Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5d03350903f33c4b7c2b2829900bc1c838ba71ba.roa
File:                     5d03350903f33c4b7c2b2829900bc1c838ba71ba.roa (raw, json)
Hash identifier:          kiNfHjHXSWAirk3SeE9A+UozhV/dYmqKCyFf3BTvQ88=
Subject key identifier:   F2:72:4C:B8:35:8F:44:CD:8D:EA:25:5C:9F:D7:7D:8A:F0:A9:87:5B
Certificate issuer:       /CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Certificate serial:       0D1828
Authority key identifier: 2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5d03350903f33c4b7c2b2829900bc1c838ba71ba.roa
Signing time:             Thu 09 Mar 2023 14:03:26 +0000
ROA not before:           Mon 25 Jul 2022 03:00:00 +0000
ROA not after:            Wed 30 Apr 2025 03:00:00 +0000
asID:                     3790
IP address blocks:        181.224.74.0/24 maxlen: 24
                          2801:151:2a::/48 maxlen: 48
                          2801:151:11::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858152 (0xd1828)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7dbb1482b4705c4115f4698d018750070bcecb
        Validity
            Not Before: Jul 25 03:00:00 2022 GMT
            Not After : Apr 30 03:00:00 2025 GMT
        Subject: CN=5d03350903f33c4b7c2b2829900bc1c838ba71ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:10:95:d1:0c:a6:1a:64:a5:dd:28:1c:e6:04:
                    a9:6f:e9:77:05:d3:10:8e:1f:6b:14:56:de:7b:19:
                    a9:0b:29:9b:7f:5d:47:6d:82:6a:1f:f8:f3:4b:95:
                    0b:99:49:59:7e:3b:c4:14:92:b6:d4:f8:b0:48:87:
                    99:7e:93:3f:0f:cc:45:13:f6:40:f4:97:14:2b:c1:
                    fa:e7:b2:68:68:06:ca:da:6e:3c:04:15:6a:f4:18:
                    32:e6:f8:91:08:e1:2d:1b:8a:12:d8:6e:25:e6:d6:
                    4f:56:78:ad:48:18:d4:0f:24:ce:a9:31:49:8c:fd:
                    69:4e:a8:84:4d:8f:76:ea:da:db:f0:29:b4:55:5a:
                    3d:2f:ae:31:08:94:ea:fa:e0:89:ae:eb:cd:d0:96:
                    a6:a5:ce:ab:da:a0:01:74:1f:34:c7:9b:0e:76:9c:
                    ea:29:79:39:29:6b:c2:39:88:d2:57:60:ee:4a:8b:
                    30:2a:57:c6:43:5a:9f:71:2d:f8:0b:bf:f1:c7:e4:
                    10:d7:f1:b6:f3:67:3e:d3:2c:31:da:a7:66:5e:1f:
                    5e:87:a2:8e:e3:b4:5c:fc:30:5b:d4:b2:8f:31:17:
                    6c:e4:01:8f:a6:8f:6c:34:6d:07:16:16:ba:47:a9:
                    60:b8:42:7b:8c:4f:b2:a2:b5:32:33:f5:99:93:85:
                    9d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:72:4C:B8:35:8F:44:CD:8D:EA:25:5C:9F:D7:7D:8A:F0:A9:87:5B
            X509v3 Authority Key Identifier:
                keyid:2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5d03350903f33c4b7c2b2829900bc1c838ba71ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5b7dbb1482b4705c4115f4698d018750070bcecb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.74.0/24
                IPv6:
                  2801:151:11::/48
                  2801:151:2a::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:86:81:96:b6:3d:e7:fe:32:98:e9:f4:69:30:85:ba:db:75:
         68:09:97:90:19:53:9b:25:59:7a:6d:b4:af:af:5a:9d:15:c5:
         d5:0e:71:3e:82:3d:41:ad:03:b9:c8:1e:e9:12:3c:17:5c:aa:
         fe:95:90:31:d2:ce:89:c1:28:9e:be:39:5f:ea:1c:60:a4:e4:
         65:c1:5b:71:74:d1:35:e8:6e:72:c1:e1:e8:8d:26:32:fe:6c:
         8c:de:c6:dc:b1:f3:1b:03:73:1e:63:48:29:20:97:0c:e3:d3:
         e3:4e:c1:ba:e7:80:e1:31:2f:a5:7b:c9:bc:8a:d5:59:b5:8f:
         09:a4:d2:a7:ee:35:07:0b:93:70:6c:e7:54:c2:50:ca:12:c5:
         4b:58:4d:bc:f3:e9:d9:2f:37:af:a1:18:22:f5:fc:f5:ea:77:
         3f:27:e4:61:d0:46:ac:4f:e2:21:3a:a6:84:0a:df:7d:22:ec:
         0e:63:05:e1:8b:fd:2b:f6:97:8a:e8:7b:33:a3:10:f2:d9:3c:
         01:37:8d:a4:3f:44:45:21:ce:e2:66:1f:b1:e8:b9:fb:31:9f:
         09:7f:60:0b:87:bc:9b:b8:b4:ba:f0:ca:d3:b7:49:7c:76:7c:
         82:a6:69:56:ea:ca:9f:6f:97:e8:94:47:fb:fe:a9:35:93:57:
         1a:5a:83:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----