Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/c165c348a41ffe4ebfc3313b13c6693145547b2c.roa
File:                     c165c348a41ffe4ebfc3313b13c6693145547b2c.roa (raw, json)
Hash identifier:          N3100JeJxaj9ZlH7jH+9Ft2jklii95IJ3xBd9I6T8HU=
Subject key identifier:   4B:F2:BA:40:50:1D:05:93:85:44:64:FC:14:59:B2:70:AB:34:96:19
Certificate issuer:       /CN=f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b
Certificate serial:       1F0909
Authority key identifier: C6:04:49:3B:FF:C3:07:89:21:D3:5E:06:41:B2:53:0C:47:7D:0C:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/c165c348a41ffe4ebfc3313b13c6693145547b2c.roa
Signing time:             Mon 20 Feb 2023 19:54:45 +0000
ROA not before:           Tue 23 Mar 2021 14:35:20 +0000
ROA not after:            Tue 24 Mar 2026 14:35:20 +0000
asID:                     262220
IP address blocks:        181.225.80.0/24 maxlen: 24
                          2803:6700:3000::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2033929 (0x1f0909)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b
        Validity
            Not Before: Mar 23 14:35:20 2021 GMT
            Not After : Mar 24 14:35:20 2026 GMT
        Subject: CN=c165c348a41ffe4ebfc3313b13c6693145547b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2d:57:14:55:d6:41:c1:60:97:a7:f7:61:82:
                    97:c4:e3:3b:ad:1b:bb:5b:a1:90:d5:5b:7f:b5:4d:
                    f2:11:5f:25:4f:61:f4:e2:cd:dd:a9:49:a8:be:f3:
                    de:50:b8:82:6f:b1:46:03:52:dc:d7:70:d5:17:eb:
                    50:33:14:a0:b1:c3:fa:bf:9d:c7:42:4b:69:da:7d:
                    87:b3:cd:a6:39:f6:03:0f:8b:5f:54:1c:1d:5f:a0:
                    ec:fb:1b:eb:67:8b:a6:0e:26:c8:72:d5:6c:22:2a:
                    57:41:19:86:06:f5:24:e4:7e:88:3d:00:24:87:11:
                    79:a7:a9:87:5d:ca:5f:fa:ee:17:86:6e:10:1e:24:
                    8a:40:b2:f5:da:6f:3f:92:be:3a:3d:3a:04:48:13:
                    7a:1c:4c:77:8a:0a:7b:fc:f2:19:59:31:d8:ba:91:
                    fe:59:08:51:62:e0:80:58:08:eb:b3:db:ef:8f:44:
                    a5:e5:b7:d7:23:f0:9a:40:69:80:d5:67:8e:ef:73:
                    85:1b:3d:49:18:32:8b:64:8e:89:3f:22:83:e8:ff:
                    08:08:34:37:09:85:fd:29:8b:8b:ec:71:32:0d:e3:
                    31:6a:c2:26:38:cf:a6:f4:27:c5:47:76:a4:d9:ff:
                    48:e8:f0:2f:78:11:8c:68:94:2e:ce:90:54:e4:f9:
                    8c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F2:BA:40:50:1D:05:93:85:44:64:FC:14:59:B2:70:AB:34:96:19
            X509v3 Authority Key Identifier:
                keyid:C6:04:49:3B:FF:C3:07:89:21:D3:5E:06:41:B2:53:0C:47:7D:0C:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/c165c348a41ffe4ebfc3313b13c6693145547b2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.80.0/24
                IPv6:
                  2803:6700:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:4c:94:dd:7e:bc:15:71:99:2c:ba:9e:ba:aa:71:5c:0f:bd:
         01:24:68:36:ce:e2:1f:24:dd:6e:1a:73:f9:8d:f7:6d:dc:21:
         0a:b6:2e:17:aa:ed:e4:3f:a7:09:77:e5:b5:df:e5:df:22:16:
         0f:ca:9c:36:b4:bb:1f:32:d4:56:2b:5d:3c:2a:f4:c8:ab:6b:
         f1:41:be:bb:1c:8e:89:99:c0:2e:65:17:8c:0c:29:cd:20:1f:
         9f:42:35:56:e6:f7:52:cc:9a:cf:44:6c:a4:11:c7:5b:07:9f:
         10:1d:f3:bd:06:b7:20:54:88:e2:eb:50:09:7b:dc:b4:42:82:
         71:87:42:8b:71:89:13:6f:12:38:bd:7c:f9:d8:64:6c:6d:16:
         91:e0:c9:cb:1a:62:bd:43:d1:a9:8c:fb:85:61:ad:49:d9:56:
         fa:2f:7d:62:27:e7:cf:80:3e:c4:45:f9:fd:be:e5:61:69:0f:
         55:1d:7d:c4:f7:ee:3d:84:e1:56:2a:81:bb:27:89:50:e3:21:
         5c:06:2c:2b:9b:8f:37:9b:78:c3:e8:9b:d9:37:4e:15:cb:c6:
         ea:72:c6:94:3f:61:6d:9c:22:4c:a6:40:a1:a9:18:1b:cd:77:
         a6:3e:5f:4a:5e:db:58:fc:d6:3d:1a:27:43:49:a1:e2:0e:38:
         77:1c:2b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----