Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8648ad1a-3f4d-4485-8db2-529ee5624a21/7229f88d7053b67cdb545d95f18bd39d209f54ce.roa
File:                     7229f88d7053b67cdb545d95f18bd39d209f54ce.roa (raw, json)
Hash identifier:          u9azQGL6o4jr9o5kB1bR85x87OPzblzRmBxCfjW0Tfw=
Subject key identifier:   B2:09:21:99:4A:82:DC:07:0F:36:7D:82:FE:04:D3:8D:03:71:B8:40
Certificate issuer:       /CN=677e61affc2207b19cf569eaf59f1aa53af06efd
Certificate serial:       236F60
Authority key identifier: E2:B5:34:5A:B6:AB:EE:BA:07:CB:14:AB:54:F2:AD:0D:E3:E5:97:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/677e61affc2207b19cf569eaf59f1aa53af06efd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8648ad1a-3f4d-4485-8db2-529ee5624a21/7229f88d7053b67cdb545d95f18bd39d209f54ce.roa
Signing time:             Sun 15 Oct 2023 01:01:47 +0000
ROA not before:           Sat 14 Oct 2023 01:01:47 +0000
ROA not after:            Wed 15 Oct 2025 01:01:47 +0000
asID:                     23031
IP address blocks:        207.248.114.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2322272 (0x236f60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677e61affc2207b19cf569eaf59f1aa53af06efd
        Validity
            Not Before: Oct 14 01:01:47 2023 GMT
            Not After : Oct 15 01:01:47 2025 GMT
        Subject: CN=7229f88d7053b67cdb545d95f18bd39d209f54ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e7:df:78:50:29:92:b0:44:ea:00:30:93:7e:
                    69:51:c6:f3:0c:5e:dd:58:88:63:e2:32:7a:3f:74:
                    cc:e3:5a:cd:aa:a7:6a:3a:d6:2d:07:69:8e:15:01:
                    1e:84:22:4f:8d:6e:84:3c:16:90:76:11:14:6d:b3:
                    a3:3e:55:3e:cc:5b:59:48:ca:73:ca:20:8d:28:05:
                    f4:d8:93:1e:a9:20:a6:78:b0:8c:65:b7:6c:c4:cb:
                    81:8c:42:d8:a7:4b:ec:e2:8d:a6:8d:74:c2:cd:eb:
                    4c:09:29:1c:81:6d:f8:54:65:2d:3a:6c:e0:56:3c:
                    db:92:6b:3e:03:bb:4d:20:a8:09:72:30:9f:9d:66:
                    9f:cb:d2:81:07:24:c8:ed:13:00:a7:50:af:14:a8:
                    a5:32:c9:c7:bb:7b:8a:76:63:3d:77:71:37:46:c5:
                    0d:2c:9e:27:d9:bf:58:e2:07:31:45:99:fe:f1:c8:
                    b0:b3:38:1d:ad:7d:e3:77:55:e4:41:f0:be:b8:a4:
                    97:90:1d:66:18:68:11:dd:ff:e8:b6:56:01:22:31:
                    d3:22:37:a6:fc:0f:15:ee:59:7b:ba:28:9a:f9:8c:
                    d7:e7:d3:bb:76:8e:0f:d3:10:b3:50:b8:ee:ce:84:
                    bf:9e:98:9c:30:47:50:c3:8f:91:9f:5f:9c:a0:01:
                    f9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:09:21:99:4A:82:DC:07:0F:36:7D:82:FE:04:D3:8D:03:71:B8:40
            X509v3 Authority Key Identifier:
                keyid:E2:B5:34:5A:B6:AB:EE:BA:07:CB:14:AB:54:F2:AD:0D:E3:E5:97:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/677e61affc2207b19cf569eaf59f1aa53af06efd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8648ad1a-3f4d-4485-8db2-529ee5624a21/7229f88d7053b67cdb545d95f18bd39d209f54ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8648ad1a-3f4d-4485-8db2-529ee5624a21/677e61affc2207b19cf569eaf59f1aa53af06efd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:2c:de:56:a7:17:9d:c2:2a:92:ca:3e:23:cd:6c:2b:27:02:
         87:e2:c0:61:1d:b2:92:c8:df:f7:96:7b:7e:f1:d1:97:c1:fb:
         ea:3c:9a:bb:da:bb:0a:7d:7c:bd:9c:23:8b:0c:90:c7:cb:ad:
         5c:98:0f:d2:f7:d1:5d:3d:e7:25:5b:2c:b4:c4:c2:b5:8f:b1:
         ae:53:6e:9f:31:bc:76:18:ec:10:93:7f:c7:02:0e:da:dd:10:
         f5:5e:50:90:94:81:95:1c:9a:02:dc:80:34:18:2b:fa:a3:c6:
         dc:81:aa:7e:7d:c5:1f:d6:b1:c8:23:36:67:3b:ea:a5:87:67:
         bd:80:3f:a9:cf:46:91:ed:c4:3c:c9:dc:69:b1:49:74:f6:84:
         63:10:9d:29:4e:2c:0f:89:2b:03:5e:c0:78:05:65:86:61:d8:
         c6:94:b7:6d:a4:91:40:b6:bf:84:5c:4c:a4:ea:8d:4b:67:13:
         82:b5:12:fc:29:fe:df:e8:98:d9:a3:99:9b:90:10:65:5a:29:
         48:ea:9b:14:06:2a:03:80:fc:fa:4b:e6:5a:61:6c:3d:8e:40:
         3f:6c:ba:83:78:73:43:85:2a:5f:4d:f2:2d:6d:87:3f:42:08:
         ec:b3:4c:0f:d4:29:9e:40:ae:92:8f:1e:a5:03:cc:15:09:1e:
         00:f9:65:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----