Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/00f9fa8d228109b6e09e7bd10bc9ef02333ce425.roa
File:                     00f9fa8d228109b6e09e7bd10bc9ef02333ce425.roa (raw, json)
Hash identifier:          ugN3oSaTjXaQ5mwnqHmwC2JG65bTqjUvojp2RWS8Tgg=
Subject key identifier:   70:65:23:B5:54:39:0C:A1:87:AC:31:66:FA:BB:92:F6:1B:D6:F2:C7
Certificate issuer:       /CN=cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1
Certificate serial:       206F0E
Authority key identifier: 2D:42:EE:B8:29:52:68:88:0F:E1:47:1B:41:3F:1F:76:05:D0:67:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/00f9fa8d228109b6e09e7bd10bc9ef02333ce425.roa
Signing time:             Thu 13 Jul 2023 19:09:26 +0000
ROA not before:           Wed 12 Jul 2023 19:09:26 +0000
ROA not after:            Sun 13 Jul 2025 19:09:26 +0000
asID:                     263703
IP address blocks:        45.186.208.0/22 maxlen: 24
                          143.255.84.0/22 maxlen: 24
                          190.97.224.0/19 maxlen: 24
                          2803:d760::/33 maxlen: 48
                          2803:d760:8000::/34 maxlen: 48
                          2803:d760:c000::/34 maxlen: 34
                          2803:7800::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2125582 (0x206f0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1
        Validity
            Not Before: Jul 12 19:09:26 2023 GMT
            Not After : Jul 13 19:09:26 2025 GMT
        Subject: CN=00f9fa8d228109b6e09e7bd10bc9ef02333ce425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bd:8a:2d:b5:b7:c8:99:c1:e8:c8:f4:8c:de:
                    18:7e:1a:61:34:82:06:a7:2f:ce:1a:99:f2:68:2b:
                    f4:07:ab:be:d9:10:90:25:8c:a0:32:b1:e0:be:39:
                    98:f0:0d:e7:46:41:80:74:ce:49:41:30:fc:3f:36:
                    c5:0a:4d:69:92:3b:4b:99:e9:62:9f:1a:ac:ab:d4:
                    c4:39:33:ae:17:69:cd:f9:b7:65:dc:ee:58:a1:48:
                    0f:23:5a:aa:31:df:ff:71:a2:91:b1:df:c1:54:1a:
                    c4:c9:fa:df:d4:96:87:d4:3d:98:69:af:b9:d2:8a:
                    48:b3:ff:3c:6b:27:b0:e4:f6:64:ab:ec:38:5f:69:
                    ae:c4:11:64:00:13:ec:c4:2d:6d:9d:fd:e8:01:34:
                    ac:89:82:b0:83:23:c3:78:fb:89:e7:99:20:78:e5:
                    ba:57:0c:b8:90:e1:95:ec:a3:9b:78:15:77:22:df:
                    43:46:23:8f:dc:99:88:7c:d3:be:7a:e1:07:1d:26:
                    e9:87:e2:e5:6f:2c:93:3c:79:b4:88:ee:a6:70:f4:
                    a0:a3:e1:cd:ab:4f:78:0f:af:96:11:d5:f3:6b:0c:
                    d4:26:63:79:f4:df:1f:61:c3:a6:e0:58:c5:03:17:
                    be:91:ac:95:c7:3a:26:a0:51:f9:ef:d5:a1:e8:63:
                    b8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:65:23:B5:54:39:0C:A1:87:AC:31:66:FA:BB:92:F6:1B:D6:F2:C7
            X509v3 Authority Key Identifier:
                keyid:2D:42:EE:B8:29:52:68:88:0F:E1:47:1B:41:3F:1F:76:05:D0:67:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/00f9fa8d228109b6e09e7bd10bc9ef02333ce425.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.208.0/22
                  143.255.84.0/22
                  190.97.224.0/19
                IPv6:
                  2803:7800::/32
                  2803:d760::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:f3:35:63:46:d4:79:2b:d7:76:5b:50:88:d1:42:48:2b:1f:
         b0:9c:ba:f2:3a:4c:c5:29:04:b3:a9:b2:5c:f6:06:aa:a3:d3:
         34:77:41:75:62:80:b7:ff:4c:28:73:c3:7e:92:ae:9f:aa:fa:
         c8:e9:7b:79:fa:fa:1c:51:6c:fa:d9:a3:da:06:62:9a:3c:68:
         90:da:53:02:45:11:e3:00:b0:08:b2:07:5f:6f:f6:d3:44:62:
         ea:da:e1:f6:88:22:f3:8e:46:8b:ca:0d:7f:9e:b8:28:98:33:
         14:ad:6a:e9:48:33:a2:94:ef:cb:0f:eb:28:b8:29:36:09:75:
         3b:1d:09:8c:18:cd:3f:47:92:b0:bb:7b:12:d0:f4:14:7c:02:
         5c:31:d2:89:bb:43:3f:b9:6e:b0:27:a5:a7:f7:79:91:42:62:
         d4:67:b5:8c:64:f7:bb:47:49:89:d4:cc:c8:b9:bb:27:68:ed:
         bb:19:01:3f:33:9c:a7:27:07:a8:86:28:e9:03:9c:0f:15:7c:
         9d:03:51:97:e3:ed:6e:d6:9a:d1:23:76:1c:cd:23:5a:d6:91:
         7f:46:4e:42:ad:c1:08:1d:9f:f8:14:cf:8b:c9:0d:c5:65:5d:
         b2:39:ef:83:ba:1d:03:0f:5e:35:62:de:5d:b2:bf:fb:c0:07:
         e5:01:70:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----