Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/707c76c7da3d7fa6763e0eb745aabc27465756e8.roa
File:                     707c76c7da3d7fa6763e0eb745aabc27465756e8.roa (raw, json)
Hash identifier:          Y8v/+3xyHq+59pzgP8MUfk1EShhvDmAYlVYOokmPtIg=
Subject key identifier:   0B:34:0F:BE:10:9F:0E:C6:FE:77:18:D9:8B:60:E6:73:12:B9:13:F6
Certificate issuer:       /CN=4ba834aeb520331d21c768e13e7564e705630d2c
Certificate serial:       1A6290
Authority key identifier: 4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/707c76c7da3d7fa6763e0eb745aabc27465756e8.roa
Signing time:             Wed 03 Aug 2022 01:19:04 +0000
ROA not before:           Wed 06 Apr 2022 03:00:00 +0000
ROA not after:            Tue 06 Apr 2032 03:00:00 +0000
asID:                     52347
IP address blocks:        186.177.241.0/24 maxlen: 24
                          186.177.242.0/24 maxlen: 24
                          190.111.32.0/20 maxlen: 21
                          190.111.57.0/24 maxlen: 24
                          190.111.58.0/23 maxlen: 24
                          190.111.61.0/24 maxlen: 24
                          190.111.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1729168 (0x1a6290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba834aeb520331d21c768e13e7564e705630d2c
        Validity
            Not Before: Apr  6 03:00:00 2022 GMT
            Not After : Apr  6 03:00:00 2032 GMT
        Subject: CN=707c76c7da3d7fa6763e0eb745aabc27465756e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1f:69:a8:9a:03:a9:c7:f4:c4:97:f6:4e:87:
                    f2:2a:ca:b4:7f:a5:00:0b:c3:ad:4b:68:27:fb:b5:
                    70:ba:e4:41:3d:7e:61:6c:f5:07:f9:3e:74:aa:0d:
                    91:7f:54:bf:bd:02:ec:c6:d7:7c:98:46:97:4e:ac:
                    19:fb:87:85:86:03:98:ec:93:6f:89:02:b8:f1:e3:
                    a8:aa:da:56:49:5b:de:4a:84:ad:f3:5e:4f:fd:37:
                    60:07:f6:c4:ed:6c:25:bb:fc:48:c3:59:46:2d:aa:
                    21:44:1b:5f:fc:68:72:79:18:20:be:3f:cb:d4:cd:
                    e2:07:df:0c:c9:ea:d6:cb:e6:3b:02:76:df:89:fb:
                    ba:60:90:ef:51:7b:7c:04:5f:de:4c:9a:43:1e:4b:
                    3d:40:39:9c:5d:90:2d:63:ca:48:38:af:13:64:40:
                    49:9e:cb:02:76:9a:63:4c:74:12:87:05:b7:31:19:
                    53:75:ec:b4:f1:41:4d:c1:ce:98:0f:fb:5e:a9:86:
                    1c:92:dd:aa:17:c4:73:34:c3:8f:8c:dd:b5:72:ec:
                    d9:1a:7d:46:36:16:e1:b9:98:34:e1:2e:0b:91:7e:
                    24:d1:21:f3:a1:d9:eb:c4:e3:ea:06:85:96:34:bc:
                    9c:83:21:f1:d9:ad:c5:64:5a:98:55:bf:25:3e:e9:
                    0c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:34:0F:BE:10:9F:0E:C6:FE:77:18:D9:8B:60:E6:73:12:B9:13:F6
            X509v3 Authority Key Identifier:
                keyid:4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/707c76c7da3d7fa6763e0eb745aabc27465756e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/4ba834aeb520331d21c768e13e7564e705630d2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.241.0-186.177.242.255
                  190.111.32.0/20
                  190.111.57.0-190.111.59.255
                  190.111.61.0-190.111.62.255

    Signature Algorithm: sha256WithRSAEncryption
         63:d3:9f:3e:fe:c1:c9:54:0f:cf:4b:88:55:53:3b:7e:7d:a5:
         73:59:55:dc:21:49:7a:e7:3a:50:3b:e2:8c:b4:d9:ab:36:6f:
         4f:4c:41:b1:16:05:a5:fc:fe:c7:47:3e:c6:e6:1d:07:4e:e7:
         8f:c9:db:dc:cd:fd:3d:cf:5a:c4:c2:2a:c5:4c:60:b3:e0:88:
         a7:9f:26:8c:53:cb:8f:6b:60:26:f0:88:c7:6e:a1:ad:23:c4:
         b3:b0:a9:66:44:d9:13:e9:d8:09:75:f6:dc:c6:ee:37:c6:dd:
         ba:7a:42:ed:8d:4f:11:50:e9:a8:9b:e1:5d:fa:13:9a:8d:c9:
         db:1d:c4:49:ba:07:5d:db:f6:cb:be:25:b5:fb:22:46:a7:b4:
         62:1b:fa:61:53:14:2b:60:dd:bd:59:ae:fb:c8:e2:c8:72:57:
         61:81:d4:ec:ff:02:f6:c9:1d:11:43:13:02:1c:1f:93:09:11:
         da:33:2d:6d:7d:a8:ed:5a:cb:53:5a:c3:83:e1:f2:86:80:a7:
         93:2e:63:4a:a7:19:af:a9:79:11:52:97:70:70:2f:3c:8e:ed:
         e9:e1:34:55:7e:a5:e5:26:bd:30:25:2a:c3:89:9a:d5:e0:52:
         e9:20:db:e3:14:e7:48:84:d8:6b:33:4b:36:c6:cf:2a:2f:49:
         d0:0c:1b:cf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----