Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23a573e3-5276-4101-a44b-5fd6c6c2566f/fd602560d7de964e8d4d5345a3a3f28c5baed22d.roa
File:                     fd602560d7de964e8d4d5345a3a3f28c5baed22d.roa (raw, json)
Hash identifier:          IZPrmYtrEa71ndH22SW5cc0fZSgJavCNGoXDiC9A7Zc=
Subject key identifier:   2E:EE:FF:5D:C1:41:7D:24:3F:C3:43:61:3A:D1:1C:5D:D4:22:40:35
Certificate issuer:       /CN=c011f0d257f63ff1e00629cfe11fe357d8aec974
Certificate serial:       0EA2
Authority key identifier: 77:86:21:F5:99:B5:66:2A:EF:DB:9A:65:7D:61:85:E8:52:EA:A2:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c011f0d257f63ff1e00629cfe11fe357d8aec974.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23a573e3-5276-4101-a44b-5fd6c6c2566f/fd602560d7de964e8d4d5345a3a3f28c5baed22d.roa
Signing time:             Wed 10 Aug 2022 17:54:05 +0000
ROA not before:           Wed 10 Aug 2022 17:50:22 +0000
ROA not after:            Sat 10 Aug 2024 17:50:22 +0000
asID:                     265779
IP address blocks:        181.191.68.0/22 maxlen: 24
                          2801:13:3000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3746 (0xea2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c011f0d257f63ff1e00629cfe11fe357d8aec974
        Validity
            Not Before: Aug 10 17:50:22 2022 GMT
            Not After : Aug 10 17:50:22 2024 GMT
        Subject: CN=fd602560d7de964e8d4d5345a3a3f28c5baed22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1e:a5:c9:a1:5e:e2:2c:de:76:fe:c4:99:ef:
                    f4:15:e9:7b:07:49:d4:6c:7d:91:7f:db:52:9c:a0:
                    fd:14:0e:8b:3b:92:2d:8b:4b:03:31:bf:eb:4c:72:
                    37:1a:1e:6e:d7:18:aa:5f:ed:49:6a:cd:30:b6:44:
                    53:16:bd:9d:0a:95:56:5d:44:64:4c:c9:2f:93:61:
                    99:d8:ce:5e:c8:6d:55:0f:af:91:9f:5e:99:7b:56:
                    df:87:79:d0:94:1f:8a:21:97:51:2e:15:bc:17:f9:
                    68:05:ba:74:fd:3e:b2:29:66:8a:de:0d:43:c6:5f:
                    84:0a:21:44:78:42:45:48:ba:f7:f5:2b:df:7b:22:
                    f3:ad:b1:5d:5f:f5:c8:ed:e6:b7:69:6f:ed:58:46:
                    da:e5:15:f1:c8:ba:aa:4e:b5:78:1b:a8:99:96:7d:
                    80:10:12:fc:4f:ee:46:c3:73:ab:c0:d4:30:78:b5:
                    96:e4:0b:5b:1e:12:00:79:75:e3:83:1c:ac:ad:77:
                    ab:74:84:56:ea:4a:45:ee:92:76:18:be:8b:46:4f:
                    e3:8a:e5:0c:26:60:d3:31:54:fb:3e:8c:24:7c:dc:
                    87:21:b3:5e:6d:9c:1f:a7:87:85:66:b8:4e:b5:5c:
                    47:0d:bc:b7:72:05:bd:26:68:20:a7:49:ab:20:5e:
                    b6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:EE:FF:5D:C1:41:7D:24:3F:C3:43:61:3A:D1:1C:5D:D4:22:40:35
            X509v3 Authority Key Identifier:
                keyid:77:86:21:F5:99:B5:66:2A:EF:DB:9A:65:7D:61:85:E8:52:EA:A2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c011f0d257f63ff1e00629cfe11fe357d8aec974.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23a573e3-5276-4101-a44b-5fd6c6c2566f/fd602560d7de964e8d4d5345a3a3f28c5baed22d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23a573e3-5276-4101-a44b-5fd6c6c2566f/c011f0d257f63ff1e00629cfe11fe357d8aec974.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.68.0/22
                IPv6:
                  2801:13:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:47:5f:e4:c0:61:28:51:f5:b8:be:18:b1:d1:f7:f7:68:6b:
         96:9f:fe:98:47:18:1e:a0:59:99:5c:d7:65:f2:e4:ea:4f:a4:
         95:f0:b2:a6:54:38:8a:fa:eb:73:01:6c:fd:72:be:ec:7a:36:
         59:69:16:32:fa:77:25:21:71:7c:53:6b:98:04:21:ef:9a:d3:
         d1:e9:df:6e:4e:f5:70:7c:46:ec:bd:35:69:8f:17:30:f8:cf:
         d9:15:f2:a3:a8:b4:ef:3b:44:83:0d:b9:75:d1:d3:1f:03:11:
         92:ba:5e:92:f9:c4:77:c5:2a:4e:bf:f9:36:67:5d:bb:24:63:
         4a:9d:df:96:27:de:18:2e:ca:14:23:45:3a:24:f1:3f:39:4b:
         5e:8c:e2:96:56:38:db:21:6c:95:99:1a:fa:5d:f9:c0:f6:8f:
         fa:8b:97:d4:0c:4d:a7:47:44:55:d8:66:c7:f1:a9:46:7b:2f:
         2b:a3:d9:d9:b1:51:cb:3b:d2:a3:de:89:53:be:b0:23:13:58:
         95:90:17:57:c3:f3:54:3d:88:0b:04:1f:8d:29:e8:0e:17:b1:
         d3:c8:b7:0a:5a:90:86:4f:fc:83:7d:65:dd:45:27:b4:28:8a:
         c3:89:ee:71:df:89:98:46:35:32:54:71:c1:41:ad:6e:5c:ac:
         7c:55:fe:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----