Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/bb42e6c5769aa216d8909a8b5359409ca17bf4f3.roa
File:                     bb42e6c5769aa216d8909a8b5359409ca17bf4f3.roa (raw, json)
Hash identifier:          Gvwhenxu09pjuvCIuElbiGNtGONIVc5/HNrUpUeFP0A=
Subject key identifier:   92:29:2C:FF:78:77:71:5F:31:6B:74:54:ED:FD:4D:A0:5A:77:B9:DF
Certificate issuer:       /CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
Certificate serial:       2302
Authority key identifier: D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/bb42e6c5769aa216d8909a8b5359409ca17bf4f3.roa
Signing time:             Wed 21 Sep 2022 20:53:35 +0000
ROA not before:           Wed 21 Sep 2022 20:52:04 +0000
ROA not after:            Sat 21 Sep 2024 20:52:04 +0000
asID:                     8163
IP address blocks:        201.220.66.0/24 maxlen: 24
                          201.220.67.0/24 maxlen: 24
                          201.220.68.0/24 maxlen: 24
                          201.220.70.0/24 maxlen: 24
                          201.220.71.0/24 maxlen: 24
                          201.220.72.0/24 maxlen: 24
                          201.220.74.0/24 maxlen: 24
                          201.220.75.0/24 maxlen: 24
                          201.220.77.0/24 maxlen: 24
                          201.220.78.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8962 (0x2302)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
        Validity
            Not Before: Sep 21 20:52:04 2022 GMT
            Not After : Sep 21 20:52:04 2024 GMT
        Subject: CN=bb42e6c5769aa216d8909a8b5359409ca17bf4f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b1:cf:5b:2a:3c:22:ea:c4:a4:6c:34:03:26:
                    05:a5:28:a9:3f:a5:52:03:6d:04:34:43:e1:a4:38:
                    15:ba:52:46:01:63:6e:e2:b0:a2:5a:26:89:14:c6:
                    bd:d5:f6:7d:bf:69:d9:5c:b9:82:05:ac:87:d6:74:
                    fb:9f:36:09:28:38:67:88:65:27:cf:2e:20:de:c4:
                    8e:34:8e:66:b8:0e:33:bf:70:1e:03:81:7b:5a:23:
                    fe:b6:ce:ec:48:24:e8:21:38:f9:fe:22:0b:2d:41:
                    58:cb:3f:46:a7:ae:ea:d7:03:83:13:05:19:10:d4:
                    9b:6a:55:4d:81:5b:56:c0:b0:3b:2f:f3:fc:1e:fc:
                    59:5c:e2:57:1d:7b:9d:85:0f:8b:4f:b5:1b:75:20:
                    91:b2:37:72:ec:89:0a:3f:c8:d7:3a:e5:53:de:95:
                    11:b6:e2:7c:8f:a2:9d:aa:4a:20:e0:d6:b7:11:69:
                    bc:b5:ec:99:98:ec:4f:16:8b:16:19:0d:4a:d5:d5:
                    4e:23:fc:30:f5:c2:2d:6f:20:b4:b6:d5:42:f4:f4:
                    5f:a6:6e:aa:5d:d8:31:c1:fc:21:d1:2c:4c:b0:0e:
                    47:b2:95:fb:c1:7d:eb:00:ce:05:6b:ef:2a:a1:51:
                    d5:90:2b:55:35:4e:a5:4b:0f:ca:19:3c:0d:4d:3e:
                    b9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:29:2C:FF:78:77:71:5F:31:6B:74:54:ED:FD:4D:A0:5A:77:B9:DF
            X509v3 Authority Key Identifier:
                keyid:D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/bb42e6c5769aa216d8909a8b5359409ca17bf4f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.66.0-201.220.68.255
                  201.220.70.0-201.220.72.255
                  201.220.74.0/23
                  201.220.77.0-201.220.78.255

    Signature Algorithm: sha256WithRSAEncryption
         a4:0b:8a:7b:c3:7c:9d:45:9a:ac:28:6a:bf:e3:45:32:16:e6:
         2c:9b:3d:19:9f:87:2a:6c:d7:37:bb:26:60:b5:65:b1:fa:e0:
         c6:7a:be:76:15:c1:68:57:d7:94:d7:77:5e:3d:57:d5:bb:3d:
         65:fd:5c:01:fd:0d:27:8e:d0:ec:db:36:23:5e:a3:41:3d:db:
         36:c1:cd:24:bf:5a:d2:60:95:8f:5a:75:35:ea:d6:45:96:ba:
         5b:dc:f2:da:27:09:1c:bb:52:60:89:8c:65:c4:74:71:d6:b0:
         db:46:a9:a1:df:7a:6b:96:01:b6:6f:7f:2d:3f:fa:7e:d5:7e:
         98:20:a5:87:ed:27:01:64:e2:13:79:9b:fa:68:34:d1:a5:b3:
         92:76:55:3e:4a:06:72:68:d3:74:bd:0b:44:16:ed:2f:32:66:
         91:d1:76:33:e5:08:fc:05:11:58:44:7b:d2:9a:92:0e:68:50:
         fd:91:b7:d3:17:fb:2e:d4:ba:6c:18:a1:61:37:ec:2a:f2:21:
         f0:28:71:f2:91:23:81:39:3a:48:62:30:72:2d:e4:b2:92:a6:
         01:d8:d0:21:65:f2:05:db:45:1e:8b:22:40:ca:fb:47:35:66:
         e6:9d:18:dd:60:aa:64:03:9b:ab:e4:e6:c2:18:26:a2:66:09:
         15:11:72:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----