Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/4443be5e63d9de60136e7e8bcf7bb84beacdf629.roa
File:                     4443be5e63d9de60136e7e8bcf7bb84beacdf629.roa (raw, json)
Hash identifier:          hYVRwGOIUckv1dTwC7QZllpC6Mo0p/dcCia72Q0H3Fk=
Subject key identifier:   2F:D4:92:FB:D7:BC:18:EE:8D:F3:1A:78:E1:C8:95:F2:0F:9E:79:12
Certificate issuer:       /CN=dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d
Certificate serial:       24703C
Authority key identifier: 93:3C:4B:4E:5F:37:14:1F:7D:61:E9:D1:7A:FD:7C:A4:EE:E2:25:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/4443be5e63d9de60136e7e8bcf7bb84beacdf629.roa
Signing time:             Thu 28 Sep 2023 19:11:24 +0000
ROA not before:           Wed 27 Sep 2023 19:11:23 +0000
ROA not after:            Sun 28 Sep 2025 19:11:23 +0000
asID:                     264668
IP address blocks:        170.244.208.0/22 maxlen: 24
                          2803:9ac0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2388028 (0x24703c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d
        Validity
            Not Before: Sep 27 19:11:23 2023 GMT
            Not After : Sep 28 19:11:23 2025 GMT
        Subject: CN=4443be5e63d9de60136e7e8bcf7bb84beacdf629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:28:01:e5:9d:e7:97:32:5f:ed:dc:09:91:df:
                    1d:ff:b7:a2:fc:5a:bd:54:ab:af:ba:f8:83:7c:1b:
                    9a:73:a5:e6:b2:df:a0:0c:fa:98:b9:ff:22:99:56:
                    2e:9b:ff:ba:f6:9d:ed:13:5f:d8:e0:89:92:74:13:
                    ef:b7:2c:a3:7e:89:ef:1e:42:59:d8:f3:cf:53:10:
                    44:21:13:fe:2f:99:1a:03:d1:8e:d6:f5:45:95:0b:
                    b8:24:83:b6:60:c3:cf:b0:74:1a:4e:50:ef:3f:97:
                    78:f5:54:2b:a8:4a:8f:3b:f7:2b:30:1a:81:39:ec:
                    13:77:5a:99:fa:7e:fd:57:39:13:42:df:48:7e:f8:
                    fc:a5:ff:46:61:18:8c:d3:a4:9d:d2:61:5b:f8:ca:
                    94:6b:bb:c1:12:39:70:ab:ab:16:49:97:cc:82:43:
                    9e:80:a0:e3:32:4e:89:59:9e:2d:db:32:19:d1:f7:
                    7b:f4:5f:f2:15:b2:c1:df:62:45:30:6e:d4:3d:79:
                    d6:ce:69:65:d8:60:b1:1d:bc:66:3c:32:f6:19:33:
                    91:e3:09:c2:09:c2:99:f5:24:2c:b4:cd:bc:5b:80:
                    7c:bd:75:fb:f4:e9:a0:5d:8c:37:b3:e9:02:c7:ae:
                    95:a9:00:cc:ec:af:75:d7:8d:3a:90:9a:cd:3b:1b:
                    3f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D4:92:FB:D7:BC:18:EE:8D:F3:1A:78:E1:C8:95:F2:0F:9E:79:12
            X509v3 Authority Key Identifier:
                keyid:93:3C:4B:4E:5F:37:14:1F:7D:61:E9:D1:7A:FD:7C:A4:EE:E2:25:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/4443be5e63d9de60136e7e8bcf7bb84beacdf629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.208.0/22
                IPv6:
                  2803:9ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:8c:ca:9f:6d:18:a0:f1:7d:87:5b:d0:20:8c:86:d2:33:d9:
         c0:e8:2a:2e:be:f1:2a:b2:1c:c8:60:b5:ec:f2:27:55:80:b8:
         9e:25:4e:12:91:5d:cc:76:a9:c8:62:d9:4f:f9:ae:f3:33:b7:
         fd:06:5c:8f:6d:0a:d0:88:1c:39:55:3f:4e:f2:9c:29:9a:e3:
         1b:71:57:3b:63:c7:39:c4:69:8c:2c:f1:71:c5:55:0e:ad:04:
         a2:53:c3:b4:08:04:4a:f6:71:22:a9:9c:93:08:c2:59:5b:03:
         d8:43:0f:ec:5e:5b:b1:c6:d9:68:d9:6c:9f:e3:8f:70:62:b5:
         45:bd:b1:67:d6:ad:6c:ff:22:d8:ec:29:51:a3:af:fb:73:fa:
         36:04:1c:95:51:41:47:c0:ef:e7:a6:d5:d7:38:00:ce:9c:22:
         09:c0:8f:0c:5d:26:c3:90:d6:e6:53:d1:a1:8c:34:45:db:da:
         d4:70:a2:78:e6:d3:4f:22:45:b5:9f:30:0e:40:a1:47:7f:78:
         5c:b4:23:bc:f1:41:0b:c8:21:cb:78:42:c1:7c:a7:e2:a8:f1:
         29:02:eb:f5:6a:64:09:34:24:cd:df:82:cf:6f:3d:2f:3f:bf:
         01:d4:4c:a8:7a:1d:b8:49:ba:bf:0c:0b:b8:7c:6d:f6:fc:3b:
         bb:ae:72:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----