Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/9ca3514a6e6724b6f3dd8943abafbd925b3401a2.roa
File:                     9ca3514a6e6724b6f3dd8943abafbd925b3401a2.roa (raw, json)
Hash identifier:          cBjAymIBdg04uGWrjBoZ1nF76EJvwiNm0TCO02YxnEs=
Subject key identifier:   4F:06:33:94:89:23:75:16:14:87:27:24:28:67:F7:D7:8E:A7:3F:3C
Certificate issuer:       /CN=9aa6f0faf06b0e820543ffb07cae0e88c6810fef
Certificate serial:       137C7D
Authority key identifier: C6:CE:D1:A0:30:39:FD:A9:27:3B:AD:3B:53:4D:F2:6B:D7:B5:C4:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9aa6f0faf06b0e820543ffb07cae0e88c6810fef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/9ca3514a6e6724b6f3dd8943abafbd925b3401a2.roa
Signing time:             Sun 13 Nov 2022 01:04:47 +0000
ROA not before:           Sun 16 May 2021 03:00:00 +0000
ROA not after:            Wed 17 May 2023 03:00:00 +0000
asID:                     270036
IP address blocks:        179.60.224.0/24 maxlen: 30

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1277053 (0x137c7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aa6f0faf06b0e820543ffb07cae0e88c6810fef
        Validity
            Not Before: May 16 03:00:00 2021 GMT
            Not After : May 17 03:00:00 2023 GMT
        Subject: CN=9ca3514a6e6724b6f3dd8943abafbd925b3401a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9a:5a:2b:a1:82:6b:74:75:6f:4d:64:d4:90:
                    36:e0:c6:30:52:f4:4d:8d:d5:0f:0f:dc:92:29:a7:
                    c2:88:37:36:9a:48:4d:fc:69:91:e5:e0:07:4c:23:
                    97:86:3f:d5:69:34:dc:44:5a:b7:c2:53:90:5f:08:
                    dd:12:66:18:e3:4e:f8:9f:fd:39:e5:d8:e4:3e:67:
                    7d:e6:b3:7c:91:72:b4:f0:b1:7e:90:2d:7a:7d:d9:
                    03:ff:74:51:13:42:8b:4a:0e:e0:40:cc:62:71:77:
                    58:56:b0:9d:c3:98:01:0f:cf:67:f9:1e:59:3f:6a:
                    d6:23:17:73:e4:14:bc:f0:24:53:e6:e0:48:2f:97:
                    8d:ee:30:d7:64:78:90:05:40:f1:be:3a:8c:df:cf:
                    e2:ba:cd:46:19:28:6d:52:cd:f1:4f:44:45:9e:b2:
                    11:9c:35:6e:2e:a8:6d:16:a0:35:1c:6a:b5:3a:9a:
                    60:21:87:70:fe:f0:82:ce:a9:6b:37:8d:0f:ac:2e:
                    e3:3e:a9:2d:a6:50:34:e7:20:2a:f1:ea:2c:a8:12:
                    98:04:24:b9:23:5e:9e:1c:0d:8a:06:29:84:28:27:
                    da:47:d9:3e:14:d9:e2:95:a1:45:9f:3e:d1:de:c7:
                    42:a9:c7:c8:0c:fd:55:30:ac:75:4e:50:b2:13:f4:
                    23:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:06:33:94:89:23:75:16:14:87:27:24:28:67:F7:D7:8E:A7:3F:3C
            X509v3 Authority Key Identifier:
                keyid:C6:CE:D1:A0:30:39:FD:A9:27:3B:AD:3B:53:4D:F2:6B:D7:B5:C4:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9aa6f0faf06b0e820543ffb07cae0e88c6810fef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/9ca3514a6e6724b6f3dd8943abafbd925b3401a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/9aa6f0faf06b0e820543ffb07cae0e88c6810fef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:11:5f:fe:12:e4:4d:49:9b:b1:17:5e:31:5f:fc:bc:b1:da:
         cc:af:25:96:12:91:cb:83:73:0a:80:eb:50:ef:42:4b:ec:93:
         ef:44:f2:f6:39:74:1d:31:18:84:dc:23:86:b9:36:ac:11:30:
         13:d1:d9:7a:64:08:4e:a1:7b:75:92:08:a7:fa:23:e8:dd:ca:
         d0:7a:76:8c:4b:6c:0b:fa:09:b2:1d:97:85:d8:40:0e:b7:6e:
         1f:60:91:05:ee:cc:22:c1:2b:f5:44:a8:8b:0a:87:fd:33:83:
         42:99:64:49:fa:18:70:d2:b4:c4:55:fc:37:41:29:a3:3c:a0:
         b6:0c:b4:2e:5a:6b:7a:4f:32:dd:80:35:bd:e7:e7:7a:fb:55:
         0f:a8:22:9b:63:de:1b:0f:01:68:eb:9b:da:90:63:f6:a2:6c:
         2c:33:08:3f:f2:b6:db:f2:bc:52:06:8c:37:9a:cb:28:69:9d:
         77:8a:c3:13:95:66:8c:70:2a:69:9d:d3:10:b6:6a:6b:30:a2:
         02:64:59:fb:2e:ac:ff:25:f9:30:50:fe:d1:66:01:38:73:0c:
         dd:f6:00:4e:5c:e0:99:59:e8:30:92:b2:f3:41:72:20:b8:87:
         73:72:ed:c0:22:c4:1c:76:5a:9e:0e:66:a2:b3:5f:0b:8b:c5:
         85:ea:a6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----