Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/469501e94dd7f6dd9bf583a743126d07f405b021.roa
File:                     469501e94dd7f6dd9bf583a743126d07f405b021.roa (raw, json)
Hash identifier:          0Xz2DQbgaEqwlC4fjWGKSOWGd1kT2RXJY7VEuJ4BFJU=
Subject key identifier:   22:4F:41:B4:A0:FE:12:84:9F:18:33:16:38:67:8D:7D:76:E2:6B:65
Certificate issuer:       /CN=4d6514d89948e6d41988b60c1228765a24fd7536
Certificate serial:       166BA3
Authority key identifier: BB:CC:4E:12:80:1C:0A:59:B3:BF:A3:EE:9A:B2:28:AB:F3:33:D0:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d6514d89948e6d41988b60c1228765a24fd7536.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/469501e94dd7f6dd9bf583a743126d07f405b021.roa
Signing time:             Tue 29 Mar 2022 13:49:18 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     263242
IP address blocks:        200.12.248.0/24 maxlen: 24
                          200.12.250.0/24 maxlen: 24
                          200.12.251.0/24 maxlen: 24
                          200.12.252.0/24 maxlen: 24
                          200.12.253.0/24 maxlen: 24
                          200.12.254.0/24 maxlen: 24
                          2803:1180::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1469347 (0x166ba3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d6514d89948e6d41988b60c1228765a24fd7536
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=469501e94dd7f6dd9bf583a743126d07f405b021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:eb:6c:22:83:5f:c9:78:96:2b:00:1b:5a:2d:
                    b8:ea:c0:86:fa:d7:31:53:61:89:13:03:63:4a:46:
                    3f:65:54:49:58:be:c5:86:86:b5:44:bd:81:65:36:
                    37:9b:a4:20:20:5e:d8:6e:de:bf:85:5b:92:f9:31:
                    53:7b:ed:4d:b6:b8:94:b2:e0:12:f6:01:ee:02:39:
                    95:4a:7d:07:e3:9c:63:cf:12:cc:c0:45:9e:66:6a:
                    c8:79:01:fb:de:56:2d:b3:0f:ba:fe:d9:de:69:6c:
                    74:1c:27:05:63:af:21:e8:dd:fd:d2:f5:aa:66:0d:
                    80:3e:83:10:48:bf:58:b8:52:bb:64:6f:9c:6a:1a:
                    8e:d2:82:9f:bc:f9:d9:84:14:5d:03:1d:d7:4e:e5:
                    84:3f:26:19:87:cd:d1:20:8c:3e:08:7c:28:be:0a:
                    17:8e:75:91:fa:ba:9f:d2:a5:f5:14:e7:98:c6:95:
                    8d:ba:4a:4d:36:53:75:fd:33:01:9a:ce:2b:bc:fb:
                    6f:f9:54:8b:ff:07:03:11:29:2f:4b:a0:60:3d:54:
                    7f:17:22:f6:ae:13:f5:eb:30:de:b3:e9:9b:3c:4f:
                    fd:00:d6:1d:36:79:9b:d3:5b:ae:43:4b:39:ec:af:
                    ae:3b:61:7e:15:64:46:dd:de:40:55:71:42:57:cd:
                    f4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4F:41:B4:A0:FE:12:84:9F:18:33:16:38:67:8D:7D:76:E2:6B:65
            X509v3 Authority Key Identifier:
                keyid:BB:CC:4E:12:80:1C:0A:59:B3:BF:A3:EE:9A:B2:28:AB:F3:33:D0:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d6514d89948e6d41988b60c1228765a24fd7536.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/469501e94dd7f6dd9bf583a743126d07f405b021.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/4d6514d89948e6d41988b60c1228765a24fd7536.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.248.0/24
                  200.12.250.0-200.12.254.255
                IPv6:
                  2803:1180::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:ec:84:6c:6a:0e:02:3f:64:82:b7:9a:af:15:1d:c2:09:60:
         fc:85:a0:5a:d2:23:b4:7a:3d:8d:49:f5:bf:8a:52:59:f6:b9:
         e0:25:ce:ed:a7:5a:ea:4f:3d:80:dd:a8:59:12:23:e7:73:b4:
         ac:1c:d0:38:c2:01:c1:41:74:e1:39:f9:1c:dc:d1:77:56:9a:
         39:9d:a6:7a:ff:a4:4b:df:90:03:76:96:68:04:f7:b7:23:14:
         aa:c3:fe:79:3e:fd:cc:d7:41:41:90:4e:73:b7:d1:90:23:ac:
         8f:74:8e:76:0d:88:5a:23:ce:7a:ba:91:e3:4d:6d:e9:b9:c6:
         01:ff:cc:64:39:f9:7c:76:3c:32:6c:37:c7:45:d4:5d:39:3a:
         45:a3:8b:8b:17:37:5d:41:c9:0d:f1:5d:e7:9c:8a:49:7b:60:
         1a:ad:8a:7b:d6:09:40:50:89:02:7a:10:a4:2d:0f:c9:03:23:
         cd:10:f9:70:fb:13:71:aa:43:2c:bf:41:d6:84:f1:48:f7:05:
         82:07:9b:88:3d:7a:33:5e:51:62:6a:8a:98:7a:79:67:9e:81:
         90:e2:36:e4:4e:89:4b:14:b6:0e:50:ca:44:d7:60:09:46:8f:
         c2:2d:07:e7:93:fb:51:04:88:fa:45:f9:51:ca:63:24:55:d8:
         28:bf:ae:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----