Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/ba00f5568b458b22b759d5b1a8240739564a882f.roa
File:                     ba00f5568b458b22b759d5b1a8240739564a882f.roa (raw, json)
Hash identifier:          4y/XEj/xakaUFKOQ0mum2qVBgE9JFcAgKF+tmqZNoUk=
Subject key identifier:   46:AE:1E:43:82:C1:3E:11:42:6D:1B:EC:B5:34:52:A2:8D:03:C9:DA
Certificate issuer:       /CN=f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e
Certificate serial:       1FD89E
Authority key identifier: 87:F8:D4:35:76:20:56:6B:10:27:8C:92:DC:36:C0:19:51:36:F4:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/ba00f5568b458b22b759d5b1a8240739564a882f.roa
Signing time:             Wed 29 Mar 2023 12:05:36 +0000
ROA not before:           Tue 28 Mar 2023 12:04:49 +0000
ROA not after:            Sat 29 Mar 2025 12:04:49 +0000
asID:                     12684
IP address blocks:        201.220.38.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2087070 (0x1fd89e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e
        Validity
            Not Before: Mar 28 12:04:49 2023 GMT
            Not After : Mar 29 12:04:49 2025 GMT
        Subject: CN=ba00f5568b458b22b759d5b1a8240739564a882f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a0:b9:c4:95:b6:c9:57:64:c3:74:ce:57:a0:
                    19:05:7b:26:9e:ac:fc:43:ea:03:04:da:b2:05:77:
                    36:9c:20:76:23:d7:84:40:99:91:fc:ba:42:be:c7:
                    a5:35:08:af:83:d9:48:0d:0f:40:83:02:c0:51:1a:
                    76:69:0d:1c:00:b1:ce:09:c4:40:89:e6:16:bb:56:
                    66:1d:40:b5:60:09:07:32:22:2b:f2:c0:45:46:54:
                    9c:4a:d4:de:91:b2:96:94:4c:6b:42:13:e4:67:63:
                    00:5d:b8:13:1b:51:a8:dc:2e:e7:de:e3:ae:0d:ff:
                    ac:93:7b:a9:11:08:c5:14:a6:75:cc:bf:14:3e:5b:
                    55:29:c4:c7:a7:47:a5:28:aa:f4:ba:07:53:09:49:
                    cf:ea:9f:96:fe:55:f4:60:81:cf:e4:48:60:30:6d:
                    c9:c2:c9:fa:03:ca:d5:8a:41:c7:77:cd:36:fa:06:
                    2c:29:99:88:88:26:fe:26:db:4f:87:f0:ce:05:40:
                    e5:28:15:c0:af:ca:18:55:d4:74:b2:1f:76:28:37:
                    32:91:46:3e:3b:7c:7e:70:25:32:97:58:48:f7:b4:
                    56:b2:2b:7f:ca:98:3c:1d:5d:79:4d:da:2c:b8:91:
                    52:ce:61:80:69:08:1f:e8:27:76:e9:8e:c2:aa:b8:
                    81:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:AE:1E:43:82:C1:3E:11:42:6D:1B:EC:B5:34:52:A2:8D:03:C9:DA
            X509v3 Authority Key Identifier:
                keyid:87:F8:D4:35:76:20:56:6B:10:27:8C:92:DC:36:C0:19:51:36:F4:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/ba00f5568b458b22b759d5b1a8240739564a882f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:49:3b:0c:f1:f7:ca:0e:4e:ce:dd:ee:8f:c7:6e:27:6f:39:
         b2:54:7e:6b:bb:19:b0:da:63:7f:31:e4:0f:a7:51:15:8f:b1:
         51:bd:05:ff:11:40:62:8b:a6:8b:fb:c9:a8:2a:ce:80:60:51:
         5a:0e:82:31:2d:71:3f:ce:1f:ff:a2:96:bd:6b:87:5c:28:94:
         89:b8:36:71:b8:96:8d:da:f0:03:86:fa:df:16:36:c8:91:3c:
         a6:40:de:08:9f:46:3d:c8:b9:20:1d:46:3d:4f:b2:ae:d4:e7:
         4e:3f:a3:ab:05:82:2d:2a:95:75:98:1d:a8:4f:04:29:3f:10:
         32:59:82:0d:7f:68:cd:2c:a3:d8:b0:10:19:5c:14:a6:45:1f:
         b2:77:99:70:86:84:ef:75:c1:4e:41:bc:8a:e8:65:07:5b:c6:
         1b:55:7d:d6:fa:ff:44:d5:06:89:1c:48:e2:c8:59:f6:4e:05:
         d1:7d:54:0b:97:0d:99:a6:6e:a4:37:aa:d4:73:71:09:16:25:
         e0:26:81:de:c7:20:3b:3d:4a:64:89:af:0b:c3:ec:37:88:d0:
         36:42:b6:8d:01:26:54:e3:3a:d3:0e:b5:02:49:1d:c6:10:ab:
         e1:6c:87:77:05:a3:41:62:88:fc:32:04:41:32:ca:5c:6b:de:
         1a:29:1b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----