Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/0e0fb7d146cb58dc10ca96d0cee7bd7f323b5558.roa
File:                     0e0fb7d146cb58dc10ca96d0cee7bd7f323b5558.roa (raw, json)
Hash identifier:          PGzBw/1+qIsXDrGH8ULup0eRjigcI2TjxpfWoKvoU2s=
Subject key identifier:   E4:F9:40:F4:7C:9C:33:A7:7D:07:B1:FD:4D:79:71:1C:3F:59:B9:2A
Certificate issuer:       /CN=aa536e2112fb6fbd4fd90b644c6fd66acba797ea
Certificate serial:       0E775A
Authority key identifier: 34:98:A2:3B:7F:57:B4:51:CF:75:1E:21:7C:78:5E:0F:BE:35:87:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/0e0fb7d146cb58dc10ca96d0cee7bd7f323b5558.roa
Signing time:             Wed 28 Apr 2021 14:34:58 +0000
ROA not before:           Wed 28 Apr 2021 03:00:00 +0000
ROA not after:            Fri 28 Apr 2023 03:00:00 +0000
asID:                     271906
IP address blocks:        200.85.143.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 948058 (0xe775a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa536e2112fb6fbd4fd90b644c6fd66acba797ea
        Validity
            Not Before: Apr 28 03:00:00 2021 GMT
            Not After : Apr 28 03:00:00 2023 GMT
        Subject: CN=0e0fb7d146cb58dc10ca96d0cee7bd7f323b5558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0f:00:b4:1f:93:44:92:20:22:94:bd:0f:c6:
                    36:c1:1c:80:8c:01:67:59:16:37:f1:f2:1f:da:f9:
                    7e:4c:1c:1d:8d:d5:d9:c1:f9:03:63:eb:04:48:45:
                    51:db:74:66:7a:35:3a:a0:68:11:95:88:c0:fa:05:
                    bb:b5:83:e8:26:30:41:92:34:37:58:89:d1:1c:49:
                    d8:15:aa:0b:10:b8:37:8e:e1:f3:7b:7b:47:25:68:
                    8f:e9:5e:fa:e9:e7:80:2c:ae:1f:be:d9:bf:ce:4d:
                    b6:7b:27:64:3f:de:38:87:36:b2:e8:db:80:1b:75:
                    80:87:cb:62:bb:98:cc:1f:00:56:9f:6d:9b:9c:03:
                    84:06:3c:25:5f:e3:0a:17:af:e0:91:b0:22:f9:12:
                    c9:79:d5:b2:94:4b:1c:ca:33:00:24:f1:77:65:71:
                    b2:50:58:2a:a7:b8:8b:8d:2a:91:31:88:d7:b4:90:
                    31:a4:97:63:e9:96:cd:c1:54:9f:97:01:bf:d1:7a:
                    8e:a0:a0:a4:59:df:e9:e0:e6:5a:fd:b8:a9:b7:89:
                    41:1f:3f:88:97:c6:d6:b8:a5:2d:c0:b6:b3:fb:d7:
                    1b:4c:f9:a9:36:ac:62:24:38:05:c2:e9:8a:9c:ed:
                    60:69:1d:a4:80:8c:52:13:05:67:85:03:ac:eb:c0:
                    90:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F9:40:F4:7C:9C:33:A7:7D:07:B1:FD:4D:79:71:1C:3F:59:B9:2A
            X509v3 Authority Key Identifier:
                keyid:34:98:A2:3B:7F:57:B4:51:CF:75:1E:21:7C:78:5E:0F:BE:35:87:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/0e0fb7d146cb58dc10ca96d0cee7bd7f323b5558.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:49:a0:fb:14:b3:3d:70:48:af:d4:96:62:ed:48:be:73:86:
         b0:27:f8:6e:50:53:25:34:d4:88:00:2e:fe:fd:38:a3:74:0c:
         5f:f4:6f:fe:dc:08:1b:08:1f:06:82:01:e0:26:7f:92:f3:50:
         82:15:3e:67:cd:dd:1c:10:ab:cb:91:0f:66:19:49:94:00:26:
         7f:3f:d3:d1:2e:95:c9:9f:e7:07:f4:46:01:bf:79:b6:a7:b3:
         ad:df:b9:ab:16:fd:67:be:4d:0f:47:91:22:d3:35:d6:8f:c5:
         04:1a:ec:c1:21:e0:d6:63:36:68:6c:e9:ba:e2:dc:d5:26:ec:
         28:f9:99:48:ff:9b:f0:90:2a:b3:43:b2:1d:32:e4:da:ac:54:
         23:03:f2:90:17:6b:50:7f:6b:dc:62:ca:8f:35:06:28:fe:8f:
         fb:70:a4:a3:a8:b8:22:70:f9:98:05:00:53:ae:02:30:c5:79:
         ab:1b:be:ba:d6:fa:ac:34:08:ad:54:38:1b:cb:fb:97:49:61:
         d4:7d:1d:08:0d:a1:3c:76:ff:87:d3:df:b2:93:ab:ac:3c:f7:
         98:f5:53:61:9b:d6:f3:6f:95:67:16:b5:fe:32:6f:e6:8c:a6:
         2a:58:14:0c:e8:74:fc:4c:65:31:cb:53:72:18:67:1f:a1:cb:
         ae:ce:95:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----