Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e06244f4-1f59-4182-8105-8d770ece2856/16e69d9c0a2a3b460187672ba98e883c4772cd35.roa
File:                     16e69d9c0a2a3b460187672ba98e883c4772cd35.roa (raw, json)
Hash identifier:          uOo/BToSlB72uU2dvJaafv4G818V5qXWZK93UFRRcX0=
Subject key identifier:   54:83:44:16:6D:20:30:1F:3C:62:69:BF:2A:B7:38:FC:00:39:55:75
Certificate issuer:       /CN=a5265fc51b7f5a9f0ec142aa30846e06015ca4ff
Certificate serial:       215E81
Authority key identifier: 7B:81:30:97:3D:07:EE:38:1D:BC:1C:6C:C9:D0:90:B0:10:92:A6:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5265fc51b7f5a9f0ec142aa30846e06015ca4ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e06244f4-1f59-4182-8105-8d770ece2856/16e69d9c0a2a3b460187672ba98e883c4772cd35.roa
Signing time:             Fri 02 Jun 2023 14:46:40 +0000
ROA not before:           Thu 01 Jun 2023 14:46:39 +0000
ROA not after:            Mon 02 Jun 2025 14:46:39 +0000
asID:                     265705
IP address blocks:        186.33.204.0/24 maxlen: 24
                          2800:c30:ad00::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2186881 (0x215e81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5265fc51b7f5a9f0ec142aa30846e06015ca4ff
        Validity
            Not Before: Jun  1 14:46:39 2023 GMT
            Not After : Jun  2 14:46:39 2025 GMT
        Subject: CN=16e69d9c0a2a3b460187672ba98e883c4772cd35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:82:f6:3b:bb:f6:bf:75:61:e5:0a:4b:4d:bf:
                    5a:0b:ee:ed:1d:3a:15:04:e2:aa:b5:18:77:84:1a:
                    b6:69:c4:76:c4:41:eb:f9:e7:5b:23:17:bb:b4:2b:
                    78:f4:b9:ee:52:45:30:a2:2c:7b:28:15:39:97:c7:
                    b5:a4:5a:85:ef:35:a5:69:fb:1c:81:aa:b8:49:cc:
                    72:96:16:5f:5b:0c:9e:cd:09:d5:a1:37:f5:41:30:
                    8b:34:8d:f7:8c:13:4d:6c:54:6e:08:67:39:6f:bf:
                    8e:90:45:55:2b:25:7d:22:84:2c:5a:fe:7c:14:a2:
                    bf:cf:e7:03:e2:91:2e:ec:0a:12:6c:82:12:52:56:
                    55:cc:39:35:00:55:ac:c0:6c:b9:1c:5d:61:e1:02:
                    fd:a0:e8:a7:11:d2:cf:4b:8e:11:6c:27:17:15:d3:
                    f4:60:15:b9:13:10:98:bf:99:73:6d:c8:e9:0f:c8:
                    b0:4a:b0:66:9f:60:37:6d:29:27:ad:2e:18:c8:8b:
                    d4:2c:e8:91:72:6b:1a:e0:f7:57:71:de:27:f4:26:
                    61:27:03:84:cc:9f:16:b0:6f:2c:50:52:dd:58:08:
                    38:07:b3:0c:9a:62:72:af:7a:6f:ba:22:8a:a5:50:
                    7b:cf:a9:0b:64:0a:3d:b3:87:e4:18:e3:ee:5d:b5:
                    91:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:83:44:16:6D:20:30:1F:3C:62:69:BF:2A:B7:38:FC:00:39:55:75
            X509v3 Authority Key Identifier:
                keyid:7B:81:30:97:3D:07:EE:38:1D:BC:1C:6C:C9:D0:90:B0:10:92:A6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5265fc51b7f5a9f0ec142aa30846e06015ca4ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e06244f4-1f59-4182-8105-8d770ece2856/16e69d9c0a2a3b460187672ba98e883c4772cd35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e06244f4-1f59-4182-8105-8d770ece2856/a5265fc51b7f5a9f0ec142aa30846e06015ca4ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.33.204.0/24
                IPv6:
                  2800:c30:ad00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b9:00:0b:68:40:8f:40:0e:bb:92:75:b4:41:6e:dd:0a:a6:93:
         2f:6f:3e:7b:0b:4e:97:0f:55:57:9c:b9:ad:d8:78:23:f4:43:
         14:53:0e:11:e7:32:b8:cb:d2:01:7e:c7:b6:14:45:71:9e:54:
         ac:c3:21:0d:4d:44:cb:aa:6b:e4:b8:b6:b3:11:e3:0b:1d:a1:
         85:93:45:4a:5f:f9:34:02:11:a1:ce:aa:68:b3:47:80:b6:dc:
         68:fe:a2:09:3b:dc:be:12:36:92:03:f0:cd:db:08:d9:66:65:
         1d:40:98:93:4d:f8:b6:44:49:24:c0:84:36:d1:7d:ba:39:46:
         c8:06:86:f2:74:b5:a4:7b:6e:31:72:74:79:ad:4f:92:b9:84:
         ca:c3:fc:e7:4a:ce:f1:91:d0:ee:69:34:98:97:02:85:62:83:
         9f:40:d6:1c:db:19:b8:5a:c8:48:35:30:04:e8:0b:48:ee:de:
         3a:03:e3:94:2a:ad:24:92:8a:81:18:3c:36:92:28:e5:b2:56:
         b4:64:65:a5:5f:22:80:95:a0:ce:e0:16:c3:0a:48:2f:49:0b:
         b6:e5:74:f3:a2:7b:7d:7c:14:e4:1b:90:4b:4b:a4:cc:f7:5e:
         53:b5:71:fb:de:c3:32:f5:e8:9f:92:c3:4a:d6:0e:8e:7d:24:
         b5:17:dc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----