Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/c2db917cd179ff2885bc5f1d4a307e316a13ac0a.roa
File:                     c2db917cd179ff2885bc5f1d4a307e316a13ac0a.roa (raw, json)
Hash identifier:          Q6qGjMp0FSObXBxgQu4gt0+jjtBF+4K2tBwiCYEkMp8=
Subject key identifier:   B3:9E:60:C3:8E:C6:FA:10:53:C2:6C:E8:5C:2E:AA:20:2E:79:DC:15
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       109273
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/c2db917cd179ff2885bc5f1d4a307e316a13ac0a.roa
Signing time:             Tue 24 Oct 2023 16:01:03 +0000
ROA not before:           Tue 24 Oct 2023 16:00:56 +0000
ROA not after:            Tue 24 Oct 2028 16:00:56 +0000
asID:                     22927
IP address blocks:        186.39.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1086067 (0x109273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Oct 24 16:00:56 2023 GMT
            Not After : Oct 24 16:00:56 2028 GMT
        Subject: CN=c2db917cd179ff2885bc5f1d4a307e316a13ac0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1a:9a:a9:31:66:76:4a:20:a3:88:3c:35:6b:
                    34:af:15:ea:11:6e:35:26:ed:a2:b9:53:27:80:b8:
                    18:84:ea:c6:8e:7c:8c:29:cd:31:67:fe:0c:52:e1:
                    d5:00:fe:97:d5:dd:bf:2f:51:d8:00:74:39:5f:ae:
                    10:c6:78:b8:92:98:38:c1:7e:30:28:6e:97:0c:45:
                    d6:9b:6c:40:0d:50:3f:dc:f8:2d:40:1b:23:ed:d1:
                    bd:ca:bd:5d:b3:76:97:2b:98:ea:f7:6f:88:9b:06:
                    be:63:98:f0:80:44:0b:f2:8f:72:15:2b:78:66:d0:
                    d0:40:ef:1d:21:25:bf:30:6e:3b:10:1d:52:50:d9:
                    de:43:76:db:63:86:df:c1:96:22:cb:5e:aa:56:aa:
                    98:9c:e8:e0:f1:ec:d8:54:a3:89:50:3d:85:ce:eb:
                    9c:58:a5:35:ee:7e:d0:27:01:01:df:7d:36:c9:51:
                    55:80:8f:48:61:8a:d9:a9:72:69:c0:13:77:87:fe:
                    22:38:54:14:32:c7:41:13:d4:75:a3:11:2d:36:1a:
                    ab:a3:07:b2:ba:b6:30:f3:11:67:56:a1:09:9e:b7:
                    4f:a9:5f:0c:98:20:29:36:0b:88:4f:cd:25:06:11:
                    60:da:7a:a1:d6:d9:e6:a5:f4:e0:13:8f:86:87:19:
                    d3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9E:60:C3:8E:C6:FA:10:53:C2:6C:E8:5C:2E:AA:20:2E:79:DC:15
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/c2db917cd179ff2885bc5f1d4a307e316a13ac0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.39.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         65:01:eb:1a:4e:ee:aa:5d:8d:65:e8:6a:82:97:bf:11:74:a5:
         d7:fb:8d:12:d8:d8:fc:4c:23:c1:ea:b0:27:39:4e:19:82:d3:
         0d:94:01:68:f3:f8:68:cb:78:53:4d:92:71:7c:46:ba:6f:9d:
         89:4b:0c:82:4c:96:0a:58:10:c5:33:96:14:23:b7:7f:91:87:
         ac:fb:cb:1b:dc:74:cf:31:d7:96:95:e3:c9:85:28:5f:a9:1e:
         eb:10:5b:4c:b7:12:f8:dd:47:fe:d2:5e:45:8e:20:ec:09:cb:
         53:63:c4:71:6a:c3:99:ee:b3:96:1f:b7:93:b0:87:ce:56:ca:
         73:2e:0f:2a:ba:85:b2:12:07:07:6b:3b:2e:18:13:26:46:66:
         71:4d:a1:b5:bf:87:c1:64:3f:ed:51:b4:20:81:b5:97:ad:a0:
         1e:54:79:31:04:7b:71:f2:eb:0e:bb:d1:fe:10:de:e5:ef:5e:
         51:47:72:d5:81:a8:bb:c5:5b:97:31:39:cc:92:6d:9d:b9:5d:
         a4:38:e7:ae:2e:9a:7a:7c:18:ad:21:e7:a9:37:71:c1:10:f8:
         11:29:e6:e3:96:49:53:23:dd:85:08:c0:0f:65:0a:04:d0:c5:
         8a:21:4c:30:39:d6:74:03:7a:5d:11:5a:52:95:6d:03:35:9b:
         e8:51:62:4c
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDEJJzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
YmI0ZDNhNmRkNWU2NDlhNjU1NGM0ODE3Y2UwZWQyNzc0MjkxMzYwHhcNMjMxMDI0
MTYwMDU2WhcNMjgxMDI0MTYwMDU2WjAzMTEwLwYDVQQDEyhjMmRiOTE3Y2QxNzlm
ZjI4ODViYzVmMWQ0YTMwN2UzMTZhMTNhYzBhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArBqaqTFmdkogo4g8NWs0rxXqEW41Ju2iuVMngLgYhOrGjnyM
Kc0xZ/4MUuHVAP6X1d2/L1HYAHQ5X64Qxni4kpg4wX4wKG6XDEXWm2xADVA/3Pgt
QBsj7dG9yr1ds3aXK5jq92+Imwa+Y5jwgEQL8o9yFSt4ZtDQQO8dISW/MG47EB1S
UNneQ3bbY4bfwZYiy16qVqqYnOjg8ezYVKOJUD2FzuucWKU17n7QJwEB3302yVFV
gI9IYYrZqXJpwBN3h/4iOFQUMsdBE9R1oxEtNhqroweyurYw8xFnVqEJnrdPqV8M
mCApNguIT80lBhFg2nqh1tnmpfTgE4+GhxnTxQIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFLOeYMOOxvoQU8Js6FwuqiAuedwVMB8GA1UdIwQYMBaAFHZ/Qk1INAbEIOXf
Gb6+mT9yWve2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmZiYjRk
M2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEzNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTM3NWJjZmMtOGI4Ni00NTJlLTg1MGQtODNjZmUz
YjUwZjA2L2MyZGI5MTdjZDE3OWZmMjg4NWJjNWYxZDRhMzA3ZTMxNmExM2FjMGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81Mzc1YmNmYy04Yjg2LTQ1MmUtODUwZC04M2Nm
ZTNiNTBmMDYvYmZiYjRkM2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDALonMA0GCSqGSIb3DQEBCwUAA4IBAQBlAesaTu6qXY1l6GqC
l78RdKXX+40S2Nj8TCPB6rAnOU4ZgtMNlAFo8/hoy3hTTZJxfEa6b52JSwyCTJYK
WBDFM5YUI7d/kYes+8sb3HTPMdeWlePJhShfqR7rEFtMtxL43Uf+0l5FjiDsCctT
Y8RxasOZ7rOWH7eTsIfOVspzLg8quoWyEgcHazsuGBMmRmZxTaG1v4fBZD/tUbQg
gbWXraAeVHkxBHtx8usOu9H+EN7l715RR3LVgai7xVuXMTnMkm2duV2kOOeuLpp6
fBitIeepN3HBEPgRKebjlklTI92FCMAPZQoE0MWKIUwwOdZ0A3pdEVpSlW0DNZvo
UWJM
-----END CERTIFICATE-----