Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/ed70d8ece6fdb9815e695dc4556bb1efea8566e2.roa
File:                     ed70d8ece6fdb9815e695dc4556bb1efea8566e2.roa (raw, json)
Hash identifier:          PmWhkgwbagUjNs6w3s3K7ZAeaM+nPhhn2nDXoN0LZAU=
Subject key identifier:   87:3C:7C:17:79:0F:93:F8:B3:62:F3:17:84:B9:88:53:C8:24:2F:44
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       109901
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/ed70d8ece6fdb9815e695dc4556bb1efea8566e2.roa
Signing time:             Tue 24 Oct 2023 16:01:05 +0000
ROA not before:           Tue 24 Oct 2023 16:00:56 +0000
ROA not after:            Tue 24 Oct 2028 16:00:56 +0000
asID:                     22927
IP address blocks:        181.24.0.0/14 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1087745 (0x109901)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Oct 24 16:00:56 2023 GMT
            Not After : Oct 24 16:00:56 2028 GMT
        Subject: CN=ed70d8ece6fdb9815e695dc4556bb1efea8566e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fe:56:d1:c0:ff:b7:3f:35:55:a8:f0:fe:14:
                    87:f6:bb:f9:8a:7c:f6:a9:2b:81:d9:13:c1:4d:3b:
                    a4:ff:dc:38:cd:09:ed:04:41:b5:3a:2b:cd:3d:99:
                    08:54:a7:02:93:2a:d9:69:4a:91:12:db:8f:d6:16:
                    7e:e0:9e:87:92:c9:46:6e:a2:0e:c2:39:03:2b:5c:
                    56:9f:17:a3:e3:f6:1c:dd:0d:59:c7:a8:92:f5:a5:
                    82:45:d6:c7:05:3e:db:bd:f4:04:51:02:19:1d:53:
                    50:5c:55:eb:da:8f:52:4e:07:07:d0:8a:fa:bc:6c:
                    2f:5b:97:62:9f:37:a1:b0:44:38:93:0d:2f:11:c5:
                    db:0d:63:7f:20:a4:b6:f0:a5:06:77:80:63:2b:db:
                    18:a5:2a:01:6e:bb:32:4a:4a:e2:f0:9e:6a:78:78:
                    c8:6a:61:47:a7:37:fb:d5:36:4b:1a:fc:60:c0:6a:
                    f7:c4:c9:c3:16:65:83:2e:5c:98:63:d8:4d:99:79:
                    0f:fb:25:7d:cf:40:a2:5e:7d:93:15:60:42:44:33:
                    8a:03:d7:e0:b0:01:48:9e:1e:87:12:b9:d8:b3:4d:
                    60:c7:77:f8:ad:79:03:b0:bc:5f:c8:a7:eb:4e:39:
                    57:7d:40:a1:64:67:5b:b7:df:7b:8b:65:73:92:05:
                    6f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3C:7C:17:79:0F:93:F8:B3:62:F3:17:84:B9:88:53:C8:24:2F:44
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/ed70d8ece6fdb9815e695dc4556bb1efea8566e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.24.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         49:5b:c2:09:6c:2e:22:9a:7e:fe:53:d9:95:d7:55:b5:c4:34:
         22:e8:01:a2:16:76:4e:57:1b:93:e1:ac:e2:34:b0:46:98:f4:
         28:8d:cd:cc:a3:09:3a:91:2a:ee:53:bd:69:98:0e:8b:52:64:
         37:2a:88:6a:e8:75:bf:9e:d0:94:23:c5:64:1d:8d:38:53:20:
         71:5b:7a:df:ae:55:05:85:7e:2a:c1:19:57:c9:79:e1:1f:4d:
         c3:4b:97:9b:d0:81:0c:ad:bc:f1:2c:92:a7:52:86:46:6d:03:
         ff:01:4b:bc:3c:44:57:a3:07:27:05:bc:ea:5a:1b:fa:f3:a1:
         c2:50:9b:1c:25:ad:67:ab:0c:fe:1e:7a:94:84:1b:c5:c6:e1:
         51:f6:16:3d:c2:14:f1:d0:81:9e:05:56:a4:3a:9f:46:f3:2d:
         26:46:cb:a5:d4:b7:9f:8a:93:ef:68:07:42:83:fb:a0:26:22:
         54:9c:52:ba:6e:02:8c:6a:7f:68:63:32:33:7e:e3:0f:dc:02:
         f3:33:a9:b9:80:b3:07:89:03:87:d2:f3:fc:4a:b9:ca:bb:2c:
         90:a1:24:e0:ee:84:db:c7:da:26:5f:25:1c:f3:4a:3f:97:6d:
         74:0c:d5:48:6a:e6:4d:bc:ba:f4:45:04:9d:a0:87:72:de:40:
         b3:cd:d9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----