Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4012d70-d0e6-4e3b-9b62-a9882b6db9ec/d07d78bc9af40d0603dc7508c96f7a877e3be403.roa
File:                     d07d78bc9af40d0603dc7508c96f7a877e3be403.roa (raw, json)
Hash identifier:          gSCE93uxZ6/87NYP1TMVLRV3yNiUHKu3j4USVLmedvo=
Subject key identifier:   92:8F:65:7B:C4:03:28:F9:A4:48:2B:1B:1D:90:1E:13:62:0E:54:BE
Certificate issuer:       /CN=64b3bc09828cc99775b2fc1d0a01fbd5c59ce506
Certificate serial:       310C
Authority key identifier: C9:C7:25:65:61:A4:18:31:42:B1:54:83:EE:32:85:84:66:7A:AC:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/64b3bc09828cc99775b2fc1d0a01fbd5c59ce506.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f4012d70-d0e6-4e3b-9b62-a9882b6db9ec/d07d78bc9af40d0603dc7508c96f7a877e3be403.roa
Signing time:             Wed 05 Jan 2022 14:58:00 +0000
ROA not before:           Wed 05 Jan 2022 03:00:00 +0000
ROA not after:            Fri 05 Jan 2024 03:00:00 +0000
asID:                     269981
IP address blocks:        200.215.248.0/22 maxlen: 24
                          2803:4ee0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12556 (0x310c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64b3bc09828cc99775b2fc1d0a01fbd5c59ce506
        Validity
            Not Before: Jan  5 03:00:00 2022 GMT
            Not After : Jan  5 03:00:00 2024 GMT
        Subject: CN=d07d78bc9af40d0603dc7508c96f7a877e3be403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:af:4d:50:b7:f8:6b:12:38:3f:c6:d4:9d:87:
                    e9:92:0d:73:6a:35:49:1d:d4:3a:89:1b:91:aa:b6:
                    15:2f:6b:81:94:0c:d2:23:74:8e:8e:98:34:30:a6:
                    17:02:30:b9:5b:7b:67:ef:fe:7a:4f:bc:99:84:c7:
                    6f:e9:e0:75:58:24:55:b8:81:64:92:2f:de:bb:6a:
                    45:c5:50:c6:91:d3:ba:7d:75:30:e5:35:37:de:cb:
                    85:f9:de:1a:53:9c:13:4d:b0:79:fd:99:95:56:49:
                    ff:fe:3a:58:f9:c6:4c:c9:fc:38:ed:54:b9:73:e3:
                    5a:6e:e7:05:87:31:2b:d6:61:07:b2:30:8b:65:bc:
                    58:35:74:73:4c:f7:02:9c:1f:3f:fd:9d:ff:c0:c1:
                    f4:7a:e6:6b:bc:af:d2:8d:9d:fa:44:bf:5e:9d:ad:
                    45:23:1b:f5:b6:6e:6b:68:e3:8b:2f:fa:cf:5a:6d:
                    a5:9e:05:ed:b2:56:54:38:c2:3d:b9:82:5c:bc:ea:
                    f8:b6:1a:46:dd:5f:1b:a9:11:f0:ef:fd:63:32:9d:
                    b9:6a:1a:ab:50:5f:b4:e9:56:d9:3b:92:a9:3e:bb:
                    88:16:39:0b:54:10:d4:56:8d:b3:91:d0:a8:68:36:
                    90:e3:88:ed:32:96:b3:14:28:c3:3f:88:ce:76:f3:
                    d6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8F:65:7B:C4:03:28:F9:A4:48:2B:1B:1D:90:1E:13:62:0E:54:BE
            X509v3 Authority Key Identifier:
                keyid:C9:C7:25:65:61:A4:18:31:42:B1:54:83:EE:32:85:84:66:7A:AC:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/64b3bc09828cc99775b2fc1d0a01fbd5c59ce506.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4012d70-d0e6-4e3b-9b62-a9882b6db9ec/d07d78bc9af40d0603dc7508c96f7a877e3be403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f4012d70-d0e6-4e3b-9b62-a9882b6db9ec/64b3bc09828cc99775b2fc1d0a01fbd5c59ce506.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.248.0/22
                IPv6:
                  2803:4ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:2d:ba:58:fa:80:19:89:19:44:3a:d0:4a:13:34:9c:fb:57:
         2d:59:c4:92:a8:f1:dd:70:1e:18:e2:5d:5c:8d:98:2f:25:85:
         c5:19:85:71:10:d9:6d:95:5c:4a:28:45:fd:32:f0:42:e0:55:
         50:d6:31:d1:36:e9:25:5b:24:87:7d:36:19:9e:09:6f:f0:f5:
         e3:bc:dc:29:2d:22:80:f2:ed:fa:97:34:57:05:f6:2c:e7:9d:
         db:44:79:91:88:f5:a4:2d:f8:67:e6:d1:74:a6:5e:dc:bd:3d:
         92:e6:ee:40:2f:60:3a:c5:3e:ed:d0:0c:c1:3f:b8:0f:29:bc:
         09:49:f6:29:97:cf:87:cd:25:71:8c:fa:24:b6:8e:11:42:aa:
         c6:f4:c2:cb:1d:e1:11:74:e0:02:44:ce:2b:89:bd:ba:9a:fa:
         02:7f:80:93:e9:4b:a7:34:e4:7b:5c:18:38:2b:19:85:3e:eb:
         1c:c1:25:0c:5c:3e:41:4d:74:fe:a3:fa:b8:40:4e:7a:20:e5:
         49:d7:9d:3d:1f:82:fd:bf:a6:87:2d:42:fc:37:a9:3d:21:3b:
         da:11:59:0f:2a:2f:6d:1a:0e:fe:52:29:75:f5:7b:c3:e2:7c:
         2e:a6:9d:d4:6b:4f:72:b4:97:4d:78:06:78:08:cc:ea:94:f6:
         be:c8:e6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----