Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/109e0bda-90a6-47bf-aff9-fce3fa714347/7ecc96b16a59f9a939d07462b80174ee5797a129.roa
File:                     7ecc96b16a59f9a939d07462b80174ee5797a129.roa (raw, json)
Hash identifier:          X/E+P4de1XHWmaiaRygc17fJvWmrMGoBzfabXupy7mU=
Subject key identifier:   92:95:EF:F9:45:45:57:59:FA:CA:87:7F:FA:47:D9:4C:4C:F6:93:D4
Certificate issuer:       /CN=5b63dc77edcd15d60f85c19a2d4c558d2ecf4791
Certificate serial:       0336C7
Authority key identifier: 02:05:5F:F5:2B:76:FF:06:D0:40:8B:1C:BC:C3:30:00:78:DA:5A:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b63dc77edcd15d60f85c19a2d4c558d2ecf4791.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/109e0bda-90a6-47bf-aff9-fce3fa714347/7ecc96b16a59f9a939d07462b80174ee5797a129.roa
Signing time:             Wed 07 Sep 2022 16:27:11 +0000
ROA not before:           Wed 07 Sep 2022 16:27:09 +0000
ROA not after:            Sat 07 Sep 2024 16:27:09 +0000
asID:                     262186
IP address blocks:        179.49.160.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210631 (0x336c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b63dc77edcd15d60f85c19a2d4c558d2ecf4791
        Validity
            Not Before: Sep  7 16:27:09 2022 GMT
            Not After : Sep  7 16:27:09 2024 GMT
        Subject: CN=7ecc96b16a59f9a939d07462b80174ee5797a129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:28:29:a1:93:4c:69:20:a2:ec:f6:b0:df:99:
                    06:ea:07:82:73:c0:71:a5:f5:4d:0f:b9:43:a7:33:
                    a4:09:38:8a:97:f2:71:7b:a3:65:7d:83:8e:43:a2:
                    87:a9:e1:c7:0f:1e:73:d3:ce:2c:3e:55:64:0d:d1:
                    ce:7a:a7:81:2b:f9:78:ca:70:e3:1a:ab:f7:45:51:
                    c0:d2:65:d7:de:27:04:09:76:16:5a:7a:6e:ad:a0:
                    c7:62:1e:ce:58:1e:fc:57:de:37:95:eb:7a:32:5e:
                    c2:69:51:ac:7d:e2:23:03:c2:fc:1c:c2:0b:b1:bd:
                    79:8f:6d:e6:5f:c0:b2:6c:dd:15:e5:ee:80:2a:5f:
                    7e:93:54:b5:d3:80:25:b9:b4:37:8a:8d:89:26:24:
                    16:16:08:fa:ea:72:2b:53:8f:c7:74:e0:dd:e5:6e:
                    1c:fd:69:53:d8:a2:8e:a1:47:c8:ae:2a:28:58:ac:
                    ee:cb:f8:73:86:b1:b6:84:a0:3c:45:10:69:2c:28:
                    d3:27:da:28:f8:54:21:55:47:e4:d4:1e:69:cf:6b:
                    5f:2f:03:25:b2:40:51:44:f3:87:5e:41:d5:88:18:
                    74:4a:4c:c5:99:ed:29:3f:4e:f6:6a:1d:5d:f1:2c:
                    d5:a9:5d:6a:7e:82:04:1c:b2:f7:f3:03:70:32:48:
                    e8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:95:EF:F9:45:45:57:59:FA:CA:87:7F:FA:47:D9:4C:4C:F6:93:D4
            X509v3 Authority Key Identifier:
                keyid:02:05:5F:F5:2B:76:FF:06:D0:40:8B:1C:BC:C3:30:00:78:DA:5A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b63dc77edcd15d60f85c19a2d4c558d2ecf4791.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/109e0bda-90a6-47bf-aff9-fce3fa714347/7ecc96b16a59f9a939d07462b80174ee5797a129.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/109e0bda-90a6-47bf-aff9-fce3fa714347/5b63dc77edcd15d60f85c19a2d4c558d2ecf4791.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:50:7e:eb:21:0a:b6:56:81:04:e5:33:7c:1a:56:6f:a2:f1:
         e1:b4:06:68:f8:63:2b:3c:a4:77:4a:e6:eb:fe:95:46:2a:77:
         62:8c:3e:06:14:3f:54:13:cd:b4:fc:de:b9:41:0b:43:fe:35:
         08:8d:b8:fd:87:28:f7:e3:c6:b5:6e:f4:7c:a9:68:17:da:26:
         b2:a8:4d:47:bf:9a:51:83:2d:5c:c3:ca:f0:1f:76:95:5b:bf:
         3a:c2:f5:94:42:5b:96:39:2c:fc:c6:58:2b:0c:8d:3f:7b:e7:
         c7:35:62:d6:57:b8:62:ca:63:4b:6d:ed:aa:fa:72:1e:cf:fc:
         c9:a4:8f:b1:57:a7:95:14:aa:09:80:ac:1e:59:3c:7a:72:54:
         ff:5d:42:73:8b:3f:ff:cb:e7:78:07:16:f3:19:27:65:a4:6f:
         49:10:04:4b:f2:fd:a6:1a:25:6f:02:4c:c0:c8:52:e1:b4:0c:
         45:40:fe:45:f0:7f:18:92:1c:ca:5f:aa:2c:27:23:74:4f:bc:
         43:49:b5:ae:25:eb:48:aa:10:71:9e:2c:36:04:04:d6:d7:7b:
         7e:af:3f:99:0a:74:1e:28:cd:f3:34:21:3a:a5:fc:a4:ff:ae:
         a3:a0:44:e1:3d:2a:a5:a9:02:6e:1f:df:8a:54:6a:ba:0b:a2:
         5f:0e:7d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----