Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/11c8a3946611acb6fcb1f207199ab84200278d1c.roa
File:                     11c8a3946611acb6fcb1f207199ab84200278d1c.roa (raw, json)
Hash identifier:          8EaJ0EwHy8Fmw6b663nIo+vuYVBI83karTrWWqc+a5I=
Subject key identifier:   6C:AE:FA:D2:7F:4B:45:07:E6:E9:82:2F:C2:3D:42:06:E4:B2:BE:D6
Certificate issuer:       /CN=9aa6f0faf06b0e820543ffb07cae0e88c6810fef
Certificate serial:       13768A
Authority key identifier: C6:CE:D1:A0:30:39:FD:A9:27:3B:AD:3B:53:4D:F2:6B:D7:B5:C4:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9aa6f0faf06b0e820543ffb07cae0e88c6810fef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/11c8a3946611acb6fcb1f207199ab84200278d1c.roa
Signing time:             Sun 13 Nov 2022 01:04:16 +0000
ROA not before:           Sun 16 May 2021 03:00:00 +0000
ROA not after:            Wed 17 May 2023 03:00:00 +0000
asID:                     270036
IP address blocks:        179.60.225.0/24 maxlen: 30

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1275530 (0x13768a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aa6f0faf06b0e820543ffb07cae0e88c6810fef
        Validity
            Not Before: May 16 03:00:00 2021 GMT
            Not After : May 17 03:00:00 2023 GMT
        Subject: CN=11c8a3946611acb6fcb1f207199ab84200278d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:14:41:6c:cc:e6:83:bb:38:a6:ed:21:bd:81:
                    c6:80:f2:a4:e5:3a:1b:e2:75:d0:16:9e:18:fb:a4:
                    d4:ec:0b:13:2d:cc:61:50:9e:a3:1e:0b:2f:e3:cb:
                    f3:8b:31:80:40:43:db:2a:31:6e:56:a4:d0:20:35:
                    04:cb:3a:07:ad:b5:7a:a1:ad:9b:63:de:c4:4d:34:
                    c4:c5:2b:dc:17:a8:15:a6:ad:76:52:dc:2b:bf:a7:
                    e0:34:7a:7d:f8:51:f6:db:92:61:85:af:5d:67:4e:
                    e8:d6:2b:87:2c:31:5a:3c:37:1d:06:80:dc:1b:36:
                    be:86:6d:48:55:53:e2:88:97:b4:0b:de:84:bf:70:
                    3c:82:3f:4d:a8:87:89:96:95:cd:87:90:f9:32:26:
                    ae:24:87:7c:3d:72:fa:67:c8:04:b7:be:5a:06:19:
                    44:b9:51:f7:c3:f9:a2:bf:e0:8e:ac:d6:a7:52:fc:
                    42:0d:cf:c0:6b:d4:2b:2e:ed:91:58:73:c2:2f:58:
                    78:85:51:70:e5:b1:f2:1a:0d:bb:02:fa:27:9b:92:
                    5f:b1:2b:3d:b0:5b:d9:bc:df:6e:aa:af:45:7e:f6:
                    c9:56:00:ad:41:1f:85:14:7f:ec:aa:1e:df:f8:4c:
                    6c:83:86:74:1e:33:3b:5c:2f:6d:8b:3f:06:41:8d:
                    aa:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AE:FA:D2:7F:4B:45:07:E6:E9:82:2F:C2:3D:42:06:E4:B2:BE:D6
            X509v3 Authority Key Identifier:
                keyid:C6:CE:D1:A0:30:39:FD:A9:27:3B:AD:3B:53:4D:F2:6B:D7:B5:C4:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9aa6f0faf06b0e820543ffb07cae0e88c6810fef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/11c8a3946611acb6fcb1f207199ab84200278d1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/9aa6f0faf06b0e820543ffb07cae0e88c6810fef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:66:1d:01:d9:a8:4a:70:28:c4:66:d1:63:74:af:3f:b9:dd:
         40:64:b9:14:43:de:83:fb:f4:67:16:ad:d2:3c:df:e6:5c:6f:
         77:8e:ca:05:11:68:cb:fd:c4:b3:9e:8b:84:5e:33:8f:e9:bf:
         33:12:b5:f2:2a:83:f9:f7:43:f0:86:5f:ff:e5:a1:f7:a0:84:
         75:a3:c6:96:06:14:2b:5b:b7:94:64:f2:3a:c4:3c:b5:11:43:
         c1:5f:03:48:2e:c9:40:71:47:41:d2:dc:67:9f:47:e8:4a:9b:
         8b:df:3a:35:54:e6:bb:57:6d:e2:da:c9:0c:08:94:74:02:fe:
         39:c2:23:e8:0b:22:1b:04:2f:a1:cb:e9:f4:a7:e8:8f:be:97:
         45:bd:37:29:5b:cd:c8:99:79:ce:0b:6e:5a:1e:65:13:8a:5b:
         38:67:04:60:c3:52:4a:be:35:84:5c:f4:e0:e4:f7:23:c5:b8:
         b6:f8:ac:4e:f6:bb:a7:d5:06:f4:c4:58:f4:16:b4:b6:a0:e8:
         34:95:ed:0c:2e:bf:34:f9:db:d8:5f:0e:fb:34:65:62:e7:29:
         51:e5:72:f2:e2:32:9e:44:2e:08:e7:18:43:35:2e:24:70:e3:
         b7:90:72:fc:0d:ee:f9:64:92:58:99:4f:17:49:dd:43:cb:31:
         c2:db:30:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----