Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5edc2a21-ac93-4fa2-8f10-c930ff12dd48/398f46af01851ff3a16e2287fa20d30265d1f6f2.roa
File:                     398f46af01851ff3a16e2287fa20d30265d1f6f2.roa (raw, json)
Hash identifier:          QVS89VjsJvG+/DhOY2cTx6iJN92G+9OL+gAOGxD4jns=
Subject key identifier:   CA:9F:AB:0C:B0:0A:FE:7B:4D:4D:54:71:5F:49:87:1E:AD:F2:C6:5F
Certificate issuer:       /CN=2a042d0a363b4c3bccd74c55cfacb5bd6667039c
Certificate serial:       14D77E
Authority key identifier: 52:F7:96:D9:2D:94:EF:1A:55:6A:B9:98:6F:F8:0D:50:98:69:D8:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a042d0a363b4c3bccd74c55cfacb5bd6667039c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5edc2a21-ac93-4fa2-8f10-c930ff12dd48/398f46af01851ff3a16e2287fa20d30265d1f6f2.roa
Signing time:             Mon 27 Feb 2023 15:59:38 +0000
ROA not before:           Sun 26 Feb 2023 15:55:45 +0000
ROA not after:            Thu 27 Feb 2025 15:55:45 +0000
asID:                     262589
IP address blocks:        152.231.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1365886 (0x14d77e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a042d0a363b4c3bccd74c55cfacb5bd6667039c
        Validity
            Not Before: Feb 26 15:55:45 2023 GMT
            Not After : Feb 27 15:55:45 2025 GMT
        Subject: CN=398f46af01851ff3a16e2287fa20d30265d1f6f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b2:aa:6c:d0:3c:bb:60:c7:98:ad:4b:17:56:
                    68:b4:ea:fe:1e:dd:3f:f9:21:5f:5b:c4:49:e1:d0:
                    05:d1:41:ba:86:2e:ff:60:71:a5:d6:f0:88:42:d6:
                    07:7f:1a:b9:bd:55:d6:25:bf:77:24:ba:86:e4:b0:
                    2c:97:94:96:03:61:3a:a1:29:16:26:ed:ea:a7:6e:
                    60:da:ff:09:fb:93:29:e7:46:8b:a9:e4:cc:9d:fa:
                    41:7d:52:f9:13:c7:2f:11:2c:53:87:d9:4d:fa:44:
                    ec:b7:c7:98:2a:09:3c:17:2d:9b:a6:49:43:85:4e:
                    0b:cb:8e:10:17:4d:43:48:c2:cf:60:b8:a8:4f:5c:
                    c7:c2:79:db:de:7b:63:0e:d7:5e:30:55:a6:51:87:
                    33:1a:66:34:a2:13:b0:05:63:63:6a:2c:9f:70:1b:
                    67:ec:51:55:fd:e4:36:3e:9b:d2:10:63:71:46:d0:
                    b3:fc:73:fa:fd:7a:08:33:1f:94:bd:ee:9c:e4:bc:
                    a2:27:77:5f:9c:c2:80:32:b1:25:23:77:ea:9d:82:
                    b9:fb:dc:f4:f7:88:d7:22:07:8e:ae:cf:ef:26:89:
                    43:3f:a3:f3:f9:1a:c1:f2:cb:d9:81:3f:91:40:b9:
                    63:b3:3c:85:51:dd:e7:81:2a:b4:50:c3:a1:52:86:
                    f1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9F:AB:0C:B0:0A:FE:7B:4D:4D:54:71:5F:49:87:1E:AD:F2:C6:5F
            X509v3 Authority Key Identifier:
                keyid:52:F7:96:D9:2D:94:EF:1A:55:6A:B9:98:6F:F8:0D:50:98:69:D8:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a042d0a363b4c3bccd74c55cfacb5bd6667039c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5edc2a21-ac93-4fa2-8f10-c930ff12dd48/398f46af01851ff3a16e2287fa20d30265d1f6f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5edc2a21-ac93-4fa2-8f10-c930ff12dd48/2a042d0a363b4c3bccd74c55cfacb5bd6667039c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:1e:f5:20:32:a1:96:42:ba:af:ee:56:3b:1c:22:71:cf:1d:
         12:5c:96:95:20:ba:1a:c3:b3:9a:f2:46:c7:b2:e9:59:68:49:
         1f:04:96:90:ca:65:40:b8:22:78:8c:31:0c:43:9f:83:28:05:
         45:91:49:64:e3:f5:e1:af:e5:f0:6a:da:07:ae:44:a4:bf:e7:
         e3:c4:c9:5c:e3:1d:ff:3c:ef:02:b5:9e:fa:f0:d0:ec:92:9a:
         3f:7d:50:21:42:65:49:85:38:5e:81:68:79:22:08:8f:c8:f7:
         b0:31:47:ff:bd:bd:6a:d3:8c:3a:7d:f2:3c:40:e4:63:b2:c9:
         90:ad:39:34:38:da:f4:7f:23:42:1b:65:83:97:7e:13:23:a3:
         a1:c3:48:9e:81:51:d2:35:0a:46:0d:da:69:93:f7:b7:53:24:
         50:58:9a:99:2d:01:3a:7d:27:f4:b5:6b:1f:8f:17:66:cc:23:
         50:d3:ff:4d:79:d1:76:c0:9c:01:ac:c9:d8:09:7a:dc:3a:c2:
         9c:d0:f3:7f:57:3a:40:2d:b2:bb:a1:22:4d:83:95:36:24:f3:
         29:79:2b:56:60:d4:d4:6a:4d:7b:59:3a:be:d8:b7:47:e6:10:
         0b:ef:93:21:e1:09:c8:3a:1d:bd:6b:67:df:13:5b:4b:ab:45:
         19:44:ee:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----