Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/26f7b28f-9407-4c17-84a0-d605f9743ee0/27b8086da2bfd5905b05d34441eeb5bb8bf70809.roa
File:                     27b8086da2bfd5905b05d34441eeb5bb8bf70809.roa (raw, json)
Hash identifier:          NdSjkTII4BXwbHVq0oMs9R4V1uwdklVmHtO8qvsSpAM=
Subject key identifier:   61:65:63:95:2B:39:CC:4C:FF:92:47:89:B2:AD:4B:A3:CF:9C:07:AA
Certificate issuer:       /CN=07c9adc851e2d67b5b3ab01bcdf310c1ae22f2e4
Certificate serial:       11C6F4
Authority key identifier: F5:94:27:0F:83:2E:B2:05:83:30:E3:F6:46:2B:43:F0:6A:5B:3B:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07c9adc851e2d67b5b3ab01bcdf310c1ae22f2e4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/26f7b28f-9407-4c17-84a0-d605f9743ee0/27b8086da2bfd5905b05d34441eeb5bb8bf70809.roa
Signing time:             Wed 30 Nov 2022 00:46:00 +0000
ROA not before:           Fri 11 Feb 2022 03:00:00 +0000
ROA not after:            Mon 12 Feb 2024 03:00:00 +0000
asID:                     271791
IP address blocks:        201.221.112.0/22 maxlen: 24
                          2803:bfe0::/32 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1165044 (0x11c6f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c9adc851e2d67b5b3ab01bcdf310c1ae22f2e4
        Validity
            Not Before: Feb 11 03:00:00 2022 GMT
            Not After : Feb 12 03:00:00 2024 GMT
        Subject: CN=27b8086da2bfd5905b05d34441eeb5bb8bf70809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fb:a5:be:26:16:33:c8:8c:36:ba:57:17:2d:
                    6c:15:16:2c:00:dd:69:78:4f:9c:cc:a4:1a:71:62:
                    bf:f1:55:b1:a0:16:ab:a2:52:9d:9f:3e:a8:0a:53:
                    63:55:2b:c1:70:fc:b2:6c:5d:ee:c3:34:d8:4c:c7:
                    5b:aa:7a:33:1d:d7:d1:7c:e9:f3:08:a2:ce:ee:dc:
                    8c:b3:7f:59:e4:03:ce:15:16:f6:2b:30:17:ab:33:
                    65:4f:01:9a:1b:f4:7f:0b:74:3c:6b:ef:48:dd:8e:
                    01:58:b6:63:84:01:6f:52:a3:e3:5c:99:15:2c:b8:
                    6f:38:14:ec:7f:5f:08:34:31:88:53:9b:4d:3c:e0:
                    c8:cc:55:57:e2:1b:c6:05:9c:09:a3:b3:a2:a3:a2:
                    e4:01:15:5e:2f:1e:bf:46:4d:96:5a:85:87:af:ad:
                    48:b9:0e:cd:b5:c5:b5:a9:e0:7e:4a:aa:54:bd:9e:
                    0e:d4:b5:44:0b:55:f2:8b:98:a9:58:f8:b0:48:9d:
                    6e:d1:62:1e:3f:34:07:af:6b:d3:90:5d:bf:09:a8:
                    9f:86:02:94:82:2e:b8:ac:fe:e0:78:25:93:cb:78:
                    05:76:57:9e:9f:8d:82:d8:f9:51:ee:7d:50:c7:b4:
                    06:25:e7:0c:ea:0c:70:38:30:96:62:48:bc:1c:e1:
                    9b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:65:63:95:2B:39:CC:4C:FF:92:47:89:B2:AD:4B:A3:CF:9C:07:AA
            X509v3 Authority Key Identifier:
                keyid:F5:94:27:0F:83:2E:B2:05:83:30:E3:F6:46:2B:43:F0:6A:5B:3B:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07c9adc851e2d67b5b3ab01bcdf310c1ae22f2e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/26f7b28f-9407-4c17-84a0-d605f9743ee0/27b8086da2bfd5905b05d34441eeb5bb8bf70809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/26f7b28f-9407-4c17-84a0-d605f9743ee0/07c9adc851e2d67b5b3ab01bcdf310c1ae22f2e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.112.0/22
                IPv6:
                  2803:bfe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:6e:12:ed:59:68:96:69:fe:66:04:87:13:d2:76:32:c2:82:
         0b:d4:2f:ff:15:b6:57:66:25:35:5f:10:c7:f9:ed:9a:d1:d6:
         dc:ac:9b:42:00:e8:59:24:ca:9d:eb:a1:36:a4:4d:a6:8d:da:
         03:b2:e3:ec:a7:09:21:40:fe:a5:25:b8:36:e8:59:19:3a:fc:
         80:37:5f:0e:1f:fc:35:b5:00:0a:4b:a0:6f:24:be:b8:26:a1:
         f3:5b:28:23:b4:a9:39:32:63:cd:13:d3:59:95:11:de:bc:31:
         72:70:ad:86:8c:22:4b:fc:a1:b3:20:11:81:89:15:3f:b2:f2:
         56:4b:f0:5a:04:e4:ef:19:75:54:0b:0b:a7:c9:82:4f:94:eb:
         1c:f6:4e:e1:57:c1:60:62:9a:e8:e5:ab:62:a6:6d:48:5e:a3:
         96:aa:2c:b5:db:f9:ce:d0:a7:2a:ea:08:1c:95:27:09:aa:06:
         6f:75:33:b7:60:25:cf:ee:b4:ac:7e:56:97:10:5f:13:df:21:
         48:09:3e:d3:37:5f:c6:4f:63:7c:63:f5:8a:36:10:2d:e7:26:
         34:51:c3:fb:ba:b3:bb:be:e4:e4:d7:fa:97:6d:89:4d:0a:fd:
         17:fc:82:52:31:0d:c8:27:b2:28:3f:0c:ac:78:14:bd:b9:cf:
         57:93:49:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----