Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96347ee9-813e-49b3-9936-d5858a555f0a/383c28b12a05dd24dc22ebbf9904a062fd0e0e7b.roa
File:                     383c28b12a05dd24dc22ebbf9904a062fd0e0e7b.roa (raw, json)
Hash identifier:          oplCLyddljcDCiA7xVX3kwdn51x60jg8C0JfQKJsye4=
Subject key identifier:   46:04:51:D6:47:B0:F3:65:FB:50:C0:56:1A:70:A4:7E:55:B8:FF:CF
Certificate issuer:       /CN=9fec437d32aba48264306d179703acc9a82f83bf
Certificate serial:       1D8BE8
Authority key identifier: F5:9C:4E:7B:E4:22:40:A1:FC:48:47:88:B5:A5:DE:FC:97:12:D4:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fec437d32aba48264306d179703acc9a82f83bf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/96347ee9-813e-49b3-9936-d5858a555f0a/383c28b12a05dd24dc22ebbf9904a062fd0e0e7b.roa
Signing time:             Fri 13 Jan 2023 11:52:21 +0000
ROA not before:           Mon 22 Mar 2021 14:30:09 +0000
ROA not after:            Tue 24 Mar 2026 14:30:09 +0000
asID:                     52491
IP address blocks:        179.60.208.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1936360 (0x1d8be8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fec437d32aba48264306d179703acc9a82f83bf
        Validity
            Not Before: Mar 22 14:30:09 2021 GMT
            Not After : Mar 24 14:30:09 2026 GMT
        Subject: CN=383c28b12a05dd24dc22ebbf9904a062fd0e0e7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d4:9e:5f:45:ca:e5:db:37:99:86:bd:5e:64:
                    12:84:f0:ae:5f:c4:e5:55:e2:dc:0a:81:e0:a0:a4:
                    ef:2e:40:16:2c:4d:28:c3:0b:13:69:78:74:3c:08:
                    ed:5d:c0:e8:58:0b:ad:e4:1b:44:8f:17:22:28:d5:
                    ba:b7:85:68:a4:f4:9d:60:ed:84:45:91:e2:a9:23:
                    75:c5:26:7a:c2:eb:21:3e:b9:43:b5:66:5f:48:33:
                    ce:6f:5c:82:30:b7:d7:9a:b6:b0:44:a9:c9:9a:76:
                    c5:a9:fb:89:b7:b8:1b:02:6e:dd:27:b4:2c:96:85:
                    7e:94:e0:9d:60:5f:55:6e:41:17:5f:80:5c:48:22:
                    9d:fd:89:46:75:9c:22:d3:57:69:d1:bf:a2:e8:53:
                    d3:e2:8d:a5:72:69:26:2b:53:96:8a:5b:11:e2:b7:
                    fb:28:79:15:ef:64:a7:59:c8:af:ec:a1:86:0d:94:
                    79:35:b6:63:67:6f:d1:a2:3b:a7:3d:f4:63:98:ba:
                    0b:f2:8e:99:59:f9:e2:67:38:1f:13:ce:f5:7c:8f:
                    cb:8f:d3:7c:f3:3d:d4:74:cc:c7:91:0d:9f:9e:2b:
                    b5:4d:e7:43:4b:be:db:50:38:e3:22:7a:d3:8d:a8:
                    d9:97:ac:73:c4:32:e1:e7:51:9d:84:82:3d:48:3b:
                    f4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:04:51:D6:47:B0:F3:65:FB:50:C0:56:1A:70:A4:7E:55:B8:FF:CF
            X509v3 Authority Key Identifier:
                keyid:F5:9C:4E:7B:E4:22:40:A1:FC:48:47:88:B5:A5:DE:FC:97:12:D4:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fec437d32aba48264306d179703acc9a82f83bf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96347ee9-813e-49b3-9936-d5858a555f0a/383c28b12a05dd24dc22ebbf9904a062fd0e0e7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/96347ee9-813e-49b3-9936-d5858a555f0a/9fec437d32aba48264306d179703acc9a82f83bf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:e3:26:e6:88:8c:35:6b:09:38:5a:8a:2c:d7:5c:da:a1:0b:
         01:9d:19:39:25:7b:fa:0a:95:a0:37:20:9c:f7:4d:65:5f:6c:
         05:3e:ee:d9:e1:8f:e0:75:d4:03:d2:c5:c3:99:bd:42:9b:04:
         ff:44:0c:94:53:73:64:a3:aa:81:b0:26:b4:fa:f0:cd:2c:b8:
         70:02:cf:36:d6:29:47:6a:d3:77:04:b3:65:39:41:22:35:03:
         19:4f:d8:0c:03:59:38:1a:7c:34:cd:56:d2:82:9f:5e:ea:e5:
         58:73:c4:ff:e2:be:43:7d:77:b5:63:46:1f:4d:8e:f4:ed:e8:
         1a:f1:15:ee:ff:c4:41:ae:c4:c3:fb:7b:90:1b:9a:da:a3:8f:
         6e:00:cb:ea:0b:0b:e9:25:2a:70:e5:e1:5a:42:f3:ef:d7:a4:
         f1:f7:be:21:50:8c:7b:4d:25:ec:22:a1:0c:ba:b5:76:bd:76:
         9c:c1:85:14:11:29:5f:b7:d5:2e:5f:04:cc:f5:46:bf:cc:ac:
         5d:59:a6:e3:c9:55:03:da:47:a3:03:30:10:7c:d1:f2:24:f3:
         a5:88:a2:01:36:2d:d5:0c:df:5d:54:e6:0a:d1:ed:12:aa:5f:
         ed:fe:2f:27:72:b5:4f:69:83:94:3d:67:a1:7a:b0:03:21:a4:
         45:f4:ba:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----