Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/3f7c4bfafe2163ac7b5dfe4d4b17b1ed4bdbc9b6.roa
File:                     3f7c4bfafe2163ac7b5dfe4d4b17b1ed4bdbc9b6.roa (raw, json)
Hash identifier:          HHP0MqOmKtc6ja6Oak6vRqYpuc2CrcAkXH9i4rwYAR0=
Subject key identifier:   DC:75:BA:3A:9E:A9:28:F1:E5:F2:5C:F8:2E:EA:62:F8:B1:9C:D2:1C
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       1B4DB3
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/3f7c4bfafe2163ac7b5dfe4d4b17b1ed4bdbc9b6.roa
Signing time:             Tue 09 Aug 2022 08:05:53 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     52323
IP address blocks:        181.16.207.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1789363 (0x1b4db3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=3f7c4bfafe2163ac7b5dfe4d4b17b1ed4bdbc9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:69:16:ef:03:89:da:a6:15:b8:74:7d:02:2a:
                    6d:c5:b3:ac:67:03:05:ea:15:c9:61:b1:88:e8:d9:
                    e6:12:87:4a:fa:37:cd:ed:cd:56:ec:f4:70:e0:c9:
                    bb:e3:b7:cf:0b:9d:df:67:ab:56:34:a9:15:7f:e6:
                    97:bc:da:f8:9a:41:03:a5:69:be:59:75:7d:97:2c:
                    5d:30:0e:75:19:59:71:63:2c:aa:66:c7:9a:09:42:
                    3e:ab:21:a8:a2:b9:c1:0c:27:f2:61:60:ed:41:96:
                    10:77:8f:16:fe:f7:94:2b:b2:75:c6:18:4d:c6:ce:
                    35:7e:bd:33:a4:25:5e:70:f2:8e:90:f6:08:66:54:
                    a9:91:bd:22:0d:32:c9:ae:2d:b1:93:dd:e0:2e:a0:
                    37:7d:7f:60:70:38:28:f6:8f:cf:e3:d9:eb:1a:7a:
                    2c:9f:13:99:d1:40:d4:66:2d:e0:ee:80:e1:8e:0d:
                    e2:ff:9d:c6:6e:6e:ed:39:1f:d9:58:93:c4:0e:83:
                    e3:c6:70:7e:92:a2:13:5b:93:b2:c9:19:e0:16:5c:
                    4c:e9:61:13:18:5d:50:73:6b:d3:4e:38:da:5c:4c:
                    a2:ea:56:10:7b:a5:ef:23:69:5a:c0:23:dc:95:e1:
                    5b:53:a7:06:b1:90:fe:54:84:08:99:c4:e8:e8:02:
                    52:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:75:BA:3A:9E:A9:28:F1:E5:F2:5C:F8:2E:EA:62:F8:B1:9C:D2:1C
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/3f7c4bfafe2163ac7b5dfe4d4b17b1ed4bdbc9b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:0f:c2:ce:f2:28:b6:c3:66:ed:08:33:ca:fd:37:2a:e7:08:
         15:b2:55:af:85:2a:22:87:52:e0:2f:a3:25:84:80:98:b5:27:
         e1:1f:5c:95:49:27:7e:2a:ea:40:1b:9b:b1:8d:e3:3b:9d:4b:
         84:01:2b:3a:25:7a:33:40:cf:35:36:11:21:f1:95:d6:f4:2c:
         f8:7e:a0:58:34:35:5b:9a:13:95:c6:05:e2:4a:e0:ad:2a:d6:
         d8:86:69:c4:62:82:27:fd:27:68:f9:83:4c:ea:a6:31:d4:b9:
         1b:46:31:da:2e:7f:5b:5a:1f:0a:f3:9c:c5:05:d1:a8:84:a3:
         6b:c6:e4:05:8b:f4:f5:b7:60:bb:cd:73:48:32:27:36:e4:ba:
         6f:67:aa:d0:b6:7b:8a:26:6e:55:9e:93:43:e8:52:ae:fe:9a:
         6f:7c:1d:c9:83:27:81:24:93:dd:d3:fc:ee:6d:90:2d:69:c1:
         4b:47:17:f6:96:43:ac:7e:54:87:50:41:92:b0:15:d9:a1:33:
         14:07:75:20:3e:39:65:ac:1c:f2:ac:da:14:a3:f3:d9:5c:71:
         74:a4:c1:fd:45:f0:14:95:a4:be:6d:78:80:37:d1:27:d1:c5:
         86:b1:c4:bc:b8:14:f5:bc:e2:07:db:5a:f1:08:8f:bf:45:77:
         97:a3:bf:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----