Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/93e3cd812bb644a27388efb75de8fc2d15c2af4b.roa
File:                     93e3cd812bb644a27388efb75de8fc2d15c2af4b.roa (raw, json)
Hash identifier:          ICr484ZieiDzADrAIo6RUiharbqeb4VBWzpmnAWpqiE=
Subject key identifier:   C0:64:2A:87:8A:A1:B7:E1:40:26:A8:FC:FC:A2:B6:01:A5:92:2B:01
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       0A07
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/93e3cd812bb644a27388efb75de8fc2d15c2af4b.roa
Signing time:             Fri 03 Mar 2023 15:55:49 +0000
ROA not before:           Thu 02 Mar 2023 15:55:06 +0000
ROA not after:            Mon 03 Mar 2025 15:55:06 +0000
asID:                     16629
IP address blocks:        181.162.0.0/15 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2567 (0xa07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Mar  2 15:55:06 2023 GMT
            Not After : Mar  3 15:55:06 2025 GMT
        Subject: CN=93e3cd812bb644a27388efb75de8fc2d15c2af4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0e:0d:ce:22:83:f3:48:22:14:65:72:ba:ad:
                    62:0d:76:33:69:5e:78:aa:7a:7a:d6:ea:f0:72:32:
                    26:0d:03:a4:9d:fd:99:aa:01:7e:33:2d:d2:fc:de:
                    d3:e2:26:40:cb:68:a7:45:47:5c:22:4f:26:6b:e4:
                    55:d2:85:70:95:07:ea:8f:82:e3:bb:42:2b:df:90:
                    95:9d:77:ec:58:dc:0e:77:d8:81:a4:a8:f9:38:77:
                    8a:1a:f5:5b:59:00:b6:81:e1:c7:fc:f0:52:b9:f6:
                    68:3e:85:c9:2b:15:00:8a:7f:36:c8:01:54:4b:51:
                    ab:e6:81:ec:16:e7:38:a1:8e:9a:7a:0f:9c:50:8f:
                    db:bc:e3:66:e1:c3:fe:d2:1b:e6:99:6b:5a:1a:76:
                    d1:ea:7f:bb:8c:97:37:76:62:bd:34:d4:eb:5c:03:
                    a7:10:90:d3:4c:fe:95:62:86:64:54:1b:d6:7f:de:
                    f4:4b:c0:d4:a8:1a:c2:35:24:76:82:21:1a:01:c0:
                    b1:56:07:49:e2:96:4b:f5:be:ca:32:9e:10:5f:7d:
                    41:dd:5a:b6:4f:2b:86:6d:b5:e2:91:4e:90:3a:08:
                    f6:2a:74:9b:df:f5:50:72:1a:de:04:8d:44:38:bd:
                    f9:a5:f4:cd:42:41:4a:22:8d:b7:13:c2:6d:49:dc:
                    9b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:64:2A:87:8A:A1:B7:E1:40:26:A8:FC:FC:A2:B6:01:A5:92:2B:01
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/93e3cd812bb644a27388efb75de8fc2d15c2af4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.162.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         59:af:54:bf:7b:97:32:e2:c9:ec:e8:c4:45:91:20:f9:54:c6:
         c4:9f:77:c2:fc:88:62:16:23:18:f9:e3:1f:1e:52:16:a2:b2:
         d3:fd:f4:88:cd:31:4d:77:b5:c5:cb:50:6f:d1:82:8e:11:d8:
         85:19:95:63:b5:fc:f5:aa:56:d1:b6:08:33:d6:4f:80:14:9d:
         20:12:a8:93:7b:04:20:42:91:7e:c3:90:4c:cd:0d:a0:aa:46:
         5f:58:a4:ad:a8:4b:76:30:5e:ba:8f:41:0b:02:86:2e:03:00:
         13:a4:79:c5:73:05:de:b6:8a:45:f5:e4:13:00:1b:59:1c:f2:
         7b:04:2c:58:ed:f3:63:ce:9e:ac:8f:63:49:fd:a6:70:87:63:
         88:9e:47:66:c3:5a:39:50:8c:71:03:52:06:6c:73:ca:79:77:
         77:51:ad:68:25:1b:7a:08:86:67:0a:02:66:a3:89:0f:8b:c3:
         72:af:e6:4b:24:9c:fe:a5:a6:71:88:ad:93:c8:ad:66:fe:e7:
         9f:7b:a5:e0:78:e9:ec:f0:ba:bc:db:af:06:97:da:97:21:5b:
         28:1d:cc:80:36:d3:37:fc:c1:71:3d:18:51:7a:58:16:56:98:
         c2:06:83:83:5f:16:92:b2:7e:5d:e9:96:f3:ef:b3:56:be:2a:
         46:34:7c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----