Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/309cbf87-1c58-4858-b19f-e0b8858c4acc/e75627fa19277c085be0a7eb364d49216df5d163.roa
File:                     e75627fa19277c085be0a7eb364d49216df5d163.roa (raw, json)
Hash identifier:          Hi9TtTeNbwYqKmEDO2/p2SXDtqL99ZHZz8GSvQ2HXHA=
Subject key identifier:   C9:FF:C7:A6:E9:98:A4:FD:AD:88:85:61:26:BE:A3:77:14:D0:54:B6
Certificate issuer:       /CN=33cc246e2aa61ac0c03176ebc5d03e7f4767c548
Certificate serial:       190D
Authority key identifier: FE:DC:BD:21:24:0F:79:DC:18:36:E0:12:8F:C4:C1:D1:7B:3C:57:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc246e2aa61ac0c03176ebc5d03e7f4767c548.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/309cbf87-1c58-4858-b19f-e0b8858c4acc/e75627fa19277c085be0a7eb364d49216df5d163.roa
Signing time:             Mon 03 Apr 2023 18:07:00 +0000
ROA not before:           Fri 31 Mar 2023 18:03:33 +0000
ROA not after:            Thu 03 Apr 2025 18:03:33 +0000
asID:                     272973
IP address blocks:        181.224.220.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6413 (0x190d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33cc246e2aa61ac0c03176ebc5d03e7f4767c548
        Validity
            Not Before: Mar 31 18:03:33 2023 GMT
            Not After : Apr  3 18:03:33 2025 GMT
        Subject: CN=e75627fa19277c085be0a7eb364d49216df5d163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c1:82:83:95:9a:c1:a4:e3:fc:69:78:d7:40:
                    5c:12:c8:d3:f3:31:5e:37:13:a9:ff:16:ec:7a:18:
                    4d:9a:d7:09:94:01:4e:8f:6d:2a:d5:c7:c1:d2:dc:
                    dd:40:02:2b:04:df:ff:c3:d4:1e:bb:89:1f:cb:2b:
                    0c:b1:8d:dd:96:1b:83:c5:09:ee:cd:9f:89:8d:02:
                    95:e7:a6:49:94:82:1b:7c:10:f3:f5:d3:55:e2:da:
                    74:65:3f:ab:0e:e9:1f:bf:f6:f4:d1:e0:a9:e9:ab:
                    cb:e6:ac:21:e7:c3:f6:25:31:1c:e2:e9:3c:45:6e:
                    f8:29:2f:9b:c8:09:dd:38:ff:ea:ff:79:f5:5e:dc:
                    56:e6:2f:7f:4e:52:4b:61:c7:0b:64:86:9a:e0:5e:
                    68:39:6d:41:a4:10:95:2d:3e:8f:12:37:50:2e:19:
                    fc:0b:f8:0d:3a:19:50:91:f1:b9:2c:b7:7f:f2:5b:
                    87:4f:02:89:dc:c4:93:87:36:04:6b:80:b7:d0:8b:
                    8a:a5:11:3c:16:81:b0:1d:44:3a:29:51:37:6d:3a:
                    47:e6:cd:da:37:3f:09:fc:02:56:b9:b6:03:a7:a1:
                    1e:7f:e2:46:90:82:0b:fa:61:d6:9f:df:12:ef:6c:
                    9b:4c:1b:f1:d9:d8:0b:ae:f8:92:5f:98:66:74:00:
                    59:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FF:C7:A6:E9:98:A4:FD:AD:88:85:61:26:BE:A3:77:14:D0:54:B6
            X509v3 Authority Key Identifier:
                keyid:FE:DC:BD:21:24:0F:79:DC:18:36:E0:12:8F:C4:C1:D1:7B:3C:57:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc246e2aa61ac0c03176ebc5d03e7f4767c548.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/309cbf87-1c58-4858-b19f-e0b8858c4acc/e75627fa19277c085be0a7eb364d49216df5d163.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/309cbf87-1c58-4858-b19f-e0b8858c4acc/33cc246e2aa61ac0c03176ebc5d03e7f4767c548.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:9c:43:6c:30:19:e2:9f:91:2a:67:60:b4:0e:6e:2d:25:c3:
         1a:b3:6c:d4:3f:9b:91:5c:7f:24:c7:24:db:91:8e:56:64:b9:
         19:3f:ad:5f:48:e4:22:45:a4:04:dd:56:9a:11:0a:a2:0a:f8:
         42:90:7a:b4:c6:2f:86:8e:76:a6:fe:ac:bc:be:df:55:b7:f0:
         b8:5e:7a:fa:19:c3:a3:ff:01:f0:32:52:4e:c6:35:e1:93:38:
         61:6a:ce:36:6a:20:9b:67:ca:64:f9:e3:88:07:13:9c:73:2c:
         e3:8b:a7:86:ad:32:de:25:8d:3d:28:cd:e8:30:5d:37:f3:63:
         84:89:fd:90:7b:9a:86:e2:bb:a1:91:4b:ac:3d:fe:90:8c:9a:
         15:9f:d8:8e:62:db:28:64:64:2a:3c:4e:f2:63:10:06:5b:f0:
         6d:ee:ed:d6:87:5c:5d:91:f9:3d:90:9b:62:aa:a1:ab:68:3f:
         9d:36:da:61:22:2e:d6:6f:3c:d0:21:fb:fe:99:70:8c:3a:e0:
         92:40:17:20:37:ed:5a:0e:b2:7c:c0:1a:63:d5:8d:e4:01:d7:
         e1:46:7c:86:5f:c2:fa:7b:66:3b:80:36:28:9e:af:3f:0c:4e:
         c1:94:91:b6:3d:73:7e:4a:24:72:4d:40:ef:9a:9c:de:77:8c:
         a8:49:db:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----