Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/c1e7ec3a37365442bf12bf1e7682f9e92479f2e6.roa
File:                     c1e7ec3a37365442bf12bf1e7682f9e92479f2e6.roa (raw, json)
Hash identifier:          ex1DvKefLR3JxSydyZiM31GGIuo8X+G/1YxtJp+W968=
Subject key identifier:   E6:D1:3A:51:D2:E5:9B:1C:5B:24:72:14:D4:5D:D5:49:8F:3B:79:91
Certificate issuer:       /CN=4a3d4fdf5d4afff13254531592d21c29a5ad3196
Certificate serial:       0A2FBB
Authority key identifier: 9F:B3:09:64:3E:AC:FE:F8:8C:AE:4C:7B:C0:BC:58:B2:FC:C8:E5:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a3d4fdf5d4afff13254531592d21c29a5ad3196.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/c1e7ec3a37365442bf12bf1e7682f9e92479f2e6.roa
Signing time:             Fri 22 Sep 2023 21:26:29 +0000
ROA not before:           Thu 21 Sep 2023 21:26:28 +0000
ROA not after:            Mon 22 Sep 2025 21:26:28 +0000
asID:                     272038
IP address blocks:        181.233.180.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 667579 (0xa2fbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a3d4fdf5d4afff13254531592d21c29a5ad3196
        Validity
            Not Before: Sep 21 21:26:28 2023 GMT
            Not After : Sep 22 21:26:28 2025 GMT
        Subject: CN=c1e7ec3a37365442bf12bf1e7682f9e92479f2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7a:41:4e:d9:b2:2f:cd:d4:ec:93:22:13:7e:
                    d0:0c:69:a7:26:9f:8b:1e:1e:32:d1:ff:4a:78:ee:
                    57:2d:1b:39:ba:73:0e:ad:d3:31:49:08:9f:85:08:
                    c0:42:f1:4c:d8:c6:ab:de:6d:7f:31:54:9b:2d:40:
                    0a:af:19:3a:65:11:51:0d:21:4b:d4:f7:0f:0d:1d:
                    b3:63:21:d0:26:f2:72:e5:bc:ea:fc:f8:01:53:25:
                    88:af:32:56:09:ee:ac:78:21:20:c6:44:ee:85:17:
                    ab:88:de:5e:ad:71:22:50:37:b0:90:58:a5:0a:a5:
                    9b:06:ba:ea:7d:c8:5c:e3:9f:0f:85:b8:86:68:d6:
                    f5:4f:cf:83:53:60:da:44:53:8d:f6:3c:85:45:0e:
                    6a:ab:d3:6c:4a:fd:bc:88:51:bb:4d:c4:9c:98:fb:
                    6c:93:87:63:60:84:f7:59:0f:73:97:fb:0c:cc:b5:
                    fe:ef:c1:2b:23:40:8b:72:0d:14:f1:0c:fa:38:b4:
                    fd:2b:65:59:d9:a3:6a:c2:6b:01:bd:2d:11:c1:94:
                    68:fb:c5:87:d2:db:b7:95:6f:79:12:47:ef:3b:02:
                    10:8e:20:16:55:b8:da:6f:2a:81:7d:1d:a7:8f:06:
                    10:d3:1c:71:05:d7:9c:a7:56:e9:7b:fd:49:9a:a2:
                    55:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D1:3A:51:D2:E5:9B:1C:5B:24:72:14:D4:5D:D5:49:8F:3B:79:91
            X509v3 Authority Key Identifier:
                keyid:9F:B3:09:64:3E:AC:FE:F8:8C:AE:4C:7B:C0:BC:58:B2:FC:C8:E5:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a3d4fdf5d4afff13254531592d21c29a5ad3196.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/c1e7ec3a37365442bf12bf1e7682f9e92479f2e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/4a3d4fdf5d4afff13254531592d21c29a5ad3196.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:18:18:53:44:36:a9:5d:8a:5e:93:46:bf:40:32:8a:d0:bc:
         5d:c1:1f:44:d5:ad:44:c3:67:83:3d:44:f8:b3:54:0e:cd:31:
         8a:1d:28:6f:82:ed:fd:c6:e6:a9:69:ae:87:10:a8:1e:7a:d1:
         c5:0d:dc:84:08:19:83:9e:a6:d9:cb:8f:b2:59:13:d3:08:54:
         55:4c:46:b5:c9:f1:fc:7b:c7:18:11:7a:9b:c2:e4:14:40:99:
         40:39:09:e9:9f:e4:54:0d:77:97:05:1c:df:e0:17:99:21:c5:
         c8:24:ca:7f:73:79:ae:29:09:c1:b3:3b:52:a2:f6:b1:85:4e:
         9c:18:72:2c:83:cc:7b:b0:5d:f8:40:47:08:42:24:3a:fa:6a:
         f2:6a:47:ab:52:11:e8:aa:6b:86:06:cf:a1:5d:0d:14:e6:91:
         c6:ec:c8:28:b8:db:39:c3:12:fa:03:73:01:c4:52:c4:4e:b2:
         bf:10:4d:b8:50:f0:d3:20:79:d1:f5:cb:ae:42:92:4a:eb:e4:
         b3:41:39:98:61:1b:d2:98:2a:88:4f:37:c5:fd:0c:b8:64:2a:
         0b:a5:5f:cc:17:09:06:e3:4f:93:a9:73:ba:00:df:43:a7:d8:
         a9:0d:73:24:7c:f7:00:09:be:f7:cd:47:0b:e3:e0:83:55:dd:
         bd:8e:97:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----