Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/dba4b58a498dcddcce2aa16e66191fd0cbb43fd6.roa
File:                     dba4b58a498dcddcce2aa16e66191fd0cbb43fd6.roa (raw, json)
Hash identifier:          VOTH0YnAJwcJnlLCb8MFJwK+jJyvnRBrNLdKk6RbfZM=
Subject key identifier:   ED:42:D9:F6:DA:33:D0:26:5E:D4:FD:85:6C:07:30:92:BA:65:84:87
Certificate issuer:       /CN=96fbc1b8c542f9384f9a2004e66a61080248cdc6
Certificate serial:       1E2F15
Authority key identifier: 08:13:39:09:AC:82:C2:8D:B1:37:8F:72:53:42:C9:9F:9F:8D:53:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96fbc1b8c542f9384f9a2004e66a61080248cdc6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/dba4b58a498dcddcce2aa16e66191fd0cbb43fd6.roa
Signing time:             Tue 24 Jan 2023 14:42:59 +0000
ROA not before:           Mon 23 Jan 2023 14:42:27 +0000
ROA not after:            Fri 24 Jan 2025 14:42:27 +0000
asID:                     264731
IP address blocks:        186.167.200.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1978133 (0x1e2f15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96fbc1b8c542f9384f9a2004e66a61080248cdc6
        Validity
            Not Before: Jan 23 14:42:27 2023 GMT
            Not After : Jan 24 14:42:27 2025 GMT
        Subject: CN=dba4b58a498dcddcce2aa16e66191fd0cbb43fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3e:ec:34:0a:98:9e:95:1e:57:e7:9d:41:e8:
                    ed:4d:f5:37:9c:dc:6d:3c:b5:a5:e7:0d:3f:22:1e:
                    16:08:2b:0e:0e:5c:b9:2e:50:39:c6:c8:af:aa:9d:
                    e0:e9:e7:e9:42:04:ba:d2:38:39:f5:0c:88:87:15:
                    0e:e9:9f:35:eb:f8:57:0a:f7:b4:07:ca:5a:c6:80:
                    dd:dd:fb:2c:8b:1e:d3:8e:c4:f3:06:7b:50:c2:f3:
                    51:c1:8c:f8:e0:a4:77:da:c8:fa:61:3a:b0:f7:b6:
                    6b:92:2e:8a:ef:b5:1d:cf:6b:99:18:13:be:b0:fa:
                    f4:cb:d7:b9:7e:1e:ef:47:5e:a1:8f:43:ed:3c:15:
                    6e:fc:7c:fa:cb:5c:63:b7:55:f7:a4:27:fe:ba:75:
                    58:92:ad:cd:dd:73:68:86:eb:ec:db:07:39:2a:d5:
                    22:46:e2:ba:4e:02:9d:51:2c:af:e8:d2:ab:9a:d0:
                    5c:95:73:05:31:d5:1d:a6:f1:a2:80:69:1e:a2:20:
                    c3:83:14:fd:27:d1:ce:05:41:33:ed:58:9d:75:4d:
                    67:57:57:f9:e1:24:37:78:c0:c1:86:06:72:75:12:
                    0e:9e:0a:db:03:d9:ee:ff:71:e7:91:88:50:6a:69:
                    1f:5a:56:0c:51:2a:64:ec:1a:bc:7b:c0:0a:18:9a:
                    24:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:42:D9:F6:DA:33:D0:26:5E:D4:FD:85:6C:07:30:92:BA:65:84:87
            X509v3 Authority Key Identifier:
                keyid:08:13:39:09:AC:82:C2:8D:B1:37:8F:72:53:42:C9:9F:9F:8D:53:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96fbc1b8c542f9384f9a2004e66a61080248cdc6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/dba4b58a498dcddcce2aa16e66191fd0cbb43fd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/96fbc1b8c542f9384f9a2004e66a61080248cdc6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.167.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1e:35:1e:47:37:2d:cf:02:39:f9:2e:0b:cc:94:ec:14:8c:d9:
         c9:f2:dc:7a:bb:85:7c:03:41:49:49:ec:45:44:b8:40:2a:2f:
         bc:cd:9c:36:b1:3c:27:c9:84:b9:53:89:38:91:f3:51:44:8f:
         37:a1:59:aa:5b:fc:7d:95:25:12:64:63:92:e8:41:2b:75:d5:
         bf:0e:8f:87:1a:e6:33:fc:15:80:dd:6f:4e:e7:9f:32:2e:89:
         2c:4e:c9:fa:e9:06:76:cd:c8:de:6d:7a:f7:59:f1:b7:f1:3c:
         c6:f6:df:3f:b2:ef:55:24:47:f0:79:2b:07:cb:aa:2b:16:e1:
         9d:9c:e4:3f:3c:92:8b:4f:f4:90:3e:82:16:4d:d5:ad:83:60:
         fd:7f:4b:1d:3b:eb:fb:b8:35:2e:c0:37:a5:b6:1b:f0:40:47:
         d1:15:d9:c1:ec:46:2e:ba:3e:95:dd:8e:63:d3:54:be:89:0c:
         16:70:2d:ae:c8:21:9c:3b:88:8b:e5:29:9e:50:7a:d7:35:3c:
         fd:fd:43:30:9e:ce:0d:29:db:d3:57:89:6a:1c:ff:fe:b3:ad:
         ff:1f:b6:02:d2:84:24:b2:3d:69:dd:94:c1:e8:7a:3f:63:f8:
         f3:d2:d8:a2:39:16:3f:43:ce:62:07:ff:2c:89:72:db:1f:b1:
         ec:5e:5c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----