Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c5b62cc2dedce745292405d5083831a959342108.roa
File:                     c5b62cc2dedce745292405d5083831a959342108.roa (raw, json)
Hash identifier:          NOeFuVDlHPlDoMgtcHedSQnW7Sed1mgcZ304fbylFh0=
Subject key identifier:   05:44:28:66:FC:D6:BB:DA:B9:57:3B:14:6A:94:64:9C:98:D5:37:C7
Certificate issuer:       /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial:       1994C2
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c5b62cc2dedce745292405d5083831a959342108.roa
Signing time:             Mon 12 Sep 2022 19:26:36 +0000
ROA not before:           Wed 24 Mar 2021 14:30:56 +0000
ROA not after:            Tue 24 Mar 2026 14:30:56 +0000
asID:                     266725
IP address blocks:        181.119.29.0/24 maxlen: 24
                          181.119.33.0/24 maxlen: 24
                          181.119.34.0/24 maxlen: 24
                          181.119.41.0/24 maxlen: 24
                          181.119.69.0/24 maxlen: 24
                          181.119.71.0/24 maxlen: 24
                          181.119.72.0/24 maxlen: 24
                          181.119.73.0/24 maxlen: 24
                          181.119.74.0/24 maxlen: 24
                          181.119.75.0/24 maxlen: 24
                          181.119.76.0/24 maxlen: 24
                          181.119.77.0/24 maxlen: 24
                          181.119.78.0/24 maxlen: 24
                          181.119.79.0/24 maxlen: 24
                          181.119.80.0/24 maxlen: 24
                          181.119.81.0/24 maxlen: 24
                          181.119.82.0/24 maxlen: 24
                          181.119.122.0/24 maxlen: 24
                          181.119.158.0/24 maxlen: 24
                          181.119.159.0/24 maxlen: 24
                          181.119.169.0/24 maxlen: 24
                          181.119.170.0/24 maxlen: 24
                          181.119.3.0/24 maxlen: 24
                          181.79.219.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1676482 (0x1994c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
        Validity
            Not Before: Mar 24 14:30:56 2021 GMT
            Not After : Mar 24 14:30:56 2026 GMT
        Subject: CN=c5b62cc2dedce745292405d5083831a959342108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2c:8c:b0:17:4f:94:35:e3:d8:e6:4d:31:49:
                    2c:4a:62:f5:b2:9f:b2:2d:6c:d4:f2:67:7b:19:b2:
                    72:81:17:1f:6d:84:ee:54:93:f9:f6:cd:1c:87:0e:
                    5d:cf:48:1d:70:2a:43:86:f6:39:2a:ff:fd:ba:2b:
                    c1:9a:f6:74:78:8c:39:21:1c:5c:3c:4b:51:ce:81:
                    8b:17:02:76:5d:a4:74:d3:a8:b6:16:ec:da:fb:fe:
                    57:d2:be:5a:94:36:25:11:8d:87:0b:09:46:da:57:
                    57:58:22:50:72:ee:e5:9e:7b:f7:10:1c:80:ac:73:
                    a0:6f:7e:2a:73:66:46:ab:68:61:6b:f8:e3:15:82:
                    08:00:0e:35:1c:e6:fa:cf:60:af:cc:5b:d9:5e:2f:
                    32:f3:0e:3c:ca:96:86:63:ab:75:12:c9:0c:68:6d:
                    24:14:44:97:00:5d:6d:8f:41:dc:f3:af:a5:34:1c:
                    ad:14:79:49:59:00:50:af:b4:cb:47:ea:5a:62:01:
                    5a:6b:68:74:14:54:8e:e0:2d:60:66:ce:8e:9d:89:
                    c9:7e:84:2b:1e:b3:fb:5a:2f:ef:e7:e8:5d:bc:06:
                    2e:21:10:91:17:8f:cb:1f:2f:c7:fe:a5:d7:f3:dc:
                    1c:a9:ca:f3:c7:7b:4d:23:de:8d:82:1f:98:a6:5a:
                    e2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:44:28:66:FC:D6:BB:DA:B9:57:3B:14:6A:94:64:9C:98:D5:37:C7
            X509v3 Authority Key Identifier:
                keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c5b62cc2dedce745292405d5083831a959342108.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.79.219.0/24
                  181.119.3.0/24
                  181.119.29.0/24
                  181.119.33.0-181.119.34.255
                  181.119.41.0/24
                  181.119.69.0/24
                  181.119.71.0-181.119.82.255
                  181.119.122.0/24
                  181.119.158.0/23
                  181.119.169.0-181.119.170.255

    Signature Algorithm: sha256WithRSAEncryption
         27:24:43:75:d3:59:38:98:75:4f:e7:3c:82:a2:e9:ad:7b:cd:
         e0:de:a2:53:86:0f:7e:85:c0:6b:b2:84:46:a5:20:65:e0:33:
         29:46:5d:76:8d:c2:3b:52:7f:d7:20:d8:64:4d:d3:47:be:e0:
         d2:73:30:2d:4b:59:8a:08:42:1c:29:94:6c:31:35:29:81:e3:
         8b:05:2d:0c:c3:50:37:f9:cf:e0:77:ef:66:70:1a:d9:2e:0c:
         64:95:75:62:aa:d6:1a:12:26:53:4e:16:4e:0c:9b:0b:ec:c1:
         9a:0e:f7:08:fa:09:79:4d:dc:d1:0a:0b:ec:37:9a:7c:9e:4b:
         9c:d9:a9:fb:4b:25:78:99:4d:10:c8:8a:46:f0:4d:86:5d:37:
         3b:74:38:27:be:cc:52:a7:c4:3d:0b:97:68:d9:b5:ab:c7:0d:
         26:ec:bb:ba:41:c7:88:28:dc:bb:61:e5:29:d4:3b:4e:0a:d6:
         8a:5b:b1:36:0b:59:2f:21:86:83:36:21:c0:49:10:8d:f4:e0:
         9b:af:16:89:46:ff:00:05:b8:74:a0:2e:70:04:f6:d2:b7:78:
         0d:64:ac:f4:f4:9c:79:12:08:58:ce:06:6d:23:21:96:de:41:
         bd:6c:34:1e:88:ec:39:e9:10:7a:d3:30:12:99:06:f6:ec:e9:
         83:45:a6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----