Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/39c7a5b459607ec7855a42d50d6c98bd62761cf7.roa
File:                     39c7a5b459607ec7855a42d50d6c98bd62761cf7.roa (raw, json)
Hash identifier:          7TyBLnuOwXMDTe3dKWTRfPIPJ0DMagTeekT9/oVrqQ4=
Subject key identifier:   43:A0:AB:F9:2B:DE:14:10:E0:0A:DB:35:6E:CD:71:46:3D:A2:02:A3
Certificate issuer:       /CN=3f82c3ad9e5010fae8956f061f054fe6125c235c
Certificate serial:       1C63B6
Authority key identifier: 2B:45:37:66:5F:9D:C8:57:E0:B5:E0:35:69:B2:E8:73:65:BD:BE:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f82c3ad9e5010fae8956f061f054fe6125c235c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/39c7a5b459607ec7855a42d50d6c98bd62761cf7.roa
Signing time:             Thu 17 Aug 2023 19:55:19 +0000
ROA not before:           Wed 16 Aug 2023 19:55:18 +0000
ROA not after:            Sun 17 Aug 2025 19:55:18 +0000
asID:                     273007
IP address blocks:        200.107.204.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1860534 (0x1c63b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f82c3ad9e5010fae8956f061f054fe6125c235c
        Validity
            Not Before: Aug 16 19:55:18 2023 GMT
            Not After : Aug 17 19:55:18 2025 GMT
        Subject: CN=39c7a5b459607ec7855a42d50d6c98bd62761cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:03:eb:52:86:db:bd:6d:60:d1:70:5c:e0:d6:
                    b8:0a:f6:e1:1e:aa:b7:ad:65:d6:6d:e3:63:d8:db:
                    f4:c6:6c:c0:dc:c5:c2:fc:45:b0:7f:3d:68:50:a6:
                    c7:da:e1:83:fa:ce:ad:5f:1d:87:4e:0b:09:56:e8:
                    a9:0c:94:38:5e:32:95:de:60:05:b9:84:fa:d8:7d:
                    8e:ee:0c:55:88:d3:ff:1c:9a:5a:b5:4f:af:75:21:
                    b8:0a:ae:80:d9:01:7d:32:49:65:bd:71:5e:7b:d1:
                    0d:68:5b:f4:ef:0c:44:07:37:a6:49:92:3c:46:0a:
                    8f:e5:8e:04:1a:97:3f:61:63:84:7e:9f:8c:3f:48:
                    9c:f1:10:77:10:ab:6e:3b:b3:d4:61:e6:81:a7:e2:
                    33:dd:95:73:1e:3c:df:ec:73:44:0f:f8:cc:98:be:
                    7c:40:8f:21:40:98:cc:03:0c:ef:6e:df:21:cb:da:
                    5a:cf:7a:13:1b:be:a3:9b:1f:a7:39:e0:78:f7:ce:
                    da:e0:d5:27:6e:df:56:42:48:d8:15:e7:9b:d6:88:
                    3f:0d:21:b3:84:b2:a9:9b:83:3c:ba:a4:3a:af:e7:
                    c8:c7:91:0f:b5:9e:c0:13:51:89:7d:e4:da:60:56:
                    42:53:72:67:a8:f6:96:5c:fa:d8:b6:7f:3f:ae:46:
                    f3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A0:AB:F9:2B:DE:14:10:E0:0A:DB:35:6E:CD:71:46:3D:A2:02:A3
            X509v3 Authority Key Identifier:
                keyid:2B:45:37:66:5F:9D:C8:57:E0:B5:E0:35:69:B2:E8:73:65:BD:BE:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f82c3ad9e5010fae8956f061f054fe6125c235c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/39c7a5b459607ec7855a42d50d6c98bd62761cf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/3f82c3ad9e5010fae8956f061f054fe6125c235c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:e2:ef:d4:a0:ca:dd:d7:e3:6c:3a:a4:03:1f:67:e8:9b:5f:
         37:52:ce:1d:f3:60:8e:2c:d5:4d:26:7f:71:ce:cc:93:c8:ad:
         69:bc:d1:9b:79:e3:a3:33:70:b6:f9:82:de:3c:4a:f7:c7:84:
         a0:70:dc:0a:9f:a7:23:5a:ad:8f:eb:95:62:81:8c:58:ff:e0:
         61:3a:f0:29:f8:f5:0c:94:47:74:f9:0f:30:02:83:f9:57:03:
         98:90:90:16:85:b4:81:ae:b8:46:56:99:f4:78:b3:bf:19:19:
         26:72:f2:04:07:86:ea:ae:ed:a5:95:5a:ef:d7:59:35:61:d6:
         ad:bf:ea:bf:55:67:a8:eb:70:9f:c8:25:4f:90:6e:be:53:07:
         f5:c6:1b:fa:a6:84:13:3b:31:92:6a:15:d3:31:c8:bc:ab:53:
         5a:e7:7b:ac:bf:37:79:fb:d2:00:6f:f2:92:1b:ee:fb:f4:b2:
         f3:8a:6f:99:c9:ed:dd:37:99:71:ca:b7:fd:4b:45:98:df:e6:
         55:f8:86:a9:b8:71:74:70:33:e0:d9:3c:16:43:88:e4:12:d4:
         ac:9f:39:f4:4b:a1:31:8a:2e:31:32:33:08:92:c5:7f:4a:bd:
         79:a9:2b:c1:1c:5c:79:42:74:66:d1:4f:88:60:d7:cd:85:4b:
         6e:2f:ca:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----