Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24b64913-3f22-450b-888d-a02758dfa3a2/cc7f83c7d1a5f99c629910197ce39a94165ddb35.roa
File:                     cc7f83c7d1a5f99c629910197ce39a94165ddb35.roa (raw, json)
Hash identifier:          f228LUCfyEGfyWvJs0s3BJYhgAj+aBNhZQcCnxRtt3Q=
Subject key identifier:   A2:43:24:24:C1:E9:45:B5:16:2A:EC:A7:E4:49:82:37:9A:7A:E1:15
Certificate issuer:       /CN=7272057ebe387df71782aa3e99d4f487f3e842e8
Certificate serial:       084998
Authority key identifier: 2C:C0:67:CE:51:EC:05:E7:87:C1:0F:08:8E:45:02:0E:09:A5:F5:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7272057ebe387df71782aa3e99d4f487f3e842e8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24b64913-3f22-450b-888d-a02758dfa3a2/cc7f83c7d1a5f99c629910197ce39a94165ddb35.roa
Signing time:             Fri 13 Jan 2023 03:04:10 +0000
ROA not before:           Thu 12 Jan 2023 03:03:46 +0000
ROA not after:            Mon 13 Jan 2025 03:03:46 +0000
asID:                     265587
IP address blocks:        201.77.96.0/22 maxlen: 24
                          2806:3a8::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543128 (0x84998)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7272057ebe387df71782aa3e99d4f487f3e842e8
        Validity
            Not Before: Jan 12 03:03:46 2023 GMT
            Not After : Jan 13 03:03:46 2025 GMT
        Subject: CN=cc7f83c7d1a5f99c629910197ce39a94165ddb35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:27:f7:5a:34:a1:2b:8f:d7:7f:9e:87:4b:42:
                    e8:f6:6b:df:c9:ee:cd:38:36:e5:41:53:25:e4:9a:
                    84:85:66:49:95:9b:0c:0c:63:2a:35:46:21:57:46:
                    73:c8:4a:43:1e:00:de:f9:b6:03:e7:d2:a8:fe:e6:
                    2b:99:76:c4:0c:c0:e0:cd:0d:f9:20:a7:b0:37:bf:
                    b4:c8:b4:62:cb:b8:06:ea:04:85:93:45:dd:e1:82:
                    e4:e2:ea:46:28:82:9c:29:0e:df:d7:ce:11:2f:f8:
                    50:1b:59:d0:9a:6a:e9:f5:b3:49:72:04:9c:5c:76:
                    ef:c8:fd:4f:04:d2:8e:f0:93:0a:33:5d:e9:d6:47:
                    dd:07:78:55:f0:fe:8e:8f:f0:66:aa:5e:60:9f:41:
                    d3:13:0d:c7:9b:1f:48:ac:c5:18:1d:f0:c7:c6:fe:
                    95:f6:40:23:74:65:be:6a:b9:3d:a3:0d:1f:55:ca:
                    7d:0c:97:10:4e:62:1b:29:a8:b9:fc:a8:cf:60:7c:
                    95:03:cc:1f:b6:3f:b0:6b:e3:7b:4c:0e:b7:b7:1b:
                    36:1a:2c:19:5b:47:96:27:06:c0:36:9c:b8:89:3f:
                    ed:94:35:80:7a:37:02:b2:89:23:e6:7f:6e:19:f8:
                    bb:8d:a6:ff:d0:a6:41:e6:04:06:69:0c:da:27:ad:
                    8d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:43:24:24:C1:E9:45:B5:16:2A:EC:A7:E4:49:82:37:9A:7A:E1:15
            X509v3 Authority Key Identifier:
                keyid:2C:C0:67:CE:51:EC:05:E7:87:C1:0F:08:8E:45:02:0E:09:A5:F5:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7272057ebe387df71782aa3e99d4f487f3e842e8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24b64913-3f22-450b-888d-a02758dfa3a2/cc7f83c7d1a5f99c629910197ce39a94165ddb35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24b64913-3f22-450b-888d-a02758dfa3a2/7272057ebe387df71782aa3e99d4f487f3e842e8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.96.0/22
                IPv6:
                  2806:3a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:88:c5:91:fe:8d:a5:06:0d:9e:7a:0f:ea:34:e1:0b:a8:2b:
         40:6b:16:ea:5a:91:18:89:22:a8:bd:e3:7f:25:08:66:81:aa:
         4a:48:b8:ee:6b:c7:00:b7:f9:8a:92:ce:e3:19:80:35:9e:a0:
         3e:4f:d3:9c:f9:68:9f:6c:19:7c:59:8a:d2:a3:63:97:48:40:
         c9:25:19:5e:9d:eb:d5:36:2b:6b:4f:ba:6d:0f:d1:cc:06:da:
         46:05:48:3c:5b:f5:d3:7c:34:06:40:00:a1:ab:b6:b2:c6:ef:
         12:fc:6c:d7:e0:58:45:d2:40:59:9a:ff:0c:20:5b:da:fd:43:
         11:5f:7d:3b:0f:47:b3:7a:eb:84:5c:2c:c3:79:6b:2e:ae:d2:
         bd:dc:0a:94:a7:24:b4:2f:d7:30:36:ed:84:e0:af:81:08:c3:
         53:aa:37:cd:85:18:6d:cb:29:de:8e:e2:13:2f:eb:32:53:b1:
         6f:73:ef:44:7e:6a:ef:f7:49:92:7e:17:75:0c:8b:e9:56:f3:
         c7:03:84:68:0b:3c:d7:2d:e6:7b:54:04:36:49:d1:37:c4:7c:
         b2:d2:d0:d4:dd:f6:68:19:69:fb:52:f3:99:0d:58:b1:fe:b7:
         2c:51:31:5f:6f:27:9c:d2:e8:ad:15:b4:18:2e:c6:b5:48:87:
         e6:8b:b0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----