Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/b8f9a94f381c6429112d2486685d20db345f9702.roa
File:                     b8f9a94f381c6429112d2486685d20db345f9702.roa (raw, json)
Hash identifier:          4+qjaENlP5OwrwByZZBCYpivcBk9MWiboQSG2uPRGkM=
Subject key identifier:   73:E6:D5:7D:A1:0A:36:6F:7B:5E:02:A1:57:D0:E5:D8:A5:D8:02:34
Certificate issuer:       /CN=81e576eb875ef79c3d8f08ea0fa9a6fec82696ef
Certificate serial:       1C5D1C
Authority key identifier: AA:DF:88:7C:B8:65:CD:BC:FC:4D:9D:03:B6:85:C8:B3:21:3D:7E:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/81e576eb875ef79c3d8f08ea0fa9a6fec82696ef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/b8f9a94f381c6429112d2486685d20db345f9702.roa
Signing time:             Wed 30 Nov 2022 20:10:32 +0000
ROA not before:           Tue 29 Nov 2022 20:09:53 +0000
ROA not after:            Sat 30 Nov 2024 20:09:53 +0000
asID:                     263185
IP address blocks:        179.43.93.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1858844 (0x1c5d1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81e576eb875ef79c3d8f08ea0fa9a6fec82696ef
        Validity
            Not Before: Nov 29 20:09:53 2022 GMT
            Not After : Nov 30 20:09:53 2024 GMT
        Subject: CN=b8f9a94f381c6429112d2486685d20db345f9702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c7:d0:fe:69:13:72:65:eb:3f:a6:1e:25:9e:
                    a5:ab:c8:fd:d6:d7:53:65:95:68:73:52:5e:a8:2e:
                    6a:0d:b7:ad:dd:62:37:26:c3:70:6f:ac:76:ba:14:
                    de:c9:7b:7a:5f:be:9b:ef:a9:e5:89:0f:f0:1d:e9:
                    a6:9b:43:bd:ec:f0:40:f1:83:2a:a6:53:63:36:d2:
                    f4:9c:aa:c0:05:7c:45:b3:45:61:80:e2:a4:f4:15:
                    3c:9e:78:38:97:e0:d1:44:05:47:08:bd:70:50:cd:
                    56:c9:c4:8a:8a:6f:83:ee:07:0e:73:59:be:b2:5b:
                    04:bd:b5:31:c7:ef:45:4a:2e:b8:ef:83:59:36:94:
                    f6:4a:47:72:53:4c:45:4e:4c:cf:40:bb:80:b4:78:
                    2a:a5:39:5a:6c:8b:83:74:59:19:14:47:63:d6:36:
                    f2:82:c7:74:43:b6:11:2a:d5:8f:f1:8b:06:cc:1a:
                    c9:b9:86:83:da:d7:5b:00:8a:e4:18:29:1a:55:99:
                    0a:46:e5:94:b9:26:7f:5b:e7:c0:9c:a1:03:bb:b7:
                    ac:87:2f:16:77:55:83:8c:f8:e9:6b:69:63:1b:21:
                    88:41:0a:1e:66:8c:48:f8:34:68:e9:0b:c0:54:8a:
                    39:dc:be:ee:ef:eb:48:28:4f:f3:71:47:ea:ef:91:
                    3c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E6:D5:7D:A1:0A:36:6F:7B:5E:02:A1:57:D0:E5:D8:A5:D8:02:34
            X509v3 Authority Key Identifier:
                keyid:AA:DF:88:7C:B8:65:CD:BC:FC:4D:9D:03:B6:85:C8:B3:21:3D:7E:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/81e576eb875ef79c3d8f08ea0fa9a6fec82696ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/b8f9a94f381c6429112d2486685d20db345f9702.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/81e576eb875ef79c3d8f08ea0fa9a6fec82696ef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:71:99:4b:12:42:8d:1a:3a:95:82:f7:5d:1a:81:50:84:e7:
         b7:5e:b0:cf:7e:d8:8c:28:a1:2f:9c:32:82:7d:6c:22:7a:9a:
         b4:84:08:54:42:8a:41:fc:7d:36:0d:e9:18:1d:71:dc:1e:a0:
         cd:4c:7f:7e:a2:4e:5a:20:50:fb:bf:55:89:f9:05:d3:34:31:
         bf:56:ff:1c:d4:a2:77:8a:a2:c5:ec:03:75:93:23:03:2b:5d:
         15:7c:eb:4b:37:30:35:16:33:a2:31:a6:1c:2e:7e:c8:55:fe:
         6e:fa:c7:12:4d:81:b7:fe:2d:f9:8f:19:6a:cd:c3:66:0b:86:
         a0:c0:96:95:ea:08:d6:20:78:80:2e:0f:c0:30:19:82:b7:d3:
         61:6d:d0:cd:8e:c9:a0:e1:28:ca:1b:dc:60:fd:84:5a:bf:04:
         2e:6f:9a:64:97:5a:0d:5f:a2:be:90:39:64:f8:22:da:97:ce:
         32:3b:1f:c8:d5:56:66:6d:53:98:94:3b:ad:3b:90:02:0b:6a:
         6e:72:17:7b:37:fa:90:44:ad:a1:55:99:94:f7:92:6f:f6:19:
         20:2d:8a:1e:e8:83:ef:39:75:21:de:af:92:2c:94:12:0f:5f:
         29:4c:aa:df:ff:40:61:8f:af:f1:31:d6:89:95:34:6c:a5:96:
         de:56:6a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----