Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/5b4a9aa78ce82cce43b1312c35829a2b5165bba6.roa
File:                     5b4a9aa78ce82cce43b1312c35829a2b5165bba6.roa (raw, json)
Hash identifier:          RkctdIWIPqEq6qIINlUEvbK3TRJY8U3XapNFLraplwk=
Subject key identifier:   81:79:55:F7:76:D0:DA:E7:A5:CA:A5:D2:20:13:E0:8F:17:B6:B6:12
Certificate issuer:       /CN=4ba834aeb520331d21c768e13e7564e705630d2c
Certificate serial:       24DC56
Authority key identifier: 4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/5b4a9aa78ce82cce43b1312c35829a2b5165bba6.roa
Signing time:             Wed 06 Sep 2023 23:06:37 +0000
ROA not before:           Tue 05 Sep 2023 23:06:37 +0000
ROA not after:            Sat 06 Sep 2025 23:06:37 +0000
asID:                     52347
IP address blocks:        186.177.224.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2415702 (0x24dc56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba834aeb520331d21c768e13e7564e705630d2c
        Validity
            Not Before: Sep  5 23:06:37 2023 GMT
            Not After : Sep  6 23:06:37 2025 GMT
        Subject: CN=5b4a9aa78ce82cce43b1312c35829a2b5165bba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:88:9e:5a:e1:d6:96:18:21:47:c9:2d:85:0a:
                    95:ef:15:92:8d:d2:b7:80:98:74:d8:15:7d:4d:84:
                    6e:9e:86:58:ab:01:45:61:f5:51:f1:e8:d5:66:d4:
                    5a:70:79:c0:b0:cf:0e:93:31:f4:94:65:7c:7e:74:
                    71:25:aa:2a:5f:1b:ff:ca:d0:eb:f4:7c:c6:45:a1:
                    43:02:3a:3a:ab:3f:2e:73:d1:74:ce:b9:51:a4:91:
                    ac:a5:b0:56:1a:6e:1d:05:46:25:74:be:17:d5:75:
                    31:3a:34:83:59:94:22:a6:2c:2a:40:fa:5b:e6:1b:
                    29:ab:0c:80:db:84:9f:00:84:38:ea:a4:74:6b:8e:
                    23:5b:91:c8:5c:0c:67:af:3a:f4:41:1b:9b:18:cb:
                    ce:9f:20:72:b1:98:4a:96:46:0f:df:7b:f8:45:eb:
                    9c:f2:45:81:9f:7e:0e:5a:2c:7d:3c:60:8f:c3:85:
                    b9:4a:d1:d3:53:a5:16:ec:b4:be:36:9b:e3:db:04:
                    7c:50:f4:37:6c:4a:fe:9e:b8:7e:2d:76:8b:27:d4:
                    4b:7d:cf:4b:dc:b2:34:ac:a7:ed:07:2f:7f:02:01:
                    55:c3:1f:e6:0a:d0:65:70:e6:ed:8c:9d:49:d2:bd:
                    07:74:f3:f4:64:dc:23:c0:dc:cb:a4:09:7a:3f:98:
                    32:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:79:55:F7:76:D0:DA:E7:A5:CA:A5:D2:20:13:E0:8F:17:B6:B6:12
            X509v3 Authority Key Identifier:
                keyid:4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/5b4a9aa78ce82cce43b1312c35829a2b5165bba6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/4ba834aeb520331d21c768e13e7564e705630d2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         62:fd:dd:ea:a3:cf:27:b8:b4:de:83:9c:a6:fc:cc:d3:e3:f4:
         43:55:89:14:4c:2e:71:6c:ba:f9:f8:bd:5b:7a:55:de:ce:dd:
         23:4e:da:14:f9:af:ee:8c:4e:f2:6e:26:d3:ee:55:5d:ed:18:
         10:14:4d:f1:02:5e:4b:e6:b8:42:25:21:4b:cd:0b:91:9b:35:
         c9:4d:3f:00:22:f0:09:c1:83:85:22:e6:ce:40:58:b3:b4:20:
         f5:76:88:ca:31:1d:c9:17:5e:ba:04:38:70:0b:de:fa:96:42:
         c3:75:67:07:b6:8a:58:56:f3:f2:05:9a:b9:2b:26:a4:a7:fc:
         05:1b:d2:84:98:ae:dd:17:fc:08:cb:de:7b:a9:2a:9f:98:9c:
         55:a1:95:0b:e6:05:4a:87:c0:6b:f9:ea:d5:e6:50:9e:f0:50:
         2d:ab:de:7b:ec:32:29:69:f2:4f:b0:69:91:ba:76:73:08:ef:
         bb:68:91:9d:31:dc:41:2c:d5:c9:c8:40:b7:2c:23:5d:ab:88:
         eb:2d:c9:4f:b5:67:b4:b0:05:d7:c5:4c:ba:4c:d0:0b:8e:c7:
         7e:87:b5:f8:1a:6e:38:d8:35:11:c6:f1:f3:de:ef:53:63:2c:
         8e:02:5d:a2:d2:20:4a:1f:99:6c:2b:d8:56:0e:68:20:34:b2:
         c4:8e:bd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----