Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/18a63901235303ebd94dc7be6f38b76288ada6c4.roa
File:                     18a63901235303ebd94dc7be6f38b76288ada6c4.roa (raw, json)
Hash identifier:          BQ0kRhMJNnEBheyODauusoWPgfwhwtGy+jov4fxN1eg=
Subject key identifier:   1A:39:48:CA:BF:B0:20:F1:D1:80:3C:D8:22:EE:FB:AA:82:E7:2D:32
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       10AA13
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/18a63901235303ebd94dc7be6f38b76288ada6c4.roa
Signing time:             Tue 24 Oct 2023 16:01:12 +0000
ROA not before:           Tue 24 Oct 2023 16:00:56 +0000
ROA not after:            Tue 24 Oct 2028 16:00:56 +0000
asID:                     22927
IP address blocks:        186.128.0.0/14 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1092115 (0x10aa13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Oct 24 16:00:56 2023 GMT
            Not After : Oct 24 16:00:56 2028 GMT
        Subject: CN=18a63901235303ebd94dc7be6f38b76288ada6c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ec:82:d9:db:9e:69:88:41:71:65:3d:d7:51:
                    14:b1:e8:df:31:bd:b9:2d:2e:e4:5d:52:f4:7a:9c:
                    c6:cb:1b:2d:81:39:a0:f9:17:85:1f:6e:5b:8a:99:
                    58:72:36:81:83:63:c4:89:76:be:e7:a2:56:48:a0:
                    5e:b1:89:54:b6:4e:89:9c:23:2b:85:a2:9d:1b:17:
                    a7:46:92:a6:1a:2b:fc:69:59:81:31:91:0b:6f:da:
                    78:31:02:04:54:6e:5c:ef:5a:6b:ee:21:64:22:97:
                    7d:a2:53:56:10:14:7e:80:c8:6e:2d:55:2e:f1:7f:
                    85:41:ac:94:4b:48:61:c4:bd:f8:ed:0e:b2:e0:5e:
                    71:d6:36:50:18:ab:b1:4b:4c:5d:8f:f8:0c:1c:23:
                    ca:8e:7c:f9:4a:06:a4:08:97:1f:72:10:59:65:d9:
                    0b:84:04:cc:30:a9:78:b4:01:73:47:49:3b:6c:4e:
                    75:ae:ca:0d:69:82:1a:62:d2:71:cc:97:ae:02:b6:
                    c0:0f:50:d4:69:33:33:aa:a1:90:a8:5f:f8:77:a6:
                    f1:22:9e:d7:b9:74:b7:7c:cd:e8:d2:77:a6:98:4a:
                    76:ae:a7:0e:ce:29:23:a0:4c:f5:ed:19:f6:4f:d7:
                    9b:43:7a:06:14:c3:ad:c9:01:df:63:52:58:e8:1f:
                    52:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:39:48:CA:BF:B0:20:F1:D1:80:3C:D8:22:EE:FB:AA:82:E7:2D:32
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/18a63901235303ebd94dc7be6f38b76288ada6c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.128.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         01:eb:d7:60:7e:29:58:0b:3e:fd:05:11:3e:97:c8:36:9e:15:
         82:70:89:93:93:3c:96:a6:17:0b:3b:13:63:71:d8:ad:ec:71:
         d0:b9:b4:8b:b8:bb:50:46:88:70:6b:56:62:e2:ae:60:d4:50:
         b4:5a:12:69:e5:8a:f9:3f:88:53:d4:27:85:27:15:f0:b3:a5:
         82:70:c5:9f:d3:1a:c7:59:db:dd:cb:7b:f9:2b:30:14:36:d3:
         3f:65:f6:fc:8b:47:1b:c1:66:bf:b7:4e:93:a2:2d:3d:b9:be:
         47:6f:5d:3a:25:f9:da:60:e6:89:af:ab:f3:b1:b6:ba:88:b1:
         81:fa:f6:7a:28:66:33:de:6f:7a:12:20:d9:c9:23:a8:9c:ed:
         e8:18:0f:c7:e3:a0:03:52:af:42:e3:c5:47:31:86:fa:e1:0f:
         cd:6d:6b:4e:74:b2:39:62:5b:f0:59:fd:52:c6:78:f5:b1:38:
         f1:46:93:0d:c3:4c:2c:b4:2e:4b:fd:88:7b:6c:48:c8:d5:ef:
         df:c3:7c:3c:13:e7:25:0e:4f:d9:42:33:a7:79:80:92:4a:1f:
         40:e2:23:d3:4c:dd:bb:83:37:42:8b:0f:9b:78:02:a7:fb:fa:
         a6:22:55:f5:dc:54:51:1f:99:d6:fd:d4:49:26:4d:68:23:82:
         f4:ff:01:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----