Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/b65fc2dae02ce03eb033ed927391c897d66fc115.roa
File:                     b65fc2dae02ce03eb033ed927391c897d66fc115.roa (raw, json)
Hash identifier:          CWuPjO0gUtWbJOfm5xvpG9Wq5MxrzgYhC9KXrBgeTfw=
Subject key identifier:   F2:93:21:66:0C:B2:EC:E8:75:A5:DB:E6:92:6C:72:06:62:49:BF:88
Certificate issuer:       /CN=d21f7315b565f88e18de69169de5a1119c25988f
Certificate serial:       216EF5
Authority key identifier: 9A:0B:7E:6F:2B:9E:A4:D9:78:9C:53:3D:D2:BE:7E:AD:01:C6:2D:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d21f7315b565f88e18de69169de5a1119c25988f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/b65fc2dae02ce03eb033ed927391c897d66fc115.roa
Signing time:             Thu 29 Jun 2023 20:19:28 +0000
ROA not before:           Wed 28 Jun 2023 20:19:27 +0000
ROA not after:            Sun 29 Jun 2025 20:19:27 +0000
asID:                     52468
IP address blocks:        186.148.108.0/22 maxlen: 24
                          186.148.96.0/21 maxlen: 24
                          186.148.105.0/24 maxlen: 24
                          2803:2b00::/39 maxlen: 48
                          2803:2b00:200::/40 maxlen: 48
                          2803:2b00:8000::/39 maxlen: 48
                          2803:2b00:8200::/40 maxlen: 48
                          2803:2b00:ff00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2191093 (0x216ef5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d21f7315b565f88e18de69169de5a1119c25988f
        Validity
            Not Before: Jun 28 20:19:27 2023 GMT
            Not After : Jun 29 20:19:27 2025 GMT
        Subject: CN=b65fc2dae02ce03eb033ed927391c897d66fc115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e3:2d:a5:21:00:5d:13:a4:ab:3c:76:47:90:
                    d5:e9:2a:ac:fc:ed:dc:87:26:80:e0:d3:d9:40:e1:
                    59:ff:75:67:be:ef:af:8c:55:17:3a:b5:0e:75:26:
                    eb:50:b2:26:18:0e:d4:1a:d1:9a:59:64:3e:bf:0d:
                    08:fd:43:87:cd:cd:52:ce:5e:e9:c8:69:78:75:c9:
                    80:f7:44:6c:36:10:72:30:00:f6:31:ac:a3:de:7b:
                    c4:64:6e:a1:c6:80:96:94:85:a2:c6:87:0d:de:22:
                    a1:22:fd:21:29:b3:c9:ec:b7:49:85:7a:fe:ca:64:
                    ac:4f:a8:a9:57:ba:8c:00:b3:b8:5a:ee:e2:70:35:
                    b7:08:88:a0:69:c9:55:5a:85:ee:bb:16:ec:ad:e6:
                    c7:15:08:2e:8e:3b:9d:43:65:77:58:45:89:97:75:
                    55:fa:c8:e5:f9:14:f8:34:2f:09:29:ae:39:ec:25:
                    ea:fc:5a:4c:b3:90:bd:66:05:e2:6c:f8:ec:21:b2:
                    21:55:0c:f4:b4:2b:6a:a3:a3:bb:8c:4d:63:1f:0f:
                    9d:90:93:8c:08:32:86:1d:8d:ef:1f:e4:bf:1b:f5:
                    f6:e1:6b:52:58:0d:02:d5:71:c4:58:2a:75:5d:cc:
                    62:14:4a:e3:43:5e:a1:7e:fc:7a:5a:e1:d4:ab:df:
                    39:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:93:21:66:0C:B2:EC:E8:75:A5:DB:E6:92:6C:72:06:62:49:BF:88
            X509v3 Authority Key Identifier:
                keyid:9A:0B:7E:6F:2B:9E:A4:D9:78:9C:53:3D:D2:BE:7E:AD:01:C6:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d21f7315b565f88e18de69169de5a1119c25988f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/b65fc2dae02ce03eb033ed927391c897d66fc115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/d21f7315b565f88e18de69169de5a1119c25988f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.96.0/21
                  186.148.105.0/24
                  186.148.108.0/22
                IPv6:
                  2803:2b00::-2803:2b00:2ff:ffff:ffff:ffff:ffff:ffff
                  2803:2b00:8000::-2803:2b00:82ff:ffff:ffff:ffff:ffff:ffff
                  2803:2b00:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4d:17:4a:50:34:3d:cc:ba:6b:8d:10:36:b8:40:81:76:dd:d7:
         40:95:38:71:98:3a:f4:15:f6:ce:c4:f9:61:88:25:b1:45:74:
         b1:ae:d0:3a:37:3a:ed:44:c9:c3:5e:76:86:ab:0e:26:c5:0b:
         cc:bd:df:a1:ab:aa:72:5f:a7:0f:05:c9:d5:30:66:29:24:16:
         13:2b:24:8f:a8:a8:e4:73:32:07:71:ab:d9:71:c8:29:84:2e:
         6a:18:a9:04:71:52:dc:8a:c7:f7:92:b9:f2:b3:73:90:d4:17:
         78:55:94:34:6a:73:5e:46:8c:d8:3f:a2:19:f7:08:4f:82:13:
         0c:c7:a6:26:9c:91:92:bf:07:c8:44:6c:f0:f5:22:16:f7:6a:
         dd:d5:f9:75:e5:ad:89:a7:5d:07:1c:f1:0e:2c:0e:1b:7e:f2:
         00:01:7c:75:56:80:89:91:db:40:b5:eb:97:7d:e8:f8:bf:b1:
         cd:4e:ea:d1:2c:75:f0:e3:b3:f9:9c:9f:49:56:d2:ee:8a:77:
         2e:bd:b2:80:25:9d:26:21:77:c3:93:f5:0b:98:26:c4:89:6a:
         f7:b6:02:a9:09:77:5d:47:b5:99:e5:cf:04:e2:96:55:d5:b5:
         a7:68:c1:8b:4d:e7:ae:72:0f:f3:cd:da:8c:7f:e2:c7:44:e8:
         2a:56:9c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----