Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/aa40a4ed781b36f10ca30684e9db0c5a0cee7f66.roa
File:                     aa40a4ed781b36f10ca30684e9db0c5a0cee7f66.roa (raw, json)
Hash identifier:          aZV++POP+yium9osM6WnxkrrBoAxwWCagJpeHvFaqbc=
Subject key identifier:   09:AE:31:67:91:5D:10:66:B4:4D:B1:84:2E:FE:14:16:33:2B:A8:93
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       0DF498
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/aa40a4ed781b36f10ca30684e9db0c5a0cee7f66.roa
Signing time:             Wed 24 Mar 2021 14:41:09 +0000
ROA not before:           Wed 24 Mar 2021 14:41:08 +0000
ROA not after:            Tue 24 Mar 2026 14:41:08 +0000
asID:                     264801
IP address blocks:        200.93.226.0/25 maxlen: 25

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 914584 (0xdf498)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Mar 24 14:41:08 2021 GMT
            Not After : Mar 24 14:41:08 2026 GMT
        Subject: CN=aa40a4ed781b36f10ca30684e9db0c5a0cee7f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f3:33:d7:42:a4:a3:f5:d1:5a:d0:a5:b2:10:
                    71:06:bb:db:9f:4b:40:fd:4e:e1:da:74:dc:b8:4f:
                    0a:05:ea:0a:b1:1b:63:88:cc:79:49:e8:4d:ff:5a:
                    82:2f:a6:92:59:4c:09:b1:b1:76:eb:68:d4:58:2f:
                    85:3b:e8:68:69:c7:61:da:2c:06:38:aa:24:2b:3b:
                    94:58:46:a9:1b:51:c1:7f:b4:e6:44:be:9a:b7:38:
                    d5:40:27:e5:02:08:74:50:41:7e:02:a3:63:3a:40:
                    dd:c3:98:3e:0c:a1:4d:a6:a6:58:fb:d8:6d:06:63:
                    e7:37:20:54:17:68:2c:67:57:62:b9:3e:85:bd:bf:
                    29:f7:f2:16:c6:33:42:5e:da:62:8b:08:87:9f:b4:
                    bd:67:a5:59:86:63:07:a8:73:50:c1:a1:ae:48:5f:
                    e5:7c:10:15:2c:a3:aa:f2:fb:19:9a:2c:93:93:c2:
                    e8:97:ff:8f:fe:0d:9a:cf:89:a9:bc:05:cf:46:ad:
                    66:1a:bb:97:d0:31:0a:e7:36:8f:6e:12:6a:f0:d1:
                    77:5d:db:17:9d:71:d2:1a:66:a2:34:6e:fb:f0:13:
                    da:72:2e:bb:ab:32:0d:58:75:d9:8e:a1:53:c9:4d:
                    dc:48:e7:c2:43:97:03:71:ce:82:5c:db:40:f6:3d:
                    89:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AE:31:67:91:5D:10:66:B4:4D:B1:84:2E:FE:14:16:33:2B:A8:93
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/aa40a4ed781b36f10ca30684e9db0c5a0cee7f66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.226.0/25

    Signature Algorithm: sha256WithRSAEncryption
         65:0a:c7:56:57:7a:ef:36:28:27:6e:8e:78:76:1d:69:c7:27:
         f3:a3:a5:f3:bc:66:19:41:13:11:a3:a4:d8:d1:c4:81:e4:b5:
         e1:30:fb:1c:f8:40:bc:58:2f:97:e1:df:80:d4:f3:8e:79:0c:
         61:c2:e1:04:f3:4c:e9:b5:dd:28:41:ce:e1:5c:ae:53:2f:4c:
         7d:e8:d6:07:27:20:30:59:96:3b:97:4c:6b:13:5c:8d:2f:76:
         06:ce:9e:fd:8d:5e:b2:ce:95:0e:62:82:85:0d:e3:c5:3b:f5:
         06:4b:5d:7d:c2:de:c0:14:4b:2a:3c:5f:67:b6:8e:16:46:2b:
         6b:2b:49:a7:94:05:46:f7:88:06:ec:00:f4:90:92:d3:53:97:
         79:cb:4b:d9:c2:09:b7:8b:45:44:f2:76:7f:4b:62:41:83:45:
         e5:16:4b:9d:52:f9:5e:c9:7d:ad:42:8d:c3:6d:46:aa:9a:bf:
         33:84:a0:0a:e5:49:b6:ea:4e:46:9b:a3:a8:3e:e9:c2:3a:2d:
         88:7f:80:4c:61:21:a6:52:9e:a7:1d:a7:f0:b9:18:29:d2:df:
         30:4d:d8:78:ce:48:ba:34:9f:92:9a:63:63:56:c0:0c:8c:9b:
         2d:cb:51:00:1f:f5:ad:04:24:68:69:1c:75:d8:8e:cf:c9:75:
         41:d0:6a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----