Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/8a50c52ef179ab200c5eeecd301e8b37f70f4072.roa
File:                     8a50c52ef179ab200c5eeecd301e8b37f70f4072.roa (raw, json)
Hash identifier:          e2P8I26ATeNk5VC4nnbbcCxauxonx+drvwC2YhjG9aI=
Subject key identifier:   58:46:41:0B:67:70:DD:F1:B4:FE:88:B8:B3:73:E9:CC:FD:3A:CB:F4
Certificate issuer:       /CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
Certificate serial:       1EDB53
Authority key identifier: AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/8a50c52ef179ab200c5eeecd301e8b37f70f4072.roa
Signing time:             Fri 24 Mar 2023 08:31:33 +0000
ROA not before:           Thu 23 Mar 2023 08:31:33 +0000
ROA not after:            Sat 22 Mar 2025 08:31:33 +0000
asID:                     28509
IP address blocks:        201.174.207.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2022227 (0x1edb53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
        Validity
            Not Before: Mar 23 08:31:33 2023 GMT
            Not After : Mar 22 08:31:33 2025 GMT
        Subject: CN=8a50c52ef179ab200c5eeecd301e8b37f70f4072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b1:c9:47:b3:6a:c3:00:4e:91:0a:5d:81:e6:
                    cb:33:4c:3d:ec:15:10:55:aa:57:3c:1f:16:8f:be:
                    30:f4:67:f7:8c:2b:eb:5e:5e:24:0d:c1:56:17:a2:
                    1a:8c:ca:f8:b0:7d:e0:bc:5b:6b:5b:12:4d:2d:7b:
                    5b:f6:c4:a7:ba:bb:d4:49:5d:30:f4:31:73:f4:29:
                    08:b4:ef:32:d3:17:bf:d1:8f:55:be:04:87:92:f0:
                    2f:02:23:c9:ae:2f:cb:21:f2:aa:bb:4a:f5:b7:62:
                    6b:7c:f6:70:2f:dd:7a:65:3c:c2:98:73:e9:f6:ce:
                    ce:dc:f8:6c:9d:1c:73:8e:97:f2:d7:b7:95:cd:e3:
                    28:34:6f:d9:62:7e:1e:fe:79:26:ee:35:30:dc:2f:
                    04:5a:3b:38:0b:cc:a1:d8:e7:0d:de:ff:54:7e:74:
                    99:35:39:6e:74:f6:de:9e:9a:35:ba:08:22:35:c8:
                    83:12:65:a7:f5:79:58:c0:0a:c3:53:65:97:1c:49:
                    f7:26:b6:9c:01:4e:be:11:72:71:b1:d7:82:68:94:
                    e3:19:88:97:00:61:13:6e:f7:c5:84:d3:73:aa:6f:
                    23:37:87:6d:5b:fd:1b:23:b8:e5:f3:db:91:c0:62:
                    3b:28:c5:b3:ac:5f:bb:d8:86:e4:ee:47:e0:f9:36:
                    62:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:46:41:0B:67:70:DD:F1:B4:FE:88:B8:B3:73:E9:CC:FD:3A:CB:F4
            X509v3 Authority Key Identifier:
                keyid:AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/8a50c52ef179ab200c5eeecd301e8b37f70f4072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:8d:6e:0f:e2:fa:21:7b:db:f9:d6:a5:69:cc:57:7d:c5:b1:
         53:35:8f:45:23:39:22:ff:ec:7f:30:9a:6b:b5:e6:c2:2b:fc:
         3b:c5:dd:e9:f8:b0:4e:09:b7:fc:dc:15:b9:e6:7c:e5:04:89:
         7f:15:9e:f3:f2:8f:2c:bd:03:af:bc:6c:c1:4d:0f:99:fe:91:
         62:06:11:c2:42:39:c7:84:aa:9d:ac:30:15:80:53:28:3b:ed:
         c9:06:c8:ed:89:5f:57:2b:e4:6c:fe:79:93:49:7e:6d:d8:b2:
         b0:a0:1b:03:31:9c:3a:c9:dc:e3:76:70:45:27:79:99:54:cb:
         e2:7a:3f:34:d3:0e:e2:95:15:80:da:18:dd:32:82:c3:fb:37:
         12:8f:21:70:d7:48:92:c1:6f:2c:8d:b4:23:cf:0c:f9:da:cd:
         98:c4:12:63:25:4c:7f:cb:d5:70:85:ee:a4:88:e8:68:bc:e9:
         32:73:0c:a2:f2:0e:62:0d:8c:8d:c3:e7:96:d9:97:7d:a2:af:
         2f:3d:04:e2:ab:6a:28:a2:ef:15:f4:26:d4:6a:7e:82:f5:57:
         da:9c:a6:59:13:6a:09:dc:e9:a6:2e:37:d0:bb:c1:12:d8:0c:
         f3:7a:52:de:9c:89:c0:91:c5:31:bd:b5:00:9b:35:59:7e:cf:
         1d:c0:84:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----