Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/24b4c77ad7e46bc52e8de75cb42fee0c5f07c84a.roa
File:                     24b4c77ad7e46bc52e8de75cb42fee0c5f07c84a.roa (raw, json)
Hash identifier:          Omu+oVsNxaL9f3pBGH1mRjpDVhuUJLv0lwFs9fk6zGE=
Subject key identifier:   D8:5A:DB:45:65:EB:F7:B0:60:8A:AD:D7:10:83:DB:05:4D:B2:C2:17
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       11A3BB
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/24b4c77ad7e46bc52e8de75cb42fee0c5f07c84a.roa
Signing time:             Mon 27 Nov 2023 19:51:43 +0000
ROA not before:           Mon 27 Nov 2023 19:51:40 +0000
ROA not after:            Thu 27 Nov 2025 19:51:40 +0000
asID:                     22927
IP address blocks:        186.128.0.0/13 maxlen: 24
                          186.56.128.0/17 maxlen: 24
                          186.57.0.0/16 maxlen: 24
                          186.58.0.0/15 maxlen: 24
                          186.60.0.0/14 maxlen: 24
                          186.39.0.0/16 maxlen: 24
                          201.255.0.0/16 maxlen: 24
                          201.250.0.0/16 maxlen: 24
                          181.20.0.0/14 maxlen: 24
                          181.24.0.0/14 maxlen: 24
                          190.172.0.0/14 maxlen: 24
                          190.176.0.0/14 maxlen: 24
                          190.48.0.0/14 maxlen: 24
                          191.80.0.0/14 maxlen: 24
                          191.84.0.0/15 maxlen: 24
                          201.176.0.0/14 maxlen: 24
                          201.180.0.0/15 maxlen: 24
                          2800:380::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1156027 (0x11a3bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Nov 27 19:51:40 2023 GMT
            Not After : Nov 27 19:51:40 2025 GMT
        Subject: CN=24b4c77ad7e46bc52e8de75cb42fee0c5f07c84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e6:df:00:88:61:48:f8:49:77:99:d0:bb:9b:
                    5b:ed:02:48:42:7a:2a:e2:fa:b1:36:c3:c8:1e:38:
                    f3:2e:1e:bb:16:19:9d:69:fc:4f:c1:e8:77:cf:31:
                    b4:e8:a7:4d:6d:7b:66:76:01:da:da:ed:a9:99:cb:
                    19:48:18:9d:fa:5a:4d:c1:f7:99:e5:5d:e3:ed:21:
                    47:90:f7:e3:93:0e:7c:85:f6:8f:94:fb:7c:51:de:
                    72:d0:ab:fa:3a:6e:c6:ad:c6:6e:0f:6c:32:7f:cd:
                    27:06:48:26:52:d3:50:a9:b3:4c:c3:d8:8b:df:a8:
                    27:42:bb:17:4c:99:02:ac:36:72:58:35:e9:2b:3c:
                    5a:21:84:b7:d2:82:9d:39:95:7f:70:a0:76:1f:15:
                    dc:9b:23:d4:92:a8:07:20:c7:10:02:e3:20:9d:52:
                    22:28:ac:58:b2:85:a7:7b:12:51:09:00:ae:f0:d0:
                    8d:99:78:cd:1e:05:3d:bd:96:14:45:68:bb:5d:91:
                    b9:3b:a1:74:0b:ea:53:6c:12:6e:e3:ee:ce:97:b6:
                    85:c0:e6:74:31:e5:1d:1e:27:d1:38:65:6a:66:be:
                    4b:61:7a:43:ab:6a:2a:f7:b9:42:37:f1:96:65:0b:
                    77:eb:9d:32:3a:53:89:ac:ca:5d:3d:df:e9:fd:a4:
                    1a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5A:DB:45:65:EB:F7:B0:60:8A:AD:D7:10:83:DB:05:4D:B2:C2:17
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/24b4c77ad7e46bc52e8de75cb42fee0c5f07c84a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.20.0.0-181.27.255.255
                  186.39.0.0/16
                  186.56.128.0-186.63.255.255
                  186.128.0.0/13
                  190.48.0.0/14
                  190.172.0.0-190.179.255.255
                  191.80.0.0-191.85.255.255
                  201.176.0.0-201.181.255.255
                  201.250.0.0/16
                  201.255.0.0/16
                IPv6:
                  2800:380::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:ba:39:eb:79:71:46:f6:b1:56:8a:db:ef:4c:8a:69:2e:78:
         26:b6:77:70:b2:fc:b3:9c:d5:14:33:a2:8f:5c:02:46:1e:c0:
         e7:28:f7:5c:b0:99:77:52:45:43:57:e3:82:9e:7a:e1:f7:eb:
         fd:84:30:32:f0:0d:b9:ca:57:b2:eb:25:5b:dd:a7:97:c8:16:
         54:0d:99:57:0b:3b:bd:73:30:bc:6f:5e:90:8e:ce:71:03:03:
         ba:b0:be:38:7f:3e:ad:58:c9:09:f5:55:8c:1a:7a:ce:f9:79:
         f5:bc:82:6c:c0:f9:b3:33:94:c5:b4:b2:f3:11:e1:93:0c:d0:
         38:43:72:7c:fc:2d:3b:fa:dd:c3:a6:ee:10:4c:d0:09:0a:49:
         c3:d0:66:8c:51:af:19:a5:47:34:f3:23:b7:35:dd:e5:40:7f:
         42:b2:c2:61:23:2d:b9:99:2a:27:4c:7d:34:16:56:27:b8:41:
         57:d7:01:8d:8d:42:f6:1c:be:ee:9f:77:46:cf:d3:a5:10:0d:
         19:22:53:38:ff:9b:ff:96:56:d5:25:0c:6a:18:b0:2d:53:69:
         4a:f1:88:63:05:6e:d0:38:61:3c:6c:db:a4:d9:87:e6:4f:25:
         cd:0f:6c:8e:4f:b9:e1:53:0d:f3:5b:1a:fc:1d:69:bf:d1:b9:
         e3:43:4a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----