Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/0c2d8b956cfc4edd4b5f892abe9b300715638942.roa
File:                     0c2d8b956cfc4edd4b5f892abe9b300715638942.roa (raw, json)
Hash identifier:          8PTeRj0t3zgWSWRVSDuuPCzxgGBH/O7aIX6Sdv97JkY=
Subject key identifier:   1B:AD:20:71:95:F2:6E:14:B4:D5:48:5E:4C:C4:B8:3D:64:B9:59:C8
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       10A709
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/0c2d8b956cfc4edd4b5f892abe9b300715638942.roa
Signing time:             Tue 24 Oct 2023 16:01:11 +0000
ROA not before:           Tue 24 Oct 2023 16:00:56 +0000
ROA not after:            Tue 24 Oct 2028 16:00:56 +0000
asID:                     11311
IP address blocks:        186.61.176.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1091337 (0x10a709)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Oct 24 16:00:56 2023 GMT
            Not After : Oct 24 16:00:56 2028 GMT
        Subject: CN=0c2d8b956cfc4edd4b5f892abe9b300715638942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:20:22:06:d7:d1:c0:ef:d7:8f:35:f8:e2:e8:
                    bc:37:78:2b:5e:0a:14:d7:85:da:fd:33:1b:28:15:
                    dd:66:0f:d2:cb:ec:43:08:a8:36:02:53:73:4b:87:
                    35:d9:13:9d:16:56:ad:65:82:57:b7:03:91:bd:6b:
                    45:68:94:de:3c:2c:fc:cf:0c:62:06:2d:7b:60:b0:
                    de:48:ba:6b:55:c0:19:9d:38:56:89:dd:db:ea:7b:
                    23:4f:09:fb:cd:de:4d:e1:ef:f6:61:8e:9f:a9:e9:
                    c8:32:f0:a0:10:d7:b2:12:96:80:ad:fb:11:c7:13:
                    1a:eb:29:fc:a8:b6:9b:a1:a1:7e:0b:81:64:53:5b:
                    53:c9:db:00:36:5c:73:6f:a3:41:fb:1c:93:f8:03:
                    d4:3b:96:a5:16:a7:06:0d:fe:ec:96:9d:b6:88:bf:
                    14:ee:3f:27:01:7b:6d:d9:93:34:fc:4f:45:d3:f7:
                    9e:78:46:57:d2:00:86:a4:92:4e:6b:8e:61:35:85:
                    e3:d9:c3:fe:25:74:83:fa:a1:85:59:59:81:f7:83:
                    cf:0f:04:7c:50:61:a2:51:d7:3c:43:f4:a2:2a:b5:
                    6e:d2:33:fb:83:64:1c:89:da:72:54:40:75:73:cb:
                    23:dd:e5:80:e5:77:12:0b:f9:14:ec:e8:7d:ad:ee:
                    10:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AD:20:71:95:F2:6E:14:B4:D5:48:5E:4C:C4:B8:3D:64:B9:59:C8
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/0c2d8b956cfc4edd4b5f892abe9b300715638942.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.61.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:af:0f:57:f3:03:cf:a3:9c:ae:ac:e4:06:5d:07:e0:0d:97:
         63:9a:33:c4:5b:4c:be:89:5e:3a:0e:f7:49:ed:30:5a:a1:86:
         59:db:10:53:4f:d4:15:5c:0d:74:4a:85:47:57:44:a3:93:5c:
         6c:34:b8:a7:27:e4:9d:ee:d4:7b:c0:96:90:fb:9d:11:59:0c:
         5d:35:56:77:c8:95:b9:70:98:eb:85:cb:73:73:cd:fa:c1:04:
         39:51:17:4c:40:00:1b:9f:d2:cd:98:e2:32:fa:c1:74:17:95:
         0a:34:ba:7a:d8:f8:e0:af:58:6c:5b:3e:44:c5:6d:c0:47:a0:
         54:58:ea:96:32:92:a2:c9:1b:e3:0e:b7:c1:14:9b:62:40:69:
         39:18:5c:19:bf:f4:bc:22:e2:d5:30:d6:f1:64:27:b0:18:96:
         d0:0e:9b:82:42:e0:bd:a3:49:05:9d:71:73:c1:09:2f:9a:34:
         0e:bf:92:4e:db:ce:f0:26:ab:79:64:d7:bd:7c:eb:ae:eb:b6:
         d2:34:0d:97:18:41:28:bf:a2:54:6f:75:2b:ba:3f:9e:da:22:
         18:1d:22:eb:d1:f4:55:dd:b4:3f:41:0a:87:59:f6:03:96:fc:
         18:d3:65:15:76:15:0f:de:69:3a:35:ca:64:ee:e5:4b:d2:82:
         92:4c:bc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----