Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0fcffc85-d48b-4191-b53d-96c1bc8b7318/8b14416ef2f699e24efab3c039872ef44ff6bf20.roa
File:                     8b14416ef2f699e24efab3c039872ef44ff6bf20.roa (raw, json)
Hash identifier:          lYUgC/nPwc/GTJE886tV/stESy6tKkTzZ/Go5KSd2Io=
Subject key identifier:   09:56:A8:DC:83:3E:6A:99:26:AC:B0:62:E7:50:B0:D3:D9:8A:57:33
Certificate issuer:       /CN=b825aea653e97a291ec1350029e2e92dfa3c3746
Certificate serial:       0CF7
Authority key identifier: 76:2A:EA:61:EA:DD:F2:8C:6B:1E:CE:73:79:7A:C1:27:3D:E9:09:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b825aea653e97a291ec1350029e2e92dfa3c3746.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0fcffc85-d48b-4191-b53d-96c1bc8b7318/8b14416ef2f699e24efab3c039872ef44ff6bf20.roa
Signing time:             Wed 15 Jun 2022 14:41:27 +0000
ROA not before:           Wed 15 Jun 2022 03:00:00 +0000
ROA not after:            Sat 15 Jun 2024 03:00:00 +0000
asID:                     269997
IP address blocks:        181.192.102.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3319 (0xcf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b825aea653e97a291ec1350029e2e92dfa3c3746
        Validity
            Not Before: Jun 15 03:00:00 2022 GMT
            Not After : Jun 15 03:00:00 2024 GMT
        Subject: CN=8b14416ef2f699e24efab3c039872ef44ff6bf20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:35:1c:09:52:ac:94:ee:c4:50:73:68:2b:4d:
                    2d:2c:fd:d9:f1:72:f4:35:59:80:64:46:2b:7a:2e:
                    8c:9f:42:4d:14:68:e7:43:58:32:7c:4a:63:e2:ef:
                    50:2f:f5:bb:31:ee:a6:26:df:a6:dc:c9:82:54:e1:
                    23:bb:31:11:66:8a:12:15:ed:ac:61:9d:c5:21:e9:
                    4e:aa:3d:74:8a:48:44:dc:68:e1:4a:51:55:60:9b:
                    fa:c6:a8:14:ce:78:18:06:88:e9:db:fa:33:90:51:
                    1d:95:f1:70:df:80:a6:35:d1:62:71:f2:28:67:2e:
                    0f:e2:2b:68:26:24:67:09:4e:96:55:36:ce:6d:12:
                    bc:e0:d2:23:32:fe:e1:ab:26:75:30:1b:1c:b4:ee:
                    b5:60:8b:3b:d8:ef:f5:c7:b6:53:4c:a4:d2:62:aa:
                    8d:ac:dc:fb:91:1c:67:db:16:88:bc:f6:d5:41:46:
                    5f:c4:da:95:19:7c:d4:07:ef:7f:90:84:9d:11:a6:
                    82:62:1c:89:81:21:7a:e6:db:11:4b:ea:7b:a6:54:
                    22:e6:10:36:06:cd:37:e3:23:19:b1:6a:4f:2c:da:
                    5f:8a:3c:00:94:88:c9:ab:17:c6:b5:4d:d7:ba:3d:
                    18:b1:3d:19:47:b2:56:b9:4b:fa:44:39:45:54:fb:
                    88:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:56:A8:DC:83:3E:6A:99:26:AC:B0:62:E7:50:B0:D3:D9:8A:57:33
            X509v3 Authority Key Identifier:
                keyid:76:2A:EA:61:EA:DD:F2:8C:6B:1E:CE:73:79:7A:C1:27:3D:E9:09:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b825aea653e97a291ec1350029e2e92dfa3c3746.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0fcffc85-d48b-4191-b53d-96c1bc8b7318/8b14416ef2f699e24efab3c039872ef44ff6bf20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0fcffc85-d48b-4191-b53d-96c1bc8b7318/b825aea653e97a291ec1350029e2e92dfa3c3746.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d1:48:3b:a0:f0:3e:94:cc:31:12:74:21:59:ef:54:76:f9:27:
         51:2c:6a:e6:38:dd:8d:a6:57:e4:bc:c5:01:50:d8:83:0b:a0:
         d7:e1:f2:08:a8:51:2b:9c:1f:14:33:1c:d4:3f:06:8a:c8:f9:
         b4:34:03:29:2a:55:03:6d:7f:f7:1b:77:18:3a:f0:ba:58:6c:
         22:e1:3f:6b:a8:eb:e9:b5:6e:03:23:c3:77:5a:fb:d6:dc:61:
         99:fe:42:cf:61:77:55:ee:93:a3:72:91:27:86:12:df:43:76:
         b4:da:85:88:d2:20:47:1e:2d:1a:98:d8:37:be:fb:56:f2:1e:
         db:c5:80:76:4e:fd:79:85:94:a1:51:48:d9:7c:49:34:00:58:
         1e:4a:10:74:8d:22:81:88:b5:e4:1d:c6:6c:dc:60:26:55:43:
         07:c5:f5:0a:d1:dc:c4:ca:d0:c6:a1:43:04:85:80:ad:a9:9b:
         a4:e3:d0:58:e9:64:70:8d:50:3b:65:c0:08:85:93:15:59:a7:
         5f:0e:e1:28:ef:bb:42:ab:6c:83:c2:99:d4:51:38:65:00:11:
         cc:3d:c5:3e:d2:20:d6:96:27:da:75:e8:b4:9f:1f:17:4d:e4:
         00:2c:6e:ad:08:2d:af:ba:ab:b4:b1:1f:86:6e:75:c4:48:b3:
         f6:a4:dc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----