Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/265dc2ec7977451df80fc81612fab21cb87481ec.roa
File:                     265dc2ec7977451df80fc81612fab21cb87481ec.roa (raw, json)
Hash identifier:          4hQyIBa0zMxDF+NcbGRP6xlOPgzPpfYzZARi+0guLkY=
Subject key identifier:   0D:D2:20:F1:99:58:19:23:56:04:76:A9:F3:85:74:15:36:A9:3B:03
Certificate issuer:       /CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Certificate serial:       05AFAF
Authority key identifier: 2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/265dc2ec7977451df80fc81612fab21cb87481ec.roa
Signing time:             Wed 22 Jun 2022 16:11:48 +0000
ROA not before:           Wed 22 Jun 2022 03:00:00 +0000
ROA not after:            Wed 30 Apr 2025 03:00:00 +0000
asID:                     11830
IP address blocks:        181.224.72.0/24 maxlen: 27
                          181.224.72.0/24 maxlen: 28
                          181.224.72.0/24 maxlen: 29
                          181.224.72.0/24 maxlen: 30
                          181.224.73.0/24 maxlen: 27

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372655 (0x5afaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7dbb1482b4705c4115f4698d018750070bcecb
        Validity
            Not Before: Jun 22 03:00:00 2022 GMT
            Not After : Apr 30 03:00:00 2025 GMT
        Subject: CN=265dc2ec7977451df80fc81612fab21cb87481ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:88:a4:c9:71:47:8d:f5:f3:ca:d3:0f:79:89:
                    1a:dd:62:c8:87:87:10:4e:e4:0e:a8:4f:e0:ec:71:
                    d6:5a:15:83:d4:0c:9b:21:67:23:24:83:c1:e8:f6:
                    41:ee:37:aa:ec:e9:51:b6:74:ce:f1:6a:cf:9e:c6:
                    ce:4c:a6:7f:f7:60:06:a4:09:32:9c:ef:2b:84:3e:
                    9d:96:74:fb:c0:1b:b0:87:34:00:3b:81:04:ea:a8:
                    66:02:63:80:1e:f3:a3:e8:ee:86:3c:be:81:64:2e:
                    a5:e4:e4:60:ef:3a:5e:97:1f:6a:21:7c:af:d8:0d:
                    be:5b:92:b3:e8:29:6f:6d:be:43:0c:ab:f6:9f:e0:
                    f7:e0:55:e5:de:30:ce:85:44:0e:5a:12:88:21:aa:
                    66:49:28:45:aa:b8:46:7f:5a:54:26:f3:2f:27:bd:
                    25:ef:22:50:dd:5a:61:7a:e2:6f:bf:e6:c9:62:2e:
                    be:c3:a8:82:ba:be:ae:3a:53:8b:02:a9:8b:e1:a6:
                    9e:6c:34:2f:c3:3e:c0:3b:32:3d:e7:2e:b0:09:ca:
                    c7:7f:5d:59:1b:c3:01:a0:65:26:71:34:ea:94:52:
                    08:dd:64:c9:e0:0c:ed:e6:a6:ad:cf:f4:54:9b:96:
                    c0:7a:b7:db:5d:4f:d8:e9:3d:54:c8:f4:45:c6:52:
                    7c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D2:20:F1:99:58:19:23:56:04:76:A9:F3:85:74:15:36:A9:3B:03
            X509v3 Authority Key Identifier:
                keyid:2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/265dc2ec7977451df80fc81612fab21cb87481ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5b7dbb1482b4705c4115f4698d018750070bcecb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:93:51:17:46:df:15:24:30:3a:7c:87:d6:0d:9f:ff:3b:45:
         e0:cc:a4:d6:e4:b6:44:6d:f6:9a:fc:d2:ca:1d:6e:1b:fd:24:
         de:5f:68:ab:71:9b:16:d6:10:db:f4:43:54:08:eb:a9:48:b5:
         48:29:24:20:8d:00:d3:72:1b:c6:f4:69:2d:9e:f2:ba:b4:31:
         00:cd:2d:51:1f:07:ac:91:d8:ac:c6:3d:44:df:75:4e:5c:db:
         aa:b0:93:86:03:d7:1c:b3:b3:57:cd:cf:f8:95:a3:bc:5d:4c:
         ba:fd:9e:48:eb:18:01:6b:c2:3b:f3:07:ed:76:09:61:41:6e:
         05:9c:03:5f:0f:2a:29:17:2e:ef:39:5c:d5:09:cc:b0:73:1f:
         22:b0:bf:8b:e2:25:c0:e6:e6:41:9e:24:08:25:10:d2:b1:ca:
         f4:be:6c:c2:e3:96:4f:a4:b3:49:1e:fd:be:ae:94:a1:90:da:
         fc:95:f0:74:27:06:7f:6e:6f:c2:18:c1:7b:1f:de:1d:0d:d7:
         5b:ca:75:3c:15:0a:f5:e1:0c:53:52:c7:05:48:d9:e7:13:9f:
         73:50:93:72:4f:8e:be:bf:bc:eb:d8:6c:0a:d7:5b:61:58:c9:
         57:81:9c:27:76:a2:cc:e5:4f:ec:42:88:66:48:ea:4d:7d:40:
         25:bf:63:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----