Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e8c68e9-ce58-4583-bfb1-4a7056ed8fec/8cdc61cb4500d6871496b75d2cf3a26bdd7f1362.roa
File:                     8cdc61cb4500d6871496b75d2cf3a26bdd7f1362.roa (raw, json)
Hash identifier:          ucTJZ1CQcj1Pw1QMmiQwNrN0bSpzcjdxrrWb+Eot7C4=
Subject key identifier:   74:D7:57:AB:8F:86:2A:D8:EA:C7:E3:A6:41:7B:68:BC:24:D7:45:3C
Certificate issuer:       /CN=8a1fb2a948dd0ade62e316b2f9231b002d40088e
Certificate serial:       1B86BC
Authority key identifier: 40:F5:A6:AF:1D:7A:85:94:04:37:DA:93:ED:C9:6C:5B:AA:4C:27:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a1fb2a948dd0ade62e316b2f9231b002d40088e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4e8c68e9-ce58-4583-bfb1-4a7056ed8fec/8cdc61cb4500d6871496b75d2cf3a26bdd7f1362.roa
Signing time:             Fri 24 Mar 2023 08:31:58 +0000
ROA not before:           Thu 23 Mar 2023 08:31:58 +0000
ROA not after:            Sat 22 Mar 2025 08:31:58 +0000
asID:                     269912
IP address blocks:        187.62.110.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1803964 (0x1b86bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a1fb2a948dd0ade62e316b2f9231b002d40088e
        Validity
            Not Before: Mar 23 08:31:58 2023 GMT
            Not After : Mar 22 08:31:58 2025 GMT
        Subject: CN=8cdc61cb4500d6871496b75d2cf3a26bdd7f1362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1f:28:72:4e:f8:4d:eb:af:3c:6a:d1:e2:9e:
                    82:3f:0f:2a:96:fb:a3:a0:35:fc:36:05:8a:55:12:
                    80:02:40:76:4e:1a:61:52:ab:14:74:a0:75:9f:84:
                    84:58:75:9a:e3:dc:ca:ee:a3:6e:f9:1b:2f:c7:df:
                    10:95:0a:de:bc:34:38:a7:83:c9:1b:aa:a2:7a:4b:
                    27:ad:0c:de:39:05:61:73:d8:6c:f1:78:7e:bd:65:
                    74:b2:43:cc:aa:5e:f6:3c:a3:17:9d:4f:4c:df:17:
                    3d:6a:09:3e:b3:e8:2a:04:9a:99:5a:e6:65:30:39:
                    78:21:12:0f:09:34:4e:85:99:38:6a:83:f3:4e:43:
                    f4:0f:8b:75:c6:8c:f8:2c:fb:a9:6e:26:1e:37:f5:
                    b5:62:b4:82:be:8a:90:41:e0:f4:78:80:ed:d5:33:
                    7c:64:34:43:1e:f3:8b:70:a0:85:ab:f3:6f:49:51:
                    5f:86:df:cf:f2:04:c1:2f:cc:52:bd:50:60:fc:2a:
                    30:6b:63:38:20:e7:1c:cd:d7:b3:9f:40:d6:aa:e6:
                    5e:b3:49:98:e4:15:03:de:af:5f:8a:26:5e:b6:63:
                    a7:ae:9b:d3:3d:ff:46:06:f1:64:03:42:38:bc:f2:
                    d6:d7:5d:74:16:41:09:0c:00:61:c7:27:3f:39:c1:
                    07:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D7:57:AB:8F:86:2A:D8:EA:C7:E3:A6:41:7B:68:BC:24:D7:45:3C
            X509v3 Authority Key Identifier:
                keyid:40:F5:A6:AF:1D:7A:85:94:04:37:DA:93:ED:C9:6C:5B:AA:4C:27:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a1fb2a948dd0ade62e316b2f9231b002d40088e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e8c68e9-ce58-4583-bfb1-4a7056ed8fec/8cdc61cb4500d6871496b75d2cf3a26bdd7f1362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4e8c68e9-ce58-4583-bfb1-4a7056ed8fec/8a1fb2a948dd0ade62e316b2f9231b002d40088e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:9f:03:1b:14:aa:b4:2d:b2:cc:f3:de:c4:b8:82:4d:8f:f8:
         b8:34:35:d7:0b:f1:0a:19:de:f0:a7:c3:85:7e:2e:79:39:a9:
         93:40:e9:35:ca:b7:c5:37:20:1d:c9:06:a1:b2:ea:12:8a:23:
         bd:3a:b7:88:2e:c3:f1:06:01:bf:1f:91:a4:3d:97:1c:da:b5:
         d4:48:29:4c:d1:f9:ba:83:9f:11:61:11:34:64:b0:f5:02:5b:
         8e:77:56:c3:86:ea:dd:86:0e:18:79:e3:0a:33:77:58:c6:31:
         fb:db:df:15:81:93:f3:03:49:09:8a:bc:2c:38:27:2c:ed:ba:
         a0:28:3c:ea:a6:26:44:2f:44:47:63:9b:b4:0b:ba:72:d1:f7:
         1d:69:ed:73:e1:d3:86:0d:0a:12:57:65:7e:fd:f4:f0:3e:5d:
         f8:40:5a:c8:0d:ca:2b:53:f8:aa:17:b0:b1:be:06:1e:a1:93:
         26:f6:c9:61:90:f9:eb:f1:e7:3f:15:19:30:24:21:f3:b7:b9:
         5b:44:b1:90:1b:c7:94:dd:29:97:33:d7:7f:c3:26:ea:4e:0c:
         ac:2d:66:fb:90:25:db:d8:a5:ac:68:35:eb:87:d1:3c:d5:38:
         1d:ec:3b:9d:2b:9d:3c:4d:b0:bc:3c:f3:d1:71:c0:5f:52:7c:
         67:5c:06:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----