Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/5230555a902a4a87cdfbfeaedd063fd82b5d87df.roa
File:                     5230555a902a4a87cdfbfeaedd063fd82b5d87df.roa (raw, json)
Hash identifier:          5QlvGrx2ri0AEZrO2vTinToW4bdc1p0zVNMEjSw6jlI=
Subject key identifier:   08:38:4D:85:B5:B7:9D:0C:85:67:7A:D0:21:13:00:45:EA:AC:D6:E0
Certificate issuer:       /CN=8b93ccfac824196843701fdd92655044ac70189f
Certificate serial:       119BB9
Authority key identifier: 9A:75:62:AC:B4:E4:BE:75:76:41:83:91:33:D8:B0:8B:41:70:5E:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b93ccfac824196843701fdd92655044ac70189f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/5230555a902a4a87cdfbfeaedd063fd82b5d87df.roa
Signing time:             Wed 31 May 2023 08:30:00 +0000
ROA not before:           Tue 30 May 2023 08:30:00 +0000
ROA not after:            Thu 29 May 2025 08:30:00 +0000
asID:                     27989
IP address blocks:        200.1.175.0/24 maxlen: 24
                          201.221.124.0/24 maxlen: 24
                          201.221.125.0/24 maxlen: 24
                          179.0.27.0/24 maxlen: 24
                          201.221.124.0/23 maxlen: 23
                          2801:15:4000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1153977 (0x119bb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b93ccfac824196843701fdd92655044ac70189f
        Validity
            Not Before: May 30 08:30:00 2023 GMT
            Not After : May 29 08:30:00 2025 GMT
        Subject: CN=5230555a902a4a87cdfbfeaedd063fd82b5d87df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:16:a7:d2:a4:77:11:0a:da:ac:eb:b4:0b:99:
                    e4:e8:d6:e4:1d:bc:e8:08:f6:4f:3c:90:cb:bc:62:
                    b1:fe:93:23:25:53:23:7f:ad:f3:7c:c6:bd:86:3d:
                    ce:ff:2d:e3:45:7f:93:a4:cb:42:7a:cf:56:54:aa:
                    f4:1b:00:43:b8:c5:38:f7:a8:b4:08:cc:5f:fb:f1:
                    22:ec:b4:f0:13:1d:29:62:ee:2f:6c:f5:10:e5:f5:
                    9f:cf:d7:cb:93:63:a6:30:0f:b2:38:0b:73:ec:69:
                    c7:67:d9:23:d7:41:cb:69:56:57:44:e2:71:73:6d:
                    c8:47:83:b6:18:65:41:09:16:b4:66:d7:66:71:a4:
                    6f:ba:ae:85:5e:27:34:6f:fd:35:41:53:79:83:df:
                    5d:a3:1c:29:21:4c:aa:47:68:9d:3b:96:fd:66:b6:
                    39:f9:98:7f:30:68:a2:f6:29:bb:19:59:7f:91:a0:
                    38:c3:23:4d:a1:33:07:a0:e9:f5:b1:b1:63:b9:a8:
                    e1:12:cd:cd:e5:97:95:07:6a:10:9f:e6:36:10:ec:
                    8b:c2:3a:f1:e6:aa:7e:bc:d1:48:e0:32:db:05:50:
                    c8:39:17:4b:1f:4e:7f:9b:ae:8c:99:63:8a:26:cc:
                    e7:53:81:a8:01:04:90:96:4a:32:25:8f:d6:f3:de:
                    bc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:38:4D:85:B5:B7:9D:0C:85:67:7A:D0:21:13:00:45:EA:AC:D6:E0
            X509v3 Authority Key Identifier:
                keyid:9A:75:62:AC:B4:E4:BE:75:76:41:83:91:33:D8:B0:8B:41:70:5E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b93ccfac824196843701fdd92655044ac70189f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/5230555a902a4a87cdfbfeaedd063fd82b5d87df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/8b93ccfac824196843701fdd92655044ac70189f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.27.0/24
                  200.1.175.0/24
                  201.221.124.0/23
                IPv6:
                  2801:15:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:e8:04:b7:e0:e8:15:9c:93:f6:d6:36:5f:d7:a3:8d:c6:7f:
         96:78:76:8c:e3:bd:1c:ab:e9:a0:01:89:5e:ff:18:c8:44:83:
         16:44:82:0c:bf:3b:2a:23:cc:d6:a3:c4:2e:48:e6:b1:77:45:
         54:14:92:00:72:e6:8b:5d:0a:c2:d6:57:0f:45:98:d0:0f:44:
         0c:78:17:31:e7:f1:7a:5e:3a:d1:09:a9:da:04:fa:56:f7:62:
         8e:7a:3f:43:c6:a9:dd:66:30:a4:37:1c:8c:2d:16:ed:c2:5f:
         a3:c6:91:34:28:79:e7:30:25:de:e3:3e:3f:ff:c5:64:70:37:
         fa:f8:e6:20:9f:3f:ba:fd:62:0a:42:08:eb:09:25:73:f3:1e:
         52:5a:6b:6a:ac:59:4c:4a:58:be:be:39:3e:76:12:54:86:4b:
         26:ed:9f:cc:3d:42:66:2d:3b:f0:3d:4b:e7:18:91:c2:db:fd:
         26:6c:3d:78:23:cb:22:31:66:04:c3:66:87:f2:f9:32:6c:17:
         a6:37:af:54:38:eb:32:1c:ab:84:3b:3d:f1:bd:f7:19:87:d1:
         59:a2:a8:79:21:c1:5d:98:84:f6:f7:c2:07:8e:21:4f:6c:c0:
         ca:6a:9f:c0:11:ae:32:f8:8b:3a:b2:40:eb:e1:42:d7:4e:d1:
         94:7d:c9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----