Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54ae1231-b48d-4081-b5c1-57da5f5034aa/2a717e32ed9ec5817f71ddad987e42c87758381c.roa
File:                     2a717e32ed9ec5817f71ddad987e42c87758381c.roa (raw, json)
Hash identifier:          kAU/KRnfrUoV+WiwYjJYGm6XXBCkaQpvyVSd8VMj0N0=
Subject key identifier:   29:72:51:DB:78:5F:51:10:94:59:28:9D:93:66:DE:3E:6A:66:80:12
Certificate issuer:       /CN=e57f4a5c31ef43865da0ca860f9a05f89cde6f9b
Certificate serial:       0900
Authority key identifier: A2:E9:D7:53:95:AE:4E:41:89:A8:73:C0:C3:B0:BB:31:41:A5:3B:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e57f4a5c31ef43865da0ca860f9a05f89cde6f9b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54ae1231-b48d-4081-b5c1-57da5f5034aa/2a717e32ed9ec5817f71ddad987e42c87758381c.roa
Signing time:             Sat 31 Dec 2022 02:33:22 +0000
ROA not before:           Fri 30 Dec 2022 02:29:07 +0000
ROA not after:            Tue 31 Dec 2024 02:29:07 +0000
asID:                     272051
IP address blocks:        181.233.154.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2304 (0x900)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e57f4a5c31ef43865da0ca860f9a05f89cde6f9b
        Validity
            Not Before: Dec 30 02:29:07 2022 GMT
            Not After : Dec 31 02:29:07 2024 GMT
        Subject: CN=2a717e32ed9ec5817f71ddad987e42c87758381c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:63:61:5a:b4:c2:ae:2e:48:f1:49:3f:6a:24:
                    8b:f1:8a:f1:89:1d:68:fb:a3:1a:94:14:c5:3b:8d:
                    d9:6a:f2:ec:d5:39:5c:f2:3b:5a:01:1d:5f:4c:98:
                    04:5c:5e:8a:5c:c4:cf:1f:85:55:3c:31:76:56:e5:
                    3a:b5:55:4d:30:0d:c2:fe:ab:44:4f:95:65:73:29:
                    b1:a3:20:6e:e5:a8:3a:9b:99:7f:cf:00:01:00:8f:
                    d1:c6:5a:09:bc:50:b6:72:d8:ca:fd:3c:28:42:cb:
                    02:de:34:5b:d8:fa:b5:32:dd:e0:72:51:b4:02:74:
                    a5:71:00:d7:0a:86:fd:42:8a:29:9f:9d:e5:59:fe:
                    c2:8d:a2:6c:f3:71:0d:5a:a8:3f:a4:21:24:c7:4b:
                    3c:bf:bf:b2:31:56:fe:c7:30:c9:3f:4d:ec:e1:89:
                    7a:94:bc:84:04:e2:d3:cb:fa:d0:03:fa:8a:d9:40:
                    b9:a4:70:33:dd:8c:e6:c7:c1:d4:a0:0d:b4:1f:10:
                    9c:3a:e0:02:2f:7a:25:98:f9:c2:9a:5a:ab:1d:fc:
                    af:79:c5:05:fd:0f:89:35:7a:e5:50:59:e4:d4:53:
                    91:39:6f:53:09:6b:58:5a:19:17:33:db:a3:ba:bc:
                    6d:af:b6:65:68:b3:48:d5:28:64:57:50:26:eb:2f:
                    47:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:72:51:DB:78:5F:51:10:94:59:28:9D:93:66:DE:3E:6A:66:80:12
            X509v3 Authority Key Identifier:
                keyid:A2:E9:D7:53:95:AE:4E:41:89:A8:73:C0:C3:B0:BB:31:41:A5:3B:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e57f4a5c31ef43865da0ca860f9a05f89cde6f9b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54ae1231-b48d-4081-b5c1-57da5f5034aa/2a717e32ed9ec5817f71ddad987e42c87758381c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54ae1231-b48d-4081-b5c1-57da5f5034aa/e57f4a5c31ef43865da0ca860f9a05f89cde6f9b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:ff:eb:46:0a:f9:1c:a5:9f:df:76:42:fd:e0:f9:e8:29:6d:
         7d:55:42:c4:9a:e4:dd:53:8e:71:25:dd:69:7a:e1:db:46:92:
         f8:8d:1c:c9:5b:57:95:69:46:ad:a9:6b:ac:e5:07:b0:f5:d3:
         d7:95:82:a5:da:eb:8a:a4:50:f2:58:3b:b1:17:ff:73:78:84:
         20:d2:6e:5d:d9:0d:a2:40:c0:99:a3:72:2a:77:09:e1:17:cd:
         bf:23:a4:c8:8d:28:17:d8:76:30:27:d5:ea:65:64:65:70:6a:
         97:37:4e:3f:1a:7e:08:d6:e8:83:d0:ad:b3:63:a3:7f:47:be:
         89:70:78:af:3f:bb:6c:23:4b:b1:fd:32:e3:dd:f3:91:79:1a:
         a9:78:ee:73:5f:33:0a:69:38:f8:b6:71:b4:34:2e:7e:6d:65:
         6b:e7:43:72:0f:20:a5:c0:4f:67:db:29:73:40:7e:47:b6:38:
         39:89:ab:9b:9c:9f:8a:29:ad:39:90:02:84:de:8b:ec:22:1e:
         d7:29:d5:73:c5:36:83:02:39:b4:28:75:9f:7b:7a:65:60:63:
         18:2e:e2:4c:bb:92:c7:ff:a8:4b:ee:0b:11:d5:a1:e7:9c:7e:
         aa:35:ac:71:85:55:10:fd:b6:83:d3:2c:e7:79:7a:e7:99:c4:
         87:57:28:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----