keyid:01:EC:ED:84:71:BF:F5:D7:89:74:1B:59:3F:86:DA:BA:09:70:64:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed62acef-68ee-439e-b426-ebbc9500eae0/e70af29f4f02c8d4413b019ea3856345620a0248.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed62acef-68ee-439e-b426-ebbc9500eae0/d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.96.0/22
                IPv6:
                  2803:42e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:23:0a:3e:fd:81:a3:a6:a8:21:07:38:5e:93:a2:42:30:cd:
         68:76:16:54:52:ce:f3:6b:2e:81:94:d8:e6:c0:8c:f7:30:06:
         03:29:07:5e:cd:93:6c:c2:64:d7:ae:c8:d5:c3:ee:7d:f7:ac:
         ff:dc:fc:95:28:0b:87:a8:64:69:cb:0f:ec:33:a9:86:27:7f:
         3a:df:42:2d:ce:6a:82:d7:1a:f1:ca:bb:37:c9:31:6b:e6:f5:
         f7:06:c5:e4:a1:79:70:d2:04:55:f4:23:14:04:d9:c0:b4:ed:
         9e:50:e8:25:fd:b3:13:17:0a:6d:5c:13:2a:8e:48:d9:5c:fe:
         d3:e8:e2:c0:7f:d8:0c:16:9b:5e:76:c4:1d:72:29:cc:f0:0f:
         d6:32:96:2e:f0:94:20:71:da:94:a3:01:ae:e5:7c:b7:9e:95:
         68:55:42:db:55:08:0b:71:fa:35:24:73:bd:1b:00:00:28:27:
         0b:97:6e:29:8b:11:79:a2:e1:25:cc:5c:74:34:1c:f4:24:2d:
         46:cb:e2:4c:f3:97:d4:24:46:3f:8d:18:c7:a5:44:cf:0e:ed:
         f3:dc:13:d1:58:36:f8:b9:e8:00:8c:ee:c1:24:05:3a:16:a0:
         2b:a0:2f:2e:87:a2:d6:5f:c9:9f:66:84:58:f6:bc:7a:59:dc:
         78:69:e9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----