Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1dae3a98-a428-47cf-942e-c76eecde42aa/080f18c835096ed604a917900e12dd5b5d45a95d.roa
File:                     080f18c835096ed604a917900e12dd5b5d45a95d.roa (raw, json)
Hash identifier:          9ERQhcPTzrNjPh7R68/ni6hijOdXDp95O12MXOrfnl0=
Subject key identifier:   D6:68:D4:3A:D7:C1:0B:95:80:53:7E:22:F8:82:B8:7A:71:F7:F9:6C
Certificate issuer:       /CN=618d81debd8e70398acd1f9298d63fe47bdc09ff
Certificate serial:       114A65
Authority key identifier: B6:98:DB:EB:36:C6:DC:92:DA:A3:B7:29:1A:9C:7D:65:8C:62:77:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/618d81debd8e70398acd1f9298d63fe47bdc09ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1dae3a98-a428-47cf-942e-c76eecde42aa/080f18c835096ed604a917900e12dd5b5d45a95d.roa
Signing time:             Mon 16 Jan 2023 16:18:41 +0000
ROA not before:           Fri 13 Jan 2023 14:34:43 +0000
ROA not after:            Thu 16 Jan 2025 14:34:43 +0000
asID:                     10778
IP address blocks:        200.2.192.0/19 maxlen: 24
                          200.2.224.0/19 maxlen: 24
                          200.14.80.0/24 maxlen: 24
                          200.29.0.0/19 maxlen: 24
                          200.29.64.0/19 maxlen: 24
                          2800:8::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1133157 (0x114a65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618d81debd8e70398acd1f9298d63fe47bdc09ff
        Validity
            Not Before: Jan 13 14:34:43 2023 GMT
            Not After : Jan 16 14:34:43 2025 GMT
        Subject: CN=080f18c835096ed604a917900e12dd5b5d45a95d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:de:92:04:04:71:ab:4b:7e:31:4d:f9:14:20:
                    55:bd:97:c7:85:3d:ae:dd:bd:4e:61:8b:cb:4e:0a:
                    76:72:71:91:4d:ba:da:95:b9:9d:de:80:0c:94:74:
                    3a:a1:10:1d:41:02:f3:f2:ae:91:59:ea:3d:72:9d:
                    66:4c:1f:47:cb:0d:69:a8:2e:7d:1f:21:15:28:94:
                    82:c8:4d:c5:87:17:53:1c:8e:9c:9c:c2:48:0e:81:
                    11:e1:eb:e7:c7:05:27:02:4d:40:62:56:ca:c3:7e:
                    4e:c0:8a:69:d8:68:25:d6:a0:6c:ff:6c:4e:db:fc:
                    a4:6e:b7:a0:66:6e:df:53:b6:99:c5:8a:1e:f2:b5:
                    41:47:b6:97:b6:d7:3e:c1:63:0b:61:e2:a8:dc:f8:
                    b8:ef:a3:67:64:31:65:a2:d8:93:6c:85:bd:ce:88:
                    46:28:ca:31:7d:29:22:7c:d0:be:58:73:ee:81:b8:
                    bd:f8:ed:01:c1:3f:18:1d:50:e5:0d:72:f1:ee:c9:
                    ec:1a:49:6e:24:b4:54:5d:2e:dd:d8:7d:6f:cc:7c:
                    34:8f:10:be:ca:dc:05:b9:12:54:0c:4c:38:11:e2:
                    8a:34:4c:9a:9e:f8:86:d2:f6:d7:7d:74:f1:a1:e6:
                    70:6e:d9:7a:ca:d7:1e:4a:53:27:3f:38:e7:dc:74:
                    1f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:68:D4:3A:D7:C1:0B:95:80:53:7E:22:F8:82:B8:7A:71:F7:F9:6C
            X509v3 Authority Key Identifier:
                keyid:B6:98:DB:EB:36:C6:DC:92:DA:A3:B7:29:1A:9C:7D:65:8C:62:77:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/618d81debd8e70398acd1f9298d63fe47bdc09ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1dae3a98-a428-47cf-942e-c76eecde42aa/080f18c835096ed604a917900e12dd5b5d45a95d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1dae3a98-a428-47cf-942e-c76eecde42aa/618d81debd8e70398acd1f9298d63fe47bdc09ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.192.0/18
                  200.14.80.0/24
                  200.29.0.0/19
                  200.29.64.0/19
                IPv6:
                  2800:8::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:75:98:f9:9a:4e:4b:05:4e:50:b2:45:43:13:d9:be:5a:b9:
         24:4c:aa:7e:5f:e7:7e:30:8c:68:41:c0:15:cd:5d:28:7f:e9:
         af:63:6d:42:98:f2:0c:60:1d:03:e6:c2:f4:e5:6b:59:80:98:
         1d:e5:bf:a2:04:91:67:8d:20:9d:72:12:4f:e8:16:05:60:7a:
         84:6e:69:f9:ad:e1:0e:30:a0:68:7b:4c:8b:41:61:13:5a:1e:
         02:2b:14:12:ba:49:38:ce:39:72:fc:c9:65:16:5c:3b:2b:65:
         b7:1b:fe:2b:14:db:c6:9f:57:30:9b:b4:c4:2a:d9:0f:e9:61:
         76:e6:6b:7d:e8:bd:de:d0:5d:b1:01:0f:9f:f5:63:33:ee:46:
         ee:5c:d4:43:07:0d:8f:1c:03:7a:68:85:57:c4:47:e7:48:a4:
         06:31:bc:88:88:c8:b9:81:ad:9f:43:6a:72:fb:63:fa:b3:a3:
         ab:84:62:25:38:78:03:f1:e3:4d:0e:09:99:ee:0c:86:a1:b9:
         94:cb:2e:8b:1b:48:00:c4:bb:9d:84:d4:19:be:95:1d:a2:66:
         f7:b9:8e:e3:c6:ee:56:c3:a0:e0:8f:5d:89:3e:47:c6:61:60:
         62:7d:9c:e9:8b:7a:2f:27:a8:2a:d3:92:25:41:31:8c:bb:33:
         71:5b:8f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----