Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/686aa7270a72194a3ab694ebf0edabc4a98ef6a1.roa
File:                     686aa7270a72194a3ab694ebf0edabc4a98ef6a1.roa (raw, json)
Hash identifier:          iJSivsg7zDEDKIKAch3rfl6JsqS2ORiWJJeQeKcQpTU=
Subject key identifier:   7F:0A:44:0A:1C:8E:D0:B4:1E:45:A2:94:AB:80:BE:DB:BC:70:AD:4A
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       10A362
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/686aa7270a72194a3ab694ebf0edabc4a98ef6a1.roa
Signing time:             Tue 24 Oct 2023 16:01:09 +0000
ROA not before:           Tue 24 Oct 2023 16:00:56 +0000
ROA not after:            Tue 24 Oct 2028 16:00:56 +0000
asID:                     22927
IP address blocks:        186.58.0.0/15 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1090402 (0x10a362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Oct 24 16:00:56 2023 GMT
            Not After : Oct 24 16:00:56 2028 GMT
        Subject: CN=686aa7270a72194a3ab694ebf0edabc4a98ef6a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b3:01:17:79:47:2e:95:a3:cd:3f:a9:d8:d2:
                    db:bf:29:59:0f:16:0a:41:3c:dd:8c:2a:bc:b2:9c:
                    ad:fb:0d:35:d4:a4:a5:e4:f7:a6:5f:f6:03:25:d6:
                    37:16:fb:cc:d6:bb:c9:1d:1d:e0:09:91:4f:96:1a:
                    6a:ae:bc:0f:64:c1:b7:0c:ac:fc:f9:61:d9:f5:a6:
                    2f:b3:41:d5:07:83:2e:f4:1c:02:d2:a8:b5:c8:d1:
                    62:a3:30:8e:fa:dd:ee:c7:80:8b:50:38:4b:72:8d:
                    17:6a:24:86:53:17:b2:44:7e:84:1e:ce:49:6d:b7:
                    21:f8:d7:f2:b9:0e:90:66:a0:39:a9:1d:d5:c2:5e:
                    d5:b3:74:35:96:35:0f:63:09:cd:2b:8b:02:57:a0:
                    f8:fc:89:6f:8d:66:e6:3d:c0:3b:3f:56:55:87:a0:
                    23:18:92:00:22:57:86:a3:6c:cf:b8:3b:10:21:9a:
                    83:62:b4:50:05:06:f2:9f:d6:02:f3:22:dc:04:5b:
                    f6:75:ab:86:ce:ab:05:d0:1d:9d:cd:61:5d:79:74:
                    22:28:94:4e:34:1e:d0:a7:06:d4:dd:9b:67:cc:97:
                    57:79:2e:f3:dc:a7:af:66:91:d2:a7:05:b9:fd:2d:
                    ec:64:30:31:f1:1c:8c:d1:57:d5:a1:bb:c0:ae:27:
                    94:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0A:44:0A:1C:8E:D0:B4:1E:45:A2:94:AB:80:BE:DB:BC:70:AD:4A
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/686aa7270a72194a3ab694ebf0edabc4a98ef6a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.58.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         6e:70:48:ca:eb:fc:17:48:9d:2c:7e:36:86:6a:38:22:3b:7a:
         32:00:42:3b:48:b7:5d:8d:ea:0b:ac:5c:5b:b1:6f:0a:ac:87:
         ee:6d:8f:a0:4c:b7:dc:d6:64:4b:2c:c4:5f:c9:b5:0b:6d:8e:
         00:dc:ad:05:17:bd:35:b0:e4:10:93:f8:d3:c7:05:1a:73:e4:
         1d:82:b9:fa:74:d8:60:d3:b6:23:26:15:4b:de:ec:48:b3:11:
         51:ba:35:31:a1:8c:42:4b:e8:35:b3:63:16:50:50:0f:b2:8e:
         4d:ae:5d:b3:4f:d1:11:50:5c:00:53:ee:89:79:f5:50:3b:56:
         11:54:4f:f6:f3:00:9d:d9:e1:88:9d:98:85:e4:d2:51:f9:65:
         7b:9c:dd:ba:65:d5:91:e4:bf:50:47:33:9f:ba:3d:2b:c9:bd:
         15:9a:a0:86:d1:8d:cb:c7:6f:84:b7:61:d9:fa:46:c2:89:b8:
         10:75:35:bb:5f:74:76:c4:d5:23:8f:e0:ab:bd:31:40:03:e7:
         f5:f8:21:59:21:f2:ed:13:df:9b:5c:48:31:bf:ff:6e:b3:37:
         62:7c:8c:a6:91:ff:48:91:46:52:19:18:3d:dd:e2:56:f1:ab:
         c3:c5:cf:6b:7c:df:a9:29:58:0d:4b:62:08:36:bc:7a:8c:82:
         53:71:8d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----