Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/dc48db42834429b82bebd87222b2798edb9d7cf4.roa
File:                     dc48db42834429b82bebd87222b2798edb9d7cf4.roa (raw, json)
Hash identifier:          X5l+HErU820fCAQ2Y8hL4igvkgAtypGaLJhGOKRRfRk=
Subject key identifier:   41:15:15:66:76:E9:59:77:59:6C:10:F0:38:28:0D:CB:B3:38:12:A4
Certificate issuer:       /CN=be51756b3d6021dd6ee3d4415280c6f6b7603b86
Certificate serial:       2159A9
Authority key identifier: 35:6D:53:5D:FD:D9:D4:E5:17:B8:33:65:3F:CF:A6:4E:19:BA:71:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be51756b3d6021dd6ee3d4415280c6f6b7603b86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/dc48db42834429b82bebd87222b2798edb9d7cf4.roa
Signing time:             Fri 30 Jun 2023 22:26:24 +0000
ROA not before:           Thu 29 Jun 2023 22:26:24 +0000
ROA not after:            Mon 30 Jun 2025 22:26:24 +0000
asID:                     26210
IP address blocks:        200.105.128.0/18 maxlen: 24
                          200.105.192.0/19 maxlen: 24
                          190.181.0.0/18 maxlen: 24
                          186.121.192.0/18 maxlen: 24
                          2800:88:1a00::/39 maxlen: 48
                          2800:88:d::/48 maxlen: 48
                          2800:88:e::/47 maxlen: 48
                          2800:88:40::/48 maxlen: 48
                          2800:88:11::/48 maxlen: 48
                          2800:88:12::/47 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2185641 (0x2159a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be51756b3d6021dd6ee3d4415280c6f6b7603b86
        Validity
            Not Before: Jun 29 22:26:24 2023 GMT
            Not After : Jun 30 22:26:24 2025 GMT
        Subject: CN=dc48db42834429b82bebd87222b2798edb9d7cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:81:bb:b5:8c:4f:6d:e1:50:b9:7d:42:40:97:
                    e5:98:d2:89:41:8f:65:e6:d1:c2:ec:f5:e2:24:84:
                    d2:33:57:de:c8:de:0c:8c:b1:7b:62:d5:3d:39:8a:
                    f6:54:ba:7b:2d:b4:8a:c9:09:06:c5:86:90:49:99:
                    35:60:1a:f7:db:53:4f:89:ce:01:13:2e:be:57:bc:
                    08:eb:ba:57:cb:87:b4:74:e7:ee:39:40:b0:b9:62:
                    e8:8c:24:06:ab:55:53:6b:89:55:58:f0:8a:6c:56:
                    9f:4f:1b:34:6a:89:0d:60:99:39:95:f7:e5:47:f2:
                    4d:42:09:e7:7c:cc:6d:59:5e:1f:01:06:d1:0c:9c:
                    5b:a9:21:fb:c5:23:de:32:cc:49:cb:0f:a4:fe:b1:
                    1c:0b:d1:3c:8d:ff:59:ae:94:22:28:aa:3b:10:19:
                    26:13:6c:43:e0:a1:75:2e:43:b6:72:c3:c2:26:bd:
                    c6:c6:ed:59:1e:49:5c:ea:d4:5b:a3:76:5b:49:a8:
                    2f:38:28:ae:a4:db:8d:bc:a6:e5:52:60:4d:9b:d6:
                    a2:ec:0d:11:17:9b:45:7d:44:2e:1e:ff:7d:2c:ea:
                    fc:ce:fd:64:2b:71:ac:d6:a2:e0:29:c9:dc:53:77:
                    29:55:ae:03:3a:98:9a:fb:f7:19:64:0c:81:a5:bb:
                    c5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:15:15:66:76:E9:59:77:59:6C:10:F0:38:28:0D:CB:B3:38:12:A4
            X509v3 Authority Key Identifier:
                keyid:35:6D:53:5D:FD:D9:D4:E5:17:B8:33:65:3F:CF:A6:4E:19:BA:71:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be51756b3d6021dd6ee3d4415280c6f6b7603b86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/dc48db42834429b82bebd87222b2798edb9d7cf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/be51756b3d6021dd6ee3d4415280c6f6b7603b86.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.121.192.0/18
                  190.181.0.0/18
                  200.105.128.0-200.105.223.255
                IPv6:
                  2800:88:d::-2800:88:f:ffff:ffff:ffff:ffff:ffff
                  2800:88:11::-2800:88:13:ffff:ffff:ffff:ffff:ffff
                  2800:88:40::/48
                  2800:88:1a00::/39

    Signature Algorithm: sha256WithRSAEncryption
         3f:47:0d:e8:17:e7:23:c9:fe:6b:fb:d5:5c:50:85:55:b9:36:
         82:7d:45:89:07:0a:26:a7:ff:f4:ec:8a:b9:91:ea:ca:12:76:
         b5:ff:30:02:d0:99:9a:87:12:ea:72:0a:92:4b:f0:ca:6f:ca:
         67:e5:5c:d5:7a:7f:b0:a5:2c:33:8c:9b:02:bc:16:d8:cb:2a:
         e1:d3:f6:58:46:64:8a:1a:59:f0:f1:4d:89:d1:29:c4:28:b0:
         f2:36:b2:dc:e5:07:e5:a1:c8:c7:55:f3:c1:15:48:f9:bc:44:
         49:fa:24:d9:4a:72:65:ba:66:90:80:26:14:c9:7d:c4:15:4a:
         36:e0:fc:0e:62:fc:d0:11:50:c9:08:df:01:b6:6a:76:d5:13:
         e7:bb:62:76:f5:dc:3e:ca:83:fd:c0:61:99:30:4c:ae:88:11:
         b5:d9:4b:0a:7f:0e:96:eb:64:6b:1f:0d:f8:b9:3e:86:d5:ec:
         33:17:b7:a8:97:71:2c:3e:82:65:57:57:20:a5:b5:45:98:1d:
         07:b5:e2:92:cd:3a:27:0c:a5:32:83:85:9c:0a:ff:a3:7c:9f:
         47:73:6e:fd:94:00:31:33:96:ca:19:5f:ce:32:5e:84:ef:ae:
         b6:ca:09:4a:7f:7d:54:86:a8:07:66:4a:7b:ef:33:21:81:19:
         5b:fd:06:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----