Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/8005ed71b06a9f2ac947cd533a314a7ed10050a7.roa
File:                     8005ed71b06a9f2ac947cd533a314a7ed10050a7.roa (raw, json)
Hash identifier:          b2+g9EK6HB2FyawfBUMgE0bDDj9zRR0W9q1Uoz2z5dI=
Subject key identifier:   0E:5E:45:A6:24:CC:9C:12:42:8A:B2:15:D5:47:9C:97:AD:C3:71:23
Certificate issuer:       /CN=14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5
Certificate serial:       0BB450
Authority key identifier: 53:1C:51:AE:25:9D:A0:1F:BC:F6:89:DE:D5:B7:C2:9A:63:34:16:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/8005ed71b06a9f2ac947cd533a314a7ed10050a7.roa
Signing time:             Thu 21 Oct 2021 13:06:51 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     264732
IP address blocks:        177.74.200.0/23 maxlen: 24
                          2803:9e0::/32 maxlen: 34

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 767056 (0xbb450)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=8005ed71b06a9f2ac947cd533a314a7ed10050a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b9:61:08:90:c1:03:49:9e:b0:69:6f:0f:77:
                    3f:5c:8f:15:ee:6c:44:ce:c3:fa:04:8b:ed:80:52:
                    e3:6b:d8:35:9c:19:60:85:51:c4:ad:f4:da:c1:09:
                    e2:ca:40:a1:84:20:9c:57:b3:9d:e4:41:cd:3d:94:
                    98:91:0f:4f:05:84:64:a8:f8:f2:e9:7a:8d:cf:cb:
                    f8:28:c2:16:e5:07:23:a4:d6:a9:65:f7:7b:88:73:
                    be:a2:98:ac:73:a0:f4:28:d1:1d:b8:8a:08:b2:9c:
                    ee:54:d2:65:9b:81:cb:14:d1:55:22:b5:80:0e:00:
                    86:ad:d8:b0:83:de:e1:c1:73:68:f6:52:5c:db:e7:
                    d1:ed:05:8a:6f:a3:4c:04:13:91:d3:d4:ab:ca:c6:
                    1c:d6:23:38:1a:3f:8d:b7:00:1d:82:ae:5b:c9:a7:
                    fb:dd:8e:11:78:3a:10:9e:24:f2:0e:e8:a7:2e:56:
                    e6:6b:af:9c:9b:8e:04:b2:86:4c:86:80:6d:cd:7c:
                    8b:88:d1:64:49:c1:b1:c9:1f:c0:69:ed:21:4b:90:
                    10:6a:36:ab:4d:0b:7a:a8:99:83:31:b4:d8:70:91:
                    49:94:73:8d:8a:68:4b:2b:17:ac:90:cc:4e:1e:e6:
                    cb:2c:da:1e:42:50:aa:06:7d:50:53:19:50:5b:d9:
                    84:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5E:45:A6:24:CC:9C:12:42:8A:B2:15:D5:47:9C:97:AD:C3:71:23
            X509v3 Authority Key Identifier:
                keyid:53:1C:51:AE:25:9D:A0:1F:BC:F6:89:DE:D5:B7:C2:9A:63:34:16:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/8005ed71b06a9f2ac947cd533a314a7ed10050a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.200.0/23
                IPv6:
                  2803:9e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:fc:2b:a4:7a:d2:dc:7e:97:47:3b:2a:c4:a7:de:b3:41:51:
         e9:38:95:ed:71:89:af:1e:1a:9a:80:d1:80:ee:09:2f:33:df:
         68:08:e5:2a:a3:39:25:08:c5:a4:0e:83:a5:7b:2e:f3:5a:7e:
         57:76:fd:1d:c8:bc:8d:d7:80:f1:d4:95:b4:bb:72:80:9a:fb:
         e3:49:9e:10:5a:9f:44:64:f8:ba:1a:93:d6:fb:41:67:bd:c2:
         97:89:b2:d3:0b:67:7d:03:cf:03:03:4b:d3:2f:8d:6a:a6:ca:
         dd:c2:03:b6:1c:8b:fc:88:5d:41:e5:db:77:57:53:5a:57:69:
         e1:c3:c0:a3:9b:83:70:ec:8e:08:92:8f:f6:ad:c4:15:8f:69:
         d6:d0:42:23:0c:28:c0:d7:f1:ee:78:68:37:86:7f:50:d1:95:
         fe:9a:4d:25:f6:9d:9b:b9:55:bf:8b:77:61:42:3c:ab:5c:da:
         a7:c6:e9:7d:a6:6b:32:7e:85:1d:6d:7c:0a:6b:d2:5b:eb:b2:
         69:fd:24:cf:1b:a9:50:d1:ba:30:e1:8a:57:c6:11:de:99:cd:
         37:33:6a:b7:29:24:6a:e0:62:f1:91:06:d9:3a:06:b7:e5:ee:
         b8:95:a7:73:f1:3d:0e:92:5b:7a:22:77:a0:f7:08:e4:83:37:
         0d:05:9f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----