Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2b2df1e4-2c38-4582-8528-510ee2aba172/2eea29f0415d6579811fa6829b8b2d732774485b.roa
File:                     2eea29f0415d6579811fa6829b8b2d732774485b.roa (raw, json)
Hash identifier:          C7xsQr1HZ32SnsfKiUJoHrljE7UrY3OLTc2LrOGaw0I=
Subject key identifier:   3F:56:EA:3A:71:AD:64:46:B2:8A:31:E8:FF:73:D5:CB:90:99:E5:3A
Certificate issuer:       /CN=75106661aec2a1cccb2594df0d35b08ae18c5df3
Certificate serial:       02F6
Authority key identifier: 5A:78:5C:33:B5:4C:4E:6B:82:60:A7:19:4D:DF:9D:BE:8B:96:36:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75106661aec2a1cccb2594df0d35b08ae18c5df3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2b2df1e4-2c38-4582-8528-510ee2aba172/2eea29f0415d6579811fa6829b8b2d732774485b.roa
Signing time:             Fri 18 Feb 2022 13:31:04 +0000
ROA not before:           Fri 18 Feb 2022 03:00:00 +0000
ROA not after:            Sun 18 Feb 2024 03:00:00 +0000
asID:                     272035
IP address blocks:        181.232.255.0/24 maxlen: 24
                          2803:d10::/32 maxlen: 32

Validation:               Failed, certificate revoked on Sat 17 Feb 2024 07:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 758 (0x2f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75106661aec2a1cccb2594df0d35b08ae18c5df3
        Validity
            Not Before: Feb 18 03:00:00 2022 GMT
            Not After : Feb 18 03:00:00 2024 GMT
        Subject: CN=2eea29f0415d6579811fa6829b8b2d732774485b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e9:8a:02:a0:2f:cb:00:d4:ff:18:26:e7:5d:
                    36:a6:48:a6:ac:73:cb:c4:30:ba:bb:2a:b3:9e:e1:
                    49:48:d9:67:5e:7d:22:6b:9a:a4:b8:5c:08:3f:ec:
                    bd:55:af:37:8b:bb:53:a3:31:da:29:a6:25:30:d9:
                    2b:01:0c:55:ad:85:5a:66:9c:01:40:8a:8d:01:1c:
                    4c:41:c4:48:1f:48:c3:d3:30:92:38:14:ae:e8:8a:
                    72:d4:f9:ea:db:b7:e0:5e:c2:20:d3:94:a7:89:db:
                    7a:bc:2f:09:83:6e:29:ae:8c:4e:58:76:dd:fb:f0:
                    d5:13:be:37:07:68:f1:80:4a:6d:e8:f3:d3:d0:c6:
                    a2:c1:65:fb:9e:7d:86:02:8b:fa:6b:d6:a3:63:9e:
                    8d:86:f6:cb:d7:1e:49:6e:8e:17:ff:bd:e1:d7:f2:
                    54:ae:6e:3e:5f:dd:78:18:89:16:c8:15:25:2b:b6:
                    b0:4e:81:25:96:62:ab:b6:d4:20:db:63:31:9e:17:
                    fb:25:9d:c2:66:06:f6:ad:f7:fd:39:bc:5f:68:cb:
                    8b:10:fe:3b:93:a2:bf:21:c7:9d:5b:a9:da:e6:54:
                    92:8f:df:e7:2b:f9:18:4f:d7:12:a4:4c:45:a1:84:
                    80:2e:58:b2:20:70:d3:c4:76:45:b8:14:3f:30:37:
                    42:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:56:EA:3A:71:AD:64:46:B2:8A:31:E8:FF:73:D5:CB:90:99:E5:3A
            X509v3 Authority Key Identifier:
                keyid:5A:78:5C:33:B5:4C:4E:6B:82:60:A7:19:4D:DF:9D:BE:8B:96:36:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75106661aec2a1cccb2594df0d35b08ae18c5df3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2b2df1e4-2c38-4582-8528-510ee2aba172/2eea29f0415d6579811fa6829b8b2d732774485b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2b2df1e4-2c38-4582-8528-510ee2aba172/75106661aec2a1cccb2594df0d35b08ae18c5df3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.255.0/24
                IPv6:
                  2803:d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:4e:8c:f1:8a:0c:24:a6:68:80:b7:c1:ea:0c:90:28:68:11:
         52:80:af:d9:46:61:f6:e8:d6:fb:99:c2:dc:46:fb:db:da:e0:
         13:89:79:92:93:f1:75:f3:85:8d:4b:03:6a:16:6c:4a:c4:b4:
         56:86:14:9d:16:d3:75:0a:c8:0e:53:30:01:2c:f0:6b:ff:f6:
         cc:4e:6a:28:ac:bd:de:da:2c:5d:4f:af:e1:fe:84:82:39:c9:
         c6:8d:af:ad:17:2f:c0:69:ab:5c:25:5b:b8:e1:82:3b:18:3d:
         02:ba:45:78:8f:91:d3:f0:97:98:1d:c7:00:9c:ce:53:27:45:
         c1:96:f5:37:01:da:24:09:7f:21:42:33:9a:fa:29:44:55:40:
         31:d6:90:8c:68:01:8c:a6:5d:6d:5e:80:b2:d7:4d:f8:6d:e3:
         56:04:79:3b:2a:75:e2:e1:29:33:8e:19:ad:0f:d9:16:f5:29:
         bb:1d:26:a4:1f:6f:69:67:36:a6:f8:08:e8:20:e9:a1:67:02:
         61:27:a5:b7:7e:48:65:31:17:e8:ac:3a:31:f9:98:b1:18:21:
         f3:b8:98:5f:17:da:23:68:37:b7:fa:69:1c:54:73:01:5d:f7:
         17:da:95:bd:a7:6d:1f:d1:78:35:b0:57:f9:bf:6f:16:65:fe:
         2c:78:d3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----