Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/98e120f4b9e0bd1e29bec413fc072ed436825431.roa
File:                     98e120f4b9e0bd1e29bec413fc072ed436825431.roa (raw, json)
Hash identifier:          h8rUOyyudUYgCR50z40k2ACIjjcoS8nlfGTOZVNZTaU=
Subject key identifier:   53:6E:E3:32:C5:72:31:19:DA:E3:DA:77:7A:2F:E6:52:38:F2:18:68
Certificate issuer:       /CN=4a3d4fdf5d4afff13254531592d21c29a5ad3196
Certificate serial:       E481
Authority key identifier: 9F:B3:09:64:3E:AC:FE:F8:8C:AE:4C:7B:C0:BC:58:B2:FC:C8:E5:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a3d4fdf5d4afff13254531592d21c29a5ad3196.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/98e120f4b9e0bd1e29bec413fc072ed436825431.roa
Signing time:             Wed 07 Sep 2022 14:21:36 +0000
ROA not before:           Wed 07 Sep 2022 14:05:22 +0000
ROA not after:            Sat 07 Sep 2024 14:05:22 +0000
asID:                     272038
IP address blocks:        181.233.180.0/22 maxlen: 24
                          2803:4d10::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58497 (0xe481)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a3d4fdf5d4afff13254531592d21c29a5ad3196
        Validity
            Not Before: Sep  7 14:05:22 2022 GMT
            Not After : Sep  7 14:05:22 2024 GMT
        Subject: CN=98e120f4b9e0bd1e29bec413fc072ed436825431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:04:04:b1:30:51:32:66:4f:1a:60:d1:78:b8:
                    3f:6a:6e:87:3f:00:1c:92:17:b1:47:e6:a2:af:7c:
                    34:5b:ef:7b:bd:99:a9:69:17:16:8d:be:57:e1:f9:
                    77:e9:8f:4e:da:e6:f1:1f:3b:9d:8d:a4:fe:44:fc:
                    16:83:c5:fa:55:a4:86:62:b0:83:a8:02:32:42:20:
                    e9:f3:8a:57:f6:39:16:50:f3:bc:e8:0e:0e:77:13:
                    0a:db:b4:9d:2a:fb:cd:08:9d:cf:65:97:98:ed:1d:
                    02:8b:4f:06:55:a1:55:66:da:9e:15:60:0d:41:35:
                    d0:9b:39:cb:26:02:de:90:48:17:5e:78:aa:a6:d5:
                    7b:9c:db:75:46:7e:0f:ef:b1:83:fc:dc:55:02:48:
                    ab:c4:f7:56:ba:61:38:29:36:3b:68:b1:e5:99:8d:
                    65:6b:fd:1d:06:9e:2e:1a:45:94:ea:2f:a7:2a:a9:
                    1a:b3:49:8d:1d:f2:4a:66:91:b0:b4:d0:b2:d7:2e:
                    37:a6:b5:c7:ec:2f:e8:fa:07:f9:bc:7f:98:ec:e6:
                    2d:b9:a4:f3:b2:a1:7b:07:71:e5:63:4e:ed:67:14:
                    77:99:4e:3d:38:8a:6f:3d:e9:41:56:14:b5:4e:fb:
                    05:7b:18:02:8a:41:bc:df:a7:02:ca:f6:bb:9c:80:
                    8b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6E:E3:32:C5:72:31:19:DA:E3:DA:77:7A:2F:E6:52:38:F2:18:68
            X509v3 Authority Key Identifier:
                keyid:9F:B3:09:64:3E:AC:FE:F8:8C:AE:4C:7B:C0:BC:58:B2:FC:C8:E5:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a3d4fdf5d4afff13254531592d21c29a5ad3196.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/98e120f4b9e0bd1e29bec413fc072ed436825431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/4a3d4fdf5d4afff13254531592d21c29a5ad3196.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.180.0/22
                IPv6:
                  2803:4d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:ea:0b:8e:0d:ac:8a:fe:57:66:da:00:25:b8:2c:8e:df:87:
         ce:19:b2:29:27:48:8c:bf:63:95:03:2a:55:18:3b:66:3e:88:
         a7:71:e2:05:48:32:7c:bd:b7:39:c1:df:01:59:c7:96:8c:57:
         c4:79:33:cd:bd:33:47:e7:3c:fe:39:f3:b8:1c:59:ad:2a:88:
         10:14:37:2d:39:2b:36:f7:24:fa:32:d4:9d:49:0a:aa:f8:ac:
         fd:d0:4b:97:44:1a:4a:39:60:08:8e:76:b2:e8:30:9d:1c:1c:
         6e:c1:f8:71:3b:1f:58:97:7a:88:86:a2:94:2f:be:c8:1f:4a:
         04:73:1c:7f:85:ea:99:6e:14:50:96:20:d7:b7:f4:f9:c6:5d:
         13:77:aa:72:95:72:4b:ac:cc:2c:95:8e:9f:6d:c7:53:ae:6a:
         e7:2a:fc:9d:86:a8:02:a6:e7:06:bc:f9:64:20:95:ea:86:e1:
         44:1e:7d:91:6b:53:48:26:54:a4:e9:25:19:bb:10:7d:8e:ae:
         ff:a5:07:7f:7b:3c:af:40:59:e4:d8:bd:5e:5f:ab:cc:9a:f9:
         9b:59:a6:29:db:72:e3:93:bc:28:2d:59:89:57:59:82:f7:f4:
         ee:d6:e2:b1:c2:58:78:5f:61:de:ce:d0:50:02:c0:60:18:fc:
         53:60:d7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----