Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/469863eb19c55f6d67b0bdac96a83e66b0ed5a66.roa
File:                     469863eb19c55f6d67b0bdac96a83e66b0ed5a66.roa (raw, json)
Hash identifier:          278k6HnWu9K5E/LBIKFqxcu4g0eqqUzyCIKp8C3IjGk=
Subject key identifier:   6D:02:2B:E9:03:5A:42:09:8C:EC:D1:10:35:14:54:36:E4:F4:27:F5
Certificate issuer:       /CN=cfd77889f712db89177f6478b03af00c3bad37fa
Certificate serial:       15B1A6
Authority key identifier: 3D:C1:E7:39:45:32:49:EB:46:4E:FB:06:E1:05:EB:4F:D9:FD:EB:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfd77889f712db89177f6478b03af00c3bad37fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/469863eb19c55f6d67b0bdac96a83e66b0ed5a66.roa
Signing time:             Thu 10 Nov 2022 17:09:03 +0000
ROA not before:           Sun 18 Sep 2022 15:53:19 +0000
ROA not after:            Fri 20 Sep 2024 15:53:19 +0000
asID:                     269965
IP address blocks:        24.152.48.0/22 maxlen: 24
                          24.152.48.0/24 maxlen: 24
                          24.152.49.0/24 maxlen: 24
                          24.152.50.0/24 maxlen: 24
                          24.152.51.0/24 maxlen: 24
                          2803:56e0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1421734 (0x15b1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfd77889f712db89177f6478b03af00c3bad37fa
        Validity
            Not Before: Sep 18 15:53:19 2022 GMT
            Not After : Sep 20 15:53:19 2024 GMT
        Subject: CN=469863eb19c55f6d67b0bdac96a83e66b0ed5a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3b:56:22:a4:7c:3b:8a:3e:fc:9c:5f:f1:2b:
                    2b:2a:14:d7:b3:52:eb:cf:ab:f0:91:64:e5:96:cb:
                    b4:31:75:f1:86:30:14:01:d3:cc:c5:58:7f:93:00:
                    70:38:28:a0:2d:d3:94:5e:11:70:47:a6:4c:69:58:
                    fc:f1:12:66:07:dd:14:d0:7b:88:68:d9:c5:be:46:
                    8d:e0:77:a8:df:5e:39:0a:48:d3:e2:a5:45:9c:b9:
                    fd:d0:fa:62:0d:f9:3c:8b:04:f1:9e:85:70:ac:f9:
                    23:11:cf:5b:7b:ee:eb:e7:4f:20:a8:35:f8:af:a5:
                    73:e2:53:5e:9e:42:19:d6:e9:e7:52:90:7b:b7:9b:
                    4d:b5:b0:35:aa:fe:96:db:a3:bb:db:2c:c2:64:7a:
                    f9:1d:c9:e2:4e:2e:65:c4:b9:7f:73:f4:ea:27:36:
                    93:c8:7d:7c:58:9e:6c:7b:f0:2e:5a:a7:76:1c:77:
                    de:7a:81:eb:a7:a8:2b:f9:82:c0:de:30:4c:cb:c3:
                    2e:39:17:01:1b:9c:80:8a:c3:f7:c5:57:62:b2:7c:
                    03:5e:14:3f:98:5e:41:16:63:09:87:da:c8:77:11:
                    c2:2e:62:00:ed:6b:2a:25:1d:03:9e:a9:12:33:09:
                    46:54:a9:ef:ef:12:ae:cc:67:36:6d:21:c2:5d:18:
                    24:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:02:2B:E9:03:5A:42:09:8C:EC:D1:10:35:14:54:36:E4:F4:27:F5
            X509v3 Authority Key Identifier:
                keyid:3D:C1:E7:39:45:32:49:EB:46:4E:FB:06:E1:05:EB:4F:D9:FD:EB:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfd77889f712db89177f6478b03af00c3bad37fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/469863eb19c55f6d67b0bdac96a83e66b0ed5a66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/cfd77889f712db89177f6478b03af00c3bad37fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.48.0/22
                IPv6:
                  2803:56e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:de:84:97:63:38:55:44:ca:ee:85:b7:bc:13:c5:2b:db:69:
         67:b7:42:73:18:7a:0b:f6:bf:24:9c:c4:c7:c9:2f:e2:1c:6b:
         02:7d:61:77:77:45:2b:b9:34:97:01:8e:c3:bb:42:32:f9:26:
         e0:3e:f7:86:bf:d7:2e:80:cb:8f:3b:cf:0c:c2:05:10:2f:0e:
         19:43:37:5b:c0:fe:62:d9:e7:48:29:a1:62:93:2f:f5:9f:45:
         db:2b:d9:14:75:b8:d1:d2:b6:60:32:19:07:70:3e:15:f1:ee:
         28:68:5f:23:c7:ca:12:c9:d2:94:7f:31:a6:8f:06:d0:fb:eb:
         fa:f4:d7:9d:3f:12:1a:ec:33:34:4e:03:9f:7f:15:b6:e6:62:
         06:48:f1:04:2a:89:f4:66:d0:b7:15:3a:cd:87:75:ae:cc:e7:
         5b:4f:79:41:14:7c:f3:24:b5:01:70:23:cf:cb:98:83:be:ad:
         68:6f:c4:55:7c:53:5a:36:fd:57:23:27:55:e8:fb:e4:35:6b:
         01:31:b3:a4:24:61:4e:14:1d:33:a8:36:6b:f3:21:73:f9:52:
         54:2a:6b:59:89:76:55:7f:a6:c5:d0:71:1d:d0:fe:b7:2a:48:
         c9:bc:f3:b1:27:84:f8:85:b4:fb:64:df:27:35:52:0b:f9:19:
         79:e9:c5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----