Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/fd2557002ffe034ba2721d171ed494c6cf948690.roa
File:                     fd2557002ffe034ba2721d171ed494c6cf948690.roa (raw, json)
Hash identifier:          84nv9Y8tmQci097AWeug12W+Nv6Hv2wthYkwL3c5Kas=
Subject key identifier:   A5:99:31:BD:04:5A:7D:B2:DD:DD:08:2E:FA:95:E4:7C:86:04:BB:27
Certificate issuer:       /CN=14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5
Certificate serial:       1B278E
Authority key identifier: 53:1C:51:AE:25:9D:A0:1F:BC:F6:89:DE:D5:B7:C2:9A:63:34:16:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/fd2557002ffe034ba2721d171ed494c6cf948690.roa
Signing time:             Tue 11 Jul 2023 19:00:52 +0000
ROA not before:           Mon 10 Jul 2023 19:00:51 +0000
ROA not after:            Fri 11 Jul 2025 19:00:51 +0000
asID:                     28111
IP address blocks:        177.74.202.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1779598 (0x1b278e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5
        Validity
            Not Before: Jul 10 19:00:51 2023 GMT
            Not After : Jul 11 19:00:51 2025 GMT
        Subject: CN=fd2557002ffe034ba2721d171ed494c6cf948690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:44:5a:72:6b:c9:19:40:36:2c:58:5f:f2:f0:
                    5b:03:63:e2:3e:5d:f5:0e:1a:8e:11:47:5c:8f:31:
                    d9:54:7b:32:1a:40:3a:2d:29:b0:27:7a:3b:e2:c8:
                    65:02:a4:2a:89:30:d0:11:46:80:c6:45:00:70:9f:
                    42:db:86:6e:6b:12:d1:8b:27:e7:4e:42:11:b5:33:
                    9c:1b:73:04:3c:82:20:5c:a1:cb:0d:be:c6:6b:16:
                    c0:0e:98:d8:79:25:9e:82:48:2d:9d:a0:8f:70:05:
                    94:50:9c:72:d0:27:62:4f:ac:f7:bd:27:6c:38:09:
                    10:7f:4d:97:84:07:51:14:2a:92:6e:06:2f:1e:0f:
                    8b:6d:45:bd:40:27:fb:ef:95:0f:a9:db:b3:3b:16:
                    06:fa:1d:c9:41:d7:52:6c:47:62:70:ac:09:74:5e:
                    b7:18:0a:6e:be:92:63:35:d6:5a:6e:60:13:74:fc:
                    7b:fa:7d:6f:f2:1c:e8:e1:c9:0a:8e:5e:82:83:4e:
                    f1:f2:48:f6:78:06:fe:1c:87:f3:c4:8f:1a:aa:e2:
                    94:0b:af:3b:96:72:de:a5:5b:30:96:70:d7:27:4d:
                    61:0d:96:84:53:6c:c5:99:fd:d3:62:b5:40:c6:62:
                    e4:5e:41:65:44:a6:56:6d:c7:5d:10:98:7a:fe:a6:
                    16:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:99:31:BD:04:5A:7D:B2:DD:DD:08:2E:FA:95:E4:7C:86:04:BB:27
            X509v3 Authority Key Identifier:
                keyid:53:1C:51:AE:25:9D:A0:1F:BC:F6:89:DE:D5:B7:C2:9A:63:34:16:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/fd2557002ffe034ba2721d171ed494c6cf948690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:b6:ae:37:a3:33:8c:ea:f5:ec:6d:dd:e2:c0:64:45:35:93:
         57:4d:66:cd:2e:d4:25:d8:1f:c2:7d:3c:e9:c3:96:b3:50:e8:
         e6:9c:de:bf:e9:0f:73:47:05:88:f1:4b:39:89:4e:7e:79:39:
         98:3e:13:8a:c9:44:87:65:c5:02:ed:f6:a8:b9:7f:c4:d8:26:
         b8:60:32:93:5a:ea:41:fe:59:76:a5:c2:2d:e7:54:da:d9:51:
         84:6c:07:24:c2:0d:74:93:6a:b5:83:b1:95:d6:30:ef:69:5f:
         97:d7:a8:c6:66:7b:21:de:e0:f2:03:f8:58:2d:8d:45:51:ad:
         ae:94:a3:c4:74:7a:a4:38:fd:09:c4:61:ce:a1:ac:3f:ba:78:
         e0:f6:32:58:36:cb:6f:97:f8:42:11:2c:b0:7d:a2:0a:f1:39:
         8a:38:4f:d1:af:9c:db:93:d3:e7:02:a5:bd:9a:96:1b:30:02:
         89:7e:dc:23:7c:09:6c:cf:26:32:2b:27:1a:6b:d7:c8:43:22:
         00:33:c8:15:d2:c3:46:a0:be:97:1d:de:62:14:f0:85:bc:98:
         b6:03:e0:14:e3:5d:bd:db:6d:26:76:54:ec:23:8a:dc:d3:d6:
         9f:c5:41:eb:47:9a:8a:dd:8c:91:94:e0:1c:e7:f2:97:71:0f:
         e6:d8:f2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----