Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/94f14c9dec17426c40aef5764e22f91850795b00.roa
File:                     94f14c9dec17426c40aef5764e22f91850795b00.roa (raw, json)
Hash identifier:          BSG8m34aNfrkZWoiV8NjxcewK1nYxAzuPf545o5tw38=
Subject key identifier:   A3:C2:E6:33:72:E8:40:0F:68:B2:EC:AF:34:B9:83:D5:2A:A1:5B:CC
Certificate issuer:       /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial:       1AB8FF
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/94f14c9dec17426c40aef5764e22f91850795b00.roa
Signing time:             Sat 29 Oct 2022 03:26:11 +0000
ROA not before:           Mon 22 Mar 2021 14:30:56 +0000
ROA not after:            Tue 24 Mar 2026 14:30:56 +0000
asID:                     18747
IP address blocks:        181.78.0.0/15 maxlen: 15
                          181.79.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1751295 (0x1ab8ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
        Validity
            Not Before: Mar 22 14:30:56 2021 GMT
            Not After : Mar 24 14:30:56 2026 GMT
        Subject: CN=94f14c9dec17426c40aef5764e22f91850795b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bf:9f:c9:3f:07:39:08:79:28:2c:74:d8:35:
                    2c:85:65:2e:72:d9:3f:70:ee:ad:bf:d3:d1:65:91:
                    9c:1e:9b:8e:9d:4d:40:15:cc:eb:43:da:9a:a6:86:
                    60:97:1e:8c:70:6d:68:bc:37:a3:3d:c8:61:ea:f0:
                    71:08:e6:15:56:55:66:33:01:5f:ae:d6:68:1c:55:
                    c6:e2:12:01:5d:99:10:28:a7:7c:63:8c:8b:88:2f:
                    c4:81:37:17:8e:97:35:4a:72:47:6e:04:32:09:0b:
                    6b:9c:09:b3:1c:b5:25:35:88:04:c1:e3:5a:45:9f:
                    2e:c1:36:6c:63:b1:20:c8:50:e5:a3:26:3b:5d:f4:
                    4a:8e:00:1a:4e:fc:82:98:08:41:db:76:f4:50:3f:
                    46:ac:09:cf:a0:92:ad:cc:62:9f:d2:6c:69:eb:6b:
                    3c:1d:b2:94:20:51:d7:11:48:1c:2e:a8:84:f8:5e:
                    ff:f7:7a:ab:73:ba:90:00:e8:8c:a9:a5:fd:76:b0:
                    38:3f:98:8d:3f:c4:4d:7a:2f:9b:cf:3f:b2:89:57:
                    5f:69:87:d6:7a:97:cb:5f:db:74:c7:b5:38:6b:dc:
                    3c:dc:62:09:e7:e4:5a:e7:5c:1b:7e:92:c5:9b:7c:
                    f9:98:75:dd:5b:2f:a9:db:2d:07:2a:fe:b8:9f:94:
                    00:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C2:E6:33:72:E8:40:0F:68:B2:EC:AF:34:B9:83:D5:2A:A1:5B:CC
            X509v3 Authority Key Identifier:
                keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/94f14c9dec17426c40aef5764e22f91850795b00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         48:e9:59:3a:cc:77:04:3d:39:82:e1:19:8b:3a:16:40:cc:ac:
         c6:df:7a:6c:8c:cc:62:35:c9:b0:28:38:a4:3a:c9:d4:f9:35:
         d3:a4:49:0a:75:0b:8f:4b:05:ed:78:26:91:4d:9d:25:ff:0e:
         1e:c1:05:1c:c9:99:90:75:6a:dc:a1:e1:c7:a9:12:dd:51:56:
         6d:fd:5d:e2:53:b6:6e:20:ef:14:be:34:b6:51:e4:9a:57:ce:
         66:19:94:00:73:b5:75:39:84:7b:b2:7d:45:d9:49:f5:f3:66:
         fa:05:c2:1d:f9:b2:4e:8c:3d:62:df:2f:0d:b6:ef:35:ad:68:
         7b:68:85:62:d1:d3:fb:b6:85:cc:67:f0:00:c2:4f:4c:62:18:
         6a:df:c4:b0:9d:78:67:07:8c:04:1e:70:43:86:05:0c:e2:7b:
         21:17:5f:48:79:17:a5:cf:d9:bc:47:65:e1:83:d1:8c:71:26:
         99:1f:8f:5a:c3:f7:09:5e:2a:5d:5c:27:dc:a6:ea:14:dd:36:
         0a:6f:8e:34:8c:52:0b:75:3a:b3:44:b1:66:3a:f0:03:10:8d:
         1e:ab:fb:7d:a3:0f:e2:a4:6a:99:ac:50:cc:32:4e:63:34:b8:
         15:1b:35:8a:7f:c8:94:50:ec:2b:2c:b3:19:da:07:2a:05:a0:
         81:3f:d0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----