Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/2fa60982ca3255c8439f579e806d74d12bf74d16.roa
File:                     2fa60982ca3255c8439f579e806d74d12bf74d16.roa (raw, json)
Hash identifier:          3zDCL98bzsuNarhhNWw+zuB4OqqA8Xk/oTnMeZFjF04=
Subject key identifier:   6B:EC:00:08:68:39:24:80:42:4A:BC:A5:70:14:17:DD:5E:CD:46:63
Certificate issuer:       /CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
Certificate serial:       228A08
Authority key identifier: 81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/2fa60982ca3255c8439f579e806d74d12bf74d16.roa
Signing time:             Fri 22 Sep 2023 08:30:00 +0000
ROA not before:           Thu 21 Sep 2023 08:30:00 +0000
ROA not after:            Sat 20 Sep 2025 08:30:00 +0000
asID:                     399382
IP address blocks:        138.185.15.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2263560 (0x228a08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
        Validity
            Not Before: Sep 21 08:30:00 2023 GMT
            Not After : Sep 20 08:30:00 2025 GMT
        Subject: CN=2fa60982ca3255c8439f579e806d74d12bf74d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:07:6d:bf:4b:4e:06:4a:6e:31:6a:18:52:69:
                    a9:1d:1f:9d:fb:ec:65:78:20:bf:e3:a6:a6:e0:87:
                    2c:47:ec:b4:42:7e:4c:07:32:bb:2b:ff:29:81:26:
                    51:b1:12:27:b5:de:ed:6f:e1:2e:58:08:30:1b:14:
                    46:d7:9a:98:5f:3c:e3:cf:43:c0:d0:36:39:9f:b7:
                    10:c0:02:5f:db:f5:f7:eb:b4:71:63:ef:2a:2e:3a:
                    56:39:f1:6b:9e:e8:6a:76:2b:fc:6e:5a:a4:0a:a5:
                    74:76:58:6c:4c:e5:80:ef:dd:04:df:69:25:f4:6c:
                    0e:d3:a3:ff:f8:47:cb:3e:94:92:05:6a:9b:95:ef:
                    da:f5:03:55:05:eb:9f:1c:48:33:1d:4d:c2:51:48:
                    be:76:3d:cc:ad:f1:f0:7d:20:6e:78:b0:27:d3:2c:
                    d4:e7:10:39:35:63:27:d2:47:7e:9d:0c:e1:06:f6:
                    14:ea:dc:6e:b5:23:ed:6f:76:c9:bc:da:2a:ce:ef:
                    7f:b2:d1:4e:73:6a:aa:4d:59:8e:b6:84:da:cc:9c:
                    4b:da:43:27:5e:d5:b2:58:c9:ce:13:58:7a:90:c4:
                    b0:84:1c:77:a4:a1:dd:6c:ed:dc:f2:47:c7:3c:09:
                    96:f5:e1:1f:0b:77:50:e5:57:03:bf:83:76:e2:f5:
                    84:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EC:00:08:68:39:24:80:42:4A:BC:A5:70:14:17:DD:5E:CD:46:63
            X509v3 Authority Key Identifier:
                keyid:81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/2fa60982ca3255c8439f579e806d74d12bf74d16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:2e:f1:1b:77:de:38:ce:07:92:73:28:d6:f7:5f:8e:e5:13:
         af:fc:19:2b:57:e2:47:c5:94:cd:d3:c3:7f:04:ff:3b:22:e9:
         d7:0d:68:c0:7b:1d:8f:31:1f:fe:74:a1:b7:ad:ad:ab:9a:44:
         aa:b5:b2:7a:d9:b9:37:ea:f1:bb:2e:5f:05:80:85:76:71:a5:
         a1:71:71:ec:73:ce:96:6d:30:90:a6:0a:79:e3:4a:4c:0b:93:
         0e:cb:61:06:c1:29:90:72:72:a5:f3:ad:81:35:03:6c:22:d4:
         10:61:87:97:d7:92:f1:da:64:3b:c4:5c:f8:91:1b:6c:0a:28:
         e8:07:67:c4:0f:0f:e1:26:87:0b:39:4e:a5:8b:67:6f:c1:b3:
         64:ee:2f:20:49:bc:66:c2:d0:ec:26:11:88:d1:94:df:97:91:
         26:f8:d1:ba:4b:fc:d2:fc:e1:ef:75:f3:ea:f9:c7:91:71:1d:
         2f:a2:95:3b:94:97:d6:ae:6b:2f:5f:3b:e5:67:c2:73:00:49:
         61:e4:cc:cb:94:11:c8:94:16:83:28:34:26:c8:9e:f0:56:c4:
         09:91:7a:32:a4:53:30:8a:84:85:cc:a9:74:8c:44:fb:71:b9:
         82:37:4e:3b:0d:00:52:2b:c7:ef:08:0d:3e:d6:9c:ce:02:b6:
         2d:5d:d3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----