Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/f525531338495fe1ec1ec8500200764f11375483.roa
File:                     f525531338495fe1ec1ec8500200764f11375483.roa (raw, json)
Hash identifier:          MhUAaw2neTeoeA/wKnnzhRs8SwAD+CD1uyykLlL09n4=
Subject key identifier:   1B:DD:21:AA:EE:CA:A7:2A:7A:72:74:D6:43:9F:9C:4B:E6:AE:66:B7
Certificate issuer:       /CN=5fda6ad2528a266efa963c472a945b45114d0ccf
Certificate serial:       035B
Authority key identifier: 0D:5B:C4:3F:12:1E:BD:06:D1:45:29:6B:30:36:33:7F:44:42:D9:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fda6ad2528a266efa963c472a945b45114d0ccf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/f525531338495fe1ec1ec8500200764f11375483.roa
Signing time:             Fri 21 Jan 2022 21:32:06 +0000
ROA not before:           Fri 21 Jan 2022 03:00:00 +0000
ROA not after:            Sun 21 Jan 2024 03:00:00 +0000
asID:                     23031
IP address blocks:        181.233.48.0/22 maxlen: 24
                          2803:c310::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 859 (0x35b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fda6ad2528a266efa963c472a945b45114d0ccf
        Validity
            Not Before: Jan 21 03:00:00 2022 GMT
            Not After : Jan 21 03:00:00 2024 GMT
        Subject: CN=f525531338495fe1ec1ec8500200764f11375483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:61:4b:39:fd:be:2a:5f:3b:25:65:11:de:03:
                    8a:9b:1e:15:48:6b:55:9a:70:11:32:9b:f8:f2:fa:
                    ba:03:8d:c0:2b:d7:f1:74:a3:19:25:e5:1e:f5:1a:
                    b7:87:5b:22:13:80:a9:89:d1:d7:3f:ef:b0:90:41:
                    12:24:c2:09:bd:b0:96:4e:e1:39:c1:f3:b5:7f:eb:
                    da:2c:6f:06:d5:1d:99:86:34:f5:97:e9:44:89:57:
                    83:a9:c6:33:68:7e:5c:9f:6d:22:1a:ea:1b:41:77:
                    d8:b3:3e:1f:5e:d2:7c:13:e2:e2:c5:be:e3:ad:c4:
                    f4:f7:e3:17:7f:48:32:00:10:e5:bc:a4:60:e4:ab:
                    95:73:ad:de:0f:bf:d7:57:4f:f2:c8:48:15:5b:5e:
                    ea:f8:27:9d:17:16:6e:0b:ea:30:8b:c6:83:eb:51:
                    47:be:9f:ee:38:8d:43:fb:ef:54:0f:0c:00:79:b1:
                    c2:f7:ce:39:e3:8d:1f:34:c2:71:00:6e:05:79:c0:
                    d7:0a:ca:b5:a6:0b:10:3a:f6:05:eb:9e:be:9a:07:
                    7d:b0:a4:72:ca:70:6b:a3:9a:01:f8:3d:ef:ac:4c:
                    bc:c4:d4:59:6d:9b:19:fd:fb:ad:cc:10:c2:4b:16:
                    4b:fe:78:d1:7c:96:ae:4d:7e:1d:c8:88:e4:08:99:
                    bb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DD:21:AA:EE:CA:A7:2A:7A:72:74:D6:43:9F:9C:4B:E6:AE:66:B7
            X509v3 Authority Key Identifier:
                keyid:0D:5B:C4:3F:12:1E:BD:06:D1:45:29:6B:30:36:33:7F:44:42:D9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fda6ad2528a266efa963c472a945b45114d0ccf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/f525531338495fe1ec1ec8500200764f11375483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/5fda6ad2528a266efa963c472a945b45114d0ccf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.48.0/22
                IPv6:
                  2803:c310::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:ae:5a:03:45:58:0d:15:d9:4f:67:b5:81:d2:73:87:d7:03:
         75:4f:ce:67:6c:12:17:f5:1a:88:ff:4e:5c:96:67:48:48:a9:
         90:9a:93:b1:b3:be:37:20:5a:c2:13:f6:54:f4:bb:e1:6b:95:
         7b:0b:4b:7e:b6:ac:b1:17:87:36:f3:de:e0:04:a5:62:b7:42:
         ad:62:73:a0:84:94:1d:db:df:14:8a:f1:14:d7:12:10:8b:e5:
         e6:4f:73:63:d2:8b:a5:3e:66:8c:66:4a:15:c5:d5:cc:d5:2c:
         e1:ce:40:dd:1e:c8:4c:c7:de:ec:5c:2b:95:0d:86:17:3b:75:
         dc:4b:55:27:a0:13:2e:6d:c1:3a:04:48:fe:1f:06:98:89:85:
         76:4c:f5:c1:59:c9:fc:62:ac:e2:c7:0a:63:ba:96:12:d8:80:
         93:f6:1e:b9:e7:3b:7d:d0:36:8b:40:77:cc:68:42:d8:3c:5d:
         5e:58:b1:77:dc:8e:64:c4:12:d2:86:1c:5d:95:a2:33:fd:23:
         77:2f:a2:e9:af:65:00:0a:40:93:85:e0:6f:ee:b1:b4:db:6d:
         12:39:60:8a:25:92:e0:b2:b3:7b:f9:73:2b:44:aa:75:e0:06:
         8b:b2:e8:79:a8:fb:84:da:22:49:b8:31:10:1b:6d:52:17:f9:
         d9:72:8d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----