Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/a746aeb1d51f02df106d9696eb6234e825b3eed1.roa
File:                     a746aeb1d51f02df106d9696eb6234e825b3eed1.roa (raw, json)
Hash identifier:          6rZ52wMV019ZB3qqDr+Nkk2ZT5XuO3LXKeUOeILelIU=
Subject key identifier:   7E:0A:4D:48:C6:48:C0:68:00:7F:A4:BC:D4:FC:03:86:17:A1:F8:22
Certificate issuer:       /CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
Certificate serial:       17F76C
Authority key identifier: EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/a746aeb1d51f02df106d9696eb6234e825b3eed1.roa
Signing time:             Thu 15 Jun 2023 12:19:36 +0000
ROA not before:           Wed 14 Jun 2023 12:19:35 +0000
ROA not after:            Sun 15 Jun 2025 12:19:35 +0000
asID:                     30133
IP address blocks:        200.93.240.0/22 maxlen: 24
                          200.93.244.0/23 maxlen: 24
                          2001:13c7:7005::/48 maxlen: 48
                          2001:13c7:7006::/47 maxlen: 48
                          2001:13c7:7008::/47 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1570668 (0x17f76c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
        Validity
            Not Before: Jun 14 12:19:35 2023 GMT
            Not After : Jun 15 12:19:35 2025 GMT
        Subject: CN=a746aeb1d51f02df106d9696eb6234e825b3eed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:76:de:6c:1b:cf:2d:c9:eb:87:1d:3f:cd:a2:
                    06:be:16:0a:af:4b:2f:b2:2b:1a:fe:4a:bd:05:e6:
                    fc:c7:22:9a:2e:a8:9a:57:72:ed:63:25:00:6b:ac:
                    2e:71:be:8f:09:74:c1:61:40:46:ec:cd:e3:3d:13:
                    b7:d6:88:a8:fe:dd:3c:55:3a:0f:22:5b:92:3c:e9:
                    ee:a5:67:bb:38:4a:63:70:c1:85:39:43:ca:eb:57:
                    78:f3:1a:17:1c:08:2a:ce:1d:01:1c:95:c0:54:6e:
                    c8:9f:8a:0f:7e:63:55:ab:98:aa:0f:3d:a8:f1:fb:
                    61:ab:66:9d:10:b3:e2:d3:74:b5:be:72:98:4e:c7:
                    40:d5:6c:97:dc:37:c9:50:29:e6:c5:1b:16:a0:c2:
                    8c:ab:d9:26:f8:f8:65:34:7b:ca:44:0c:1e:70:45:
                    35:fb:e5:47:1c:12:b6:2b:92:07:f8:89:6d:26:60:
                    21:8d:a8:c7:82:97:1a:82:88:63:d1:f9:c7:d5:33:
                    d9:23:8c:8f:b4:ad:e8:27:3a:9c:46:8d:3d:40:15:
                    b1:eb:40:7b:d5:12:1a:2e:91:4d:58:eb:45:24:56:
                    63:95:ca:44:6c:01:c9:18:26:3f:03:65:ed:c9:00:
                    a1:f0:7b:bb:4f:ed:3a:0c:51:ac:ac:6f:db:2f:26:
                    47:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0A:4D:48:C6:48:C0:68:00:7F:A4:BC:D4:FC:03:86:17:A1:F8:22
            X509v3 Authority Key Identifier:
                keyid:EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/a746aeb1d51f02df106d9696eb6234e825b3eed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/7ad45033c78c4f66de023e56ff03e177bf1bcb19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.240.0-200.93.245.255
                IPv6:
                  2001:13c7:7005::-2001:13c7:7009:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         5f:6c:c9:75:67:93:18:7c:a7:5d:1f:39:e3:31:dd:c6:a5:e8:
         89:27:9b:b7:73:87:39:1a:a8:04:1b:4f:41:2f:ac:88:e2:52:
         74:31:04:26:84:8a:58:eb:5e:1d:3b:ab:37:5c:9e:f7:6e:af:
         93:23:58:1b:01:48:c6:fc:1f:88:78:ab:1a:ca:09:e4:3f:f5:
         e7:e5:15:09:2a:38:e1:d8:68:05:e0:5a:48:28:d4:a5:31:31:
         2d:3a:94:3c:b5:54:40:ee:97:a2:9f:26:17:c6:1c:2b:f0:a6:
         25:82:29:1e:3d:96:9d:e6:a8:c0:35:4c:81:fb:95:2b:dc:eb:
         4f:b3:58:52:0e:88:c4:37:2e:4e:d2:a6:17:77:2a:37:f2:10:
         24:98:ed:81:88:b4:38:1d:dc:0f:67:86:94:97:9a:58:1f:73:
         24:dd:d5:10:2f:f9:33:e1:11:97:ff:76:45:d9:e7:c5:8d:f7:
         a7:19:27:0b:98:7f:97:19:7e:5d:b1:26:61:31:9d:0f:cb:90:
         82:13:0a:73:79:c9:27:4f:7d:15:72:d4:b2:80:35:75:29:e3:
         6f:b0:f7:69:54:79:53:e9:a4:89:b2:00:6a:12:21:f2:8d:de:
         3f:8d:00:f6:b2:ab:48:b7:a5:8a:dd:cc:8d:ab:16:8b:74:93:
         a3:13:15:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----