Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/a3cb077edd4bf4f5fe9e3a2fab3aaa15f6479315.roa
File:                     a3cb077edd4bf4f5fe9e3a2fab3aaa15f6479315.roa (raw, json)
Hash identifier:          hJWOvXr0qrx4k0lnBmjcbrQtJFbG71xz8PsZ0fjcCYA=
Subject key identifier:   0A:F6:20:A2:46:47:8F:EA:F6:17:29:02:B4:D9:75:59:99:0F:5B:6E
Certificate issuer:       /CN=5d6739fb330fec46825943b9c33eaee7782d7827
Certificate serial:       1B8996
Authority key identifier: 4B:02:C6:39:A5:76:D4:A0:43:40:5D:E7:8D:AA:61:84:06:69:2F:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6739fb330fec46825943b9c33eaee7782d7827.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/a3cb077edd4bf4f5fe9e3a2fab3aaa15f6479315.roa
Signing time:             Wed 19 Oct 2022 21:43:15 +0000
ROA not before:           Tue 18 Oct 2022 21:42:11 +0000
ROA not after:            Sat 19 Oct 2024 21:42:11 +0000
asID:                     263195
IP address blocks:        179.42.174.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1804694 (0x1b8996)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6739fb330fec46825943b9c33eaee7782d7827
        Validity
            Not Before: Oct 18 21:42:11 2022 GMT
            Not After : Oct 19 21:42:11 2024 GMT
        Subject: CN=a3cb077edd4bf4f5fe9e3a2fab3aaa15f6479315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4c:64:5a:37:2b:bd:95:1f:60:4a:33:4a:8f:
                    66:8a:d0:c2:24:04:ef:d6:ee:e7:ba:d9:4a:ca:4f:
                    b0:09:8a:5a:d4:d0:56:19:82:f0:e8:f2:ea:2b:79:
                    c3:b9:54:8a:0c:fe:17:c0:79:b9:fb:ec:bc:58:ba:
                    2d:98:f6:71:2b:30:36:33:7a:58:ff:b9:55:4e:6c:
                    fe:f4:d5:41:50:df:05:03:df:05:2d:e3:c6:f1:fb:
                    b3:cd:db:75:75:cb:c5:25:57:aa:62:3d:3b:95:3b:
                    80:18:f7:b5:5c:ae:46:9e:02:cf:16:70:ab:74:2b:
                    62:e8:2c:8c:2d:54:61:7d:a3:10:e2:90:06:59:48:
                    3f:dc:45:76:c1:93:41:08:e6:b7:03:47:e5:e4:6c:
                    b7:de:cb:da:31:b6:51:ea:88:d4:b2:2d:c2:a7:d4:
                    86:80:20:09:cc:64:2e:bb:6f:07:c3:52:4c:13:a6:
                    65:81:13:c9:04:84:18:53:3f:76:3c:80:fa:63:6d:
                    c1:af:2b:c3:ed:ae:cc:e4:86:55:cb:30:86:4e:ed:
                    72:9f:2a:5d:e7:e1:d2:a0:8f:85:14:42:97:31:37:
                    7d:4a:62:f0:a1:81:82:a5:c7:c6:6e:d9:33:56:f9:
                    88:1b:0f:14:27:e6:c5:ef:df:25:a3:dd:ee:44:55:
                    7e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F6:20:A2:46:47:8F:EA:F6:17:29:02:B4:D9:75:59:99:0F:5B:6E
            X509v3 Authority Key Identifier:
                keyid:4B:02:C6:39:A5:76:D4:A0:43:40:5D:E7:8D:AA:61:84:06:69:2F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6739fb330fec46825943b9c33eaee7782d7827.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/a3cb077edd4bf4f5fe9e3a2fab3aaa15f6479315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/5d6739fb330fec46825943b9c33eaee7782d7827.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:13:84:1d:0b:27:42:13:af:71:0b:12:dd:ed:c6:1d:2a:c1:
         69:80:0c:14:a1:8e:2b:e0:92:11:85:bc:26:29:4e:fb:d5:37:
         53:a0:ba:50:a3:79:d7:fe:cc:99:71:1c:27:8c:ef:89:c7:02:
         8f:8f:67:93:b2:b7:c5:ea:ae:90:14:1d:7a:84:3b:2d:ce:22:
         cc:74:2d:b7:67:88:b4:00:d8:31:77:1d:eb:9b:1b:fb:a2:35:
         52:50:5d:e7:87:48:ef:71:57:cc:65:cc:7b:27:59:83:78:cc:
         ed:d6:30:62:7b:56:d0:39:c0:f2:5d:b0:c9:7f:f7:ee:4d:4f:
         f2:13:91:84:7f:3b:25:d3:a8:3c:5a:c0:cd:0f:05:d0:ed:dc:
         74:dc:7f:90:8e:c3:34:4e:66:21:ce:cc:30:c1:55:3f:31:e5:
         97:79:75:94:82:59:4e:92:4c:df:52:84:11:d6:97:fe:eb:e7:
         f1:4d:69:a7:6f:6c:5b:a1:fa:78:06:be:c4:84:84:dc:a5:e3:
         34:4f:aa:80:da:ac:45:81:d1:9c:13:a4:d2:c5:0a:22:fd:ab:
         4b:2f:7a:30:14:af:33:95:36:b5:94:7a:17:ee:75:8e:49:5e:
         2f:1b:3a:4e:bc:e8:81:40:a5:13:1c:8f:4d:0d:2b:cb:ed:22:
         fb:0a:cf:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----