Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/d5b5b2b5b8e0934ea5b188018097a52ac84a5747.roa
File:                     d5b5b2b5b8e0934ea5b188018097a52ac84a5747.roa (raw, json)
Hash identifier:          riA6kdBFj802aqTdHd8VWeKLq5LiCW9FOmHbqqn5y0w=
Subject key identifier:   EB:38:59:45:E0:AA:7E:E3:3B:71:B2:A2:6E:B7:5C:53:84:C5:FD:39
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       109FF6
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/d5b5b2b5b8e0934ea5b188018097a52ac84a5747.roa
Signing time:             Tue 24 Oct 2023 16:01:08 +0000
ROA not before:           Tue 24 Oct 2023 16:00:56 +0000
ROA not after:            Tue 24 Oct 2028 16:00:56 +0000
asID:                     22927
IP address blocks:        186.57.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1089526 (0x109ff6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Oct 24 16:00:56 2023 GMT
            Not After : Oct 24 16:00:56 2028 GMT
        Subject: CN=d5b5b2b5b8e0934ea5b188018097a52ac84a5747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0c:47:96:0d:14:08:2f:c7:23:aa:76:c3:21:
                    e8:aa:87:29:f1:36:11:f6:71:fd:77:f1:94:35:29:
                    c3:c7:10:4c:ad:b8:a3:ff:a1:fc:c0:1a:23:f5:8b:
                    77:44:92:c4:26:c8:0a:a1:ee:ce:ea:2a:11:2f:8e:
                    cb:4a:d9:2e:0f:9f:f3:e2:60:b5:7e:bb:4e:89:14:
                    d5:09:09:3a:3c:38:5c:b4:87:da:0e:42:8b:09:d0:
                    f8:ef:ab:0b:60:19:36:bb:29:49:f9:9f:b2:2b:50:
                    f9:f5:ae:8b:9e:1f:88:30:e2:5f:4e:b6:40:89:b5:
                    16:2c:d9:aa:c3:0a:a9:64:ca:4e:cf:f0:50:78:6e:
                    47:c4:6b:2a:83:5c:f6:0a:3a:f2:76:a9:0f:a7:2e:
                    ee:06:89:dc:0f:80:09:57:40:92:e8:71:5c:36:8e:
                    c3:3d:03:e9:04:97:48:90:cc:11:ce:e3:d7:2e:e2:
                    5d:62:de:72:eb:1f:d7:c0:ad:4a:5a:b5:cd:d8:8a:
                    83:86:22:9d:dd:ad:ca:70:3d:f1:bb:27:0a:b8:00:
                    02:98:49:b8:db:d1:2d:df:dc:21:95:66:39:fe:da:
                    e1:1b:05:b9:11:49:ac:bf:8c:d1:e5:e0:2d:3e:1f:
                    b1:bc:a9:70:f0:8d:72:06:31:ea:e0:17:84:50:4b:
                    ec:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:38:59:45:E0:AA:7E:E3:3B:71:B2:A2:6E:B7:5C:53:84:C5:FD:39
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/d5b5b2b5b8e0934ea5b188018097a52ac84a5747.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.57.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2b:36:81:98:88:b3:85:ba:ac:5b:c0:f3:f9:fa:3d:a7:2c:e3:
         e9:96:f7:dc:9d:a0:bd:c9:d7:94:e2:a9:39:a5:42:48:03:95:
         1d:ec:f8:31:9e:9e:68:83:0b:e9:e3:6d:01:2e:a4:91:6e:56:
         f9:76:b5:58:0b:8b:37:94:90:47:55:76:c2:15:2f:b5:d4:e5:
         1b:bb:54:e2:b8:36:f5:9f:01:9c:86:11:f2:05:d0:c4:2f:79:
         ff:51:fd:cc:f3:ff:08:92:53:8d:bf:2c:62:09:5a:be:7c:b7:
         a5:28:34:69:26:9a:f6:72:1f:9b:68:7e:e9:54:34:6c:7c:60:
         28:fd:9b:c4:31:24:3b:99:13:0b:d4:a2:1e:b7:a3:bc:04:68:
         89:42:87:a7:9e:b5:e7:87:93:56:79:d3:1e:ec:35:3d:50:8e:
         17:16:8c:64:c1:d1:dc:cd:fd:cf:9b:12:9f:f1:40:23:51:a4:
         d4:d9:5f:92:b4:55:89:6d:77:7a:57:0c:cf:89:40:cc:32:82:
         16:76:e2:0e:69:7f:0f:5c:a8:73:15:e0:e7:02:a9:cf:a3:3b:
         28:e3:ef:05:0c:7f:3c:08:7e:f4:1e:d0:c2:dc:7b:f0:21:08:
         c4:bf:7e:ce:da:d6:6c:93:32:8d:34:fd:21:75:9d:0a:19:74:
         0a:0e:c0:ce
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDEJ/2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
YmI0ZDNhNmRkNWU2NDlhNjU1NGM0ODE3Y2UwZWQyNzc0MjkxMzYwHhcNMjMxMDI0
MTYwMDU2WhcNMjgxMDI0MTYwMDU2WjAzMTEwLwYDVQQDEyhkNWI1YjJiNWI4ZTA5
MzRlYTViMTg4MDE4MDk3YTUyYWM4NGE1NzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1wxHlg0UCC/HI6p2wyHoqocp8TYR9nH9d/GUNSnDxxBMrbij
/6H8wBoj9Yt3RJLEJsgKoe7O6ioRL47LStkuD5/z4mC1frtOiRTVCQk6PDhctIfa
DkKLCdD476sLYBk2uylJ+Z+yK1D59a6Lnh+IMOJfTrZAibUWLNmqwwqpZMpOz/BQ
eG5HxGsqg1z2CjrydqkPpy7uBoncD4AJV0CS6HFcNo7DPQPpBJdIkMwRzuPXLuJd
Yt5y6x/XwK1KWrXN2IqDhiKd3a3KcD3xuycKuAACmEm429Et39whlWY5/trhGwW5
EUmsv4zR5eAtPh+xvKlw8I1yBjHq4BeEUEvs1QIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFOs4WUXgqn7jO3Gyom63XFOExf05MB8GA1UdIwQYMBaAFHZ/Qk1INAbEIOXf
Gb6+mT9yWve2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmZiYjRk
M2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEzNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTM3NWJjZmMtOGI4Ni00NTJlLTg1MGQtODNjZmUz
YjUwZjA2L2Q1YjViMmI1YjhlMDkzNGVhNWIxODgwMTgwOTdhNTJhYzg0YTU3NDcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81Mzc1YmNmYy04Yjg2LTQ1MmUtODUwZC04M2Nm
ZTNiNTBmMDYvYmZiYjRkM2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDALo5MA0GCSqGSIb3DQEBCwUAA4IBAQArNoGYiLOFuqxbwPP5
+j2nLOPplvfcnaC9ydeU4qk5pUJIA5Ud7Pgxnp5ogwvp420BLqSRblb5drVYC4s3
lJBHVXbCFS+11OUbu1TiuDb1nwGchhHyBdDEL3n/Uf3M8/8IklONvyxiCVq+fLel
KDRpJpr2ch+baH7pVDRsfGAo/ZvEMSQ7mRML1KIet6O8BGiJQoennrXnh5NWedMe
7DU9UI4XFoxkwdHczf3PmxKf8UAjUaTU2V+StFWJbXd6VwzPiUDMMoIWduIOaX8P
XKhzFeDnAqnPozso4+8FDH88CH70HtDC3HvwIQjEv37O2tZskzKNNP0hdZ0KGXQK
DsDO
-----END CERTIFICATE-----