Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/578a53a3de4158d7845067887398df96440471e5.roa
File:                     578a53a3de4158d7845067887398df96440471e5.roa (raw, json)
Hash identifier:          TkeAlHZk40RR6+ZSKuIJfTBZvkxr+dCU+xq4aON2CPM=
Subject key identifier:   24:21:CA:41:23:19:2E:F9:26:2F:D6:D4:54:5A:90:FA:FC:C2:62:3E
Certificate issuer:       /CN=05fbbb173c217aa8030fc6d9379843579229ce31
Certificate serial:       27963B
Authority key identifier: 6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/578a53a3de4158d7845067887398df96440471e5.roa
Signing time:             Wed 14 Feb 2024 21:48:27 +0000
ROA not before:           Wed 14 Feb 2024 21:48:27 +0000
ROA not after:            Sat 14 Feb 2026 21:48:27 +0000
asID:                     27986
IP address blocks:        186.67.248.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 20 Feb 2024 00:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2594363 (0x27963b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05fbbb173c217aa8030fc6d9379843579229ce31
        Validity
            Not Before: Feb 14 21:48:27 2024 GMT
            Not After : Feb 14 21:48:27 2026 GMT
        Subject: CN=578a53a3de4158d7845067887398df96440471e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e8:94:a9:eb:82:fd:58:c2:3a:4d:53:4e:3f:
                    4c:3d:e4:63:33:3e:b1:d7:c5:84:cc:d2:86:d4:dd:
                    83:9b:8e:2e:12:46:ca:fe:c3:9c:97:1d:bc:a5:4f:
                    cf:e5:3a:5c:63:56:8d:35:6c:b0:60:93:27:c3:42:
                    11:3b:dc:cc:18:61:d4:30:77:37:16:55:f6:10:db:
                    97:fc:72:00:c1:c6:c9:2d:35:04:dc:2e:68:45:80:
                    7e:7b:a2:dc:22:b4:9c:35:84:88:8b:37:d9:26:92:
                    70:79:e3:9d:13:52:94:23:60:0a:96:12:44:6f:0e:
                    45:f6:0f:cc:c1:68:34:db:f4:45:5e:a3:d4:62:2a:
                    50:92:57:2e:93:35:8a:58:08:5a:85:99:40:72:ca:
                    b4:c3:64:19:83:7c:f8:14:4d:37:3c:f4:bf:1a:4e:
                    1e:20:2d:4f:d7:38:5c:52:9b:90:06:b9:4b:0a:14:
                    61:e9:ea:df:7f:6d:72:91:c3:e8:db:44:e3:83:38:
                    04:3f:0a:d1:2d:46:49:5a:8b:77:c7:bc:c0:17:47:
                    57:17:0e:8a:e5:6a:11:bc:63:b7:7d:c7:ab:39:d4:
                    84:c9:e2:a4:20:7e:25:61:7a:e2:b0:ab:13:e3:82:
                    53:ce:04:95:9a:ad:a7:09:17:19:a7:c5:6e:bc:45:
                    9d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:21:CA:41:23:19:2E:F9:26:2F:D6:D4:54:5A:90:FA:FC:C2:62:3E
            X509v3 Authority Key Identifier:
                keyid:6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/578a53a3de4158d7845067887398df96440471e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/05fbbb173c217aa8030fc6d9379843579229ce31.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.67.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:e8:e4:02:64:2c:87:4f:1c:24:58:f9:ae:41:25:63:1e:83:
         64:3b:dd:a2:43:f8:31:10:62:59:6c:b3:ea:8c:f8:28:4b:57:
         49:a1:82:84:ec:00:37:f5:bb:69:90:5a:81:c8:58:29:4a:bd:
         14:ac:59:ab:41:e6:ea:77:af:8f:2a:99:27:50:eb:be:2c:87:
         1f:1f:0f:aa:fc:89:0f:c4:14:13:9d:a6:9c:7e:bc:de:f2:78:
         ae:59:2e:c1:07:bc:4f:a2:62:89:69:e3:21:1a:99:1c:9e:10:
         8f:0a:25:df:ac:1d:47:8b:54:01:88:1f:6b:bf:6d:ca:fc:48:
         8f:b9:85:38:d5:5d:7d:3f:86:2a:72:cf:01:20:cf:0b:c3:03:
         31:90:5f:79:96:c6:bc:a7:8e:c1:57:ac:ef:fd:0f:f0:10:fb:
         06:cd:b2:27:b0:cf:e5:f5:9d:33:3f:01:84:ed:6a:91:c2:e9:
         33:b9:bd:21:3e:f3:d2:9c:41:38:2e:f3:2f:65:0f:a5:81:af:
         29:ac:e0:6f:dc:83:e0:3b:d0:0b:5e:7f:5b:94:c5:da:ca:ce:
         81:31:1a:49:38:3b:8c:68:a9:25:97:b0:c6:c7:5b:53:6f:ce:
         06:bd:a0:bb:18:d4:e9:de:35:f9:d5:9a:bf:5b:09:89:67:cc:
         b3:83:79:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----