Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/7f8df403a7ca4fdde1a2b56e9f670264b7f23377.roa
File:                     7f8df403a7ca4fdde1a2b56e9f670264b7f23377.roa (raw, json)
Hash identifier:          TmqJF7d/Yqx1uGuj/uZL7kC+mE18JuZdh+khusR25HM=
Subject key identifier:   A5:28:BC:65:20:CA:DA:43:99:17:24:D5:5F:22:C4:E4:80:06:6C:1A
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       10AD9E
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/7f8df403a7ca4fdde1a2b56e9f670264b7f23377.roa
Signing time:             Tue 24 Oct 2023 16:01:14 +0000
ROA not before:           Tue 24 Oct 2023 16:00:56 +0000
ROA not after:            Tue 24 Oct 2028 16:00:56 +0000
asID:                     22927
IP address blocks:        186.132.0.0/14 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1093022 (0x10ad9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Oct 24 16:00:56 2023 GMT
            Not After : Oct 24 16:00:56 2028 GMT
        Subject: CN=7f8df403a7ca4fdde1a2b56e9f670264b7f23377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f9:56:90:56:7c:d5:9f:76:40:20:eb:62:9e:
                    d6:62:bf:04:df:30:7d:21:65:5b:f9:ff:98:da:c0:
                    f8:69:e9:e1:bd:e0:72:46:bd:41:46:15:f6:39:84:
                    a1:2d:22:50:36:3f:d8:31:a3:8b:25:a0:c7:07:5a:
                    72:31:47:be:73:2b:3a:f9:17:9d:0b:cd:e9:72:75:
                    88:73:11:c6:73:88:4d:28:65:96:44:fe:88:a3:9d:
                    b9:ae:e9:c6:4f:77:d9:7a:f6:d2:41:4f:35:76:b1:
                    2a:62:dd:4b:2b:73:54:21:77:77:fc:5f:02:34:e8:
                    f1:fd:70:00:67:82:a8:eb:71:5d:6b:33:8e:6f:c1:
                    90:5f:7f:8a:68:ba:1e:c2:17:84:e0:05:cc:01:57:
                    69:e6:56:db:5c:a1:15:99:34:f3:5b:4e:c7:62:b1:
                    ba:51:bc:c1:6e:fb:e1:bb:d1:c5:1a:1b:8f:c4:7d:
                    34:c6:df:02:67:99:89:73:e0:ad:11:55:20:3b:27:
                    ce:2f:dd:f4:fc:ce:c9:45:39:11:6f:76:0f:64:7c:
                    6e:7a:f2:13:72:03:49:24:11:58:47:43:bf:f3:60:
                    bc:d6:69:e4:e1:ce:85:3f:0a:0e:a1:b3:03:88:83:
                    05:17:79:0d:d9:9a:b9:fd:f4:ba:d8:52:eb:33:eb:
                    b9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:28:BC:65:20:CA:DA:43:99:17:24:D5:5F:22:C4:E4:80:06:6C:1A
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/7f8df403a7ca4fdde1a2b56e9f670264b7f23377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.132.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         33:35:b2:4b:bb:7c:22:16:f5:6f:64:8d:c1:5a:25:f0:81:f3:
         ac:bb:af:e2:30:ab:be:7e:1c:46:00:77:91:6e:16:2c:09:19:
         19:a6:fc:15:fc:06:e4:6c:2c:7e:70:c0:92:e1:d2:da:1c:93:
         98:77:e8:0d:b3:87:5a:3a:42:01:0e:09:16:09:54:0f:3e:ff:
         57:38:60:3e:af:42:45:18:21:04:da:29:27:ea:7b:c3:77:38:
         e8:dc:a2:c7:0d:2b:1b:65:2b:88:2c:8e:ec:7d:90:dd:91:53:
         7c:ec:88:22:0f:67:a1:e0:24:7c:47:87:50:1d:f3:21:d0:b0:
         8b:a7:82:93:13:a9:43:8d:f8:bf:e2:e0:dd:2a:c7:5f:0c:ce:
         9b:ca:3b:f6:43:c5:49:b8:37:7f:9a:33:5c:83:71:b9:28:58:
         7d:42:90:b9:8d:de:8b:3a:9c:af:54:a5:47:c8:6a:ad:4a:e7:
         44:21:0f:a0:a6:e5:66:05:bd:f7:70:d5:af:55:44:cb:cd:fa:
         3d:91:bd:d8:3a:c6:5d:f4:9a:5a:7c:0a:47:43:31:06:bd:5d:
         52:d8:a2:5e:3f:2d:86:48:4f:46:fe:36:41:66:4f:5f:1b:33:
         d2:ed:48:32:50:19:6f:04:3e:09:45:a1:01:08:bb:77:d9:06:
         47:04:d9:0d
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDEK2eMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
YmI0ZDNhNmRkNWU2NDlhNjU1NGM0ODE3Y2UwZWQyNzc0MjkxMzYwHhcNMjMxMDI0
MTYwMDU2WhcNMjgxMDI0MTYwMDU2WjAzMTEwLwYDVQQDEyg3ZjhkZjQwM2E3Y2E0
ZmRkZTFhMmI1NmU5ZjY3MDI2NGI3ZjIzMzc3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiflWkFZ81Z92QCDrYp7WYr8E3zB9IWVb+f+Y2sD4aenhveBy
Rr1BRhX2OYShLSJQNj/YMaOLJaDHB1pyMUe+cys6+RedC83pcnWIcxHGc4hNKGWW
RP6Io525runGT3fZevbSQU81drEqYt1LK3NUIXd3/F8CNOjx/XAAZ4Ko63FdazOO
b8GQX3+KaLoewheE4AXMAVdp5lbbXKEVmTTzW07HYrG6UbzBbvvhu9HFGhuPxH00
xt8CZ5mJc+CtEVUgOyfOL930/M7JRTkRb3YPZHxuevITcgNJJBFYR0O/82C81mnk
4c6FPwoOobMDiIMFF3kN2Zq5/fS62FLrM+u5mQIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFKUovGUgytpDmRck1V8ixOSABmwaMB8GA1UdIwQYMBaAFHZ/Qk1INAbEIOXf
Gb6+mT9yWve2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmZiYjRk
M2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEzNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTM3NWJjZmMtOGI4Ni00NTJlLTg1MGQtODNjZmUz
YjUwZjA2LzdmOGRmNDAzYTdjYTRmZGRlMWEyYjU2ZTlmNjcwMjY0YjdmMjMzNzcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81Mzc1YmNmYy04Yjg2LTQ1MmUtODUwZC04M2Nm
ZTNiNTBmMDYvYmZiYjRkM2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDArqEMA0GCSqGSIb3DQEBCwUAA4IBAQAzNbJLu3wiFvVvZI3B
WiXwgfOsu6/iMKu+fhxGAHeRbhYsCRkZpvwV/AbkbCx+cMCS4dLaHJOYd+gNs4da
OkIBDgkWCVQPPv9XOGA+r0JFGCEE2ikn6nvDdzjo3KLHDSsbZSuILI7sfZDdkVN8
7IgiD2eh4CR8R4dQHfMh0LCLp4KTE6lDjfi/4uDdKsdfDM6byjv2Q8VJuDd/mjNc
g3G5KFh9QpC5jd6LOpyvVKVHyGqtSudEIQ+gpuVmBb33cNWvVUTLzfo9kb3YOsZd
9JpafApHQzEGvV1S2KJePy2GSE9G/jZBZk9fGzPS7UgyUBlvBD4JRaEBCLt32QZH
BNkN
-----END CERTIFICATE-----