Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/78292dcc74b54c230652f6c46f59767b6a4e59fe.roa
File:                     78292dcc74b54c230652f6c46f59767b6a4e59fe.roa (raw, json)
Hash identifier:          g1bz7sTQdY776D73/ZASEhZQGM0G3CqbqZMva5AES6Y=
Subject key identifier:   40:79:7C:B0:97:60:0A:B8:E7:C5:8C:C7:9F:09:24:EC:49:9D:6A:DD
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       1B55E3
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/78292dcc74b54c230652f6c46f59767b6a4e59fe.roa
Signing time:             Tue 09 Aug 2022 08:16:17 +0000
ROA not before:           Tue 09 Aug 2022 08:06:11 +0000
ROA not after:            Fri 09 Aug 2024 08:06:11 +0000
asID:                     52323
IP address blocks:        181.16.206.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1791459 (0x1b55e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Aug  9 08:06:11 2022 GMT
            Not After : Aug  9 08:06:11 2024 GMT
        Subject: CN=78292dcc74b54c230652f6c46f59767b6a4e59fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:54:a1:60:5d:06:55:16:f5:7a:0f:54:c3:1e:
                    cc:98:48:71:b2:e7:d6:95:6b:6d:88:7f:9a:4c:8c:
                    23:9c:ea:9e:cc:8b:d6:15:5e:1e:c3:7b:f1:eb:45:
                    77:19:e7:d1:d3:fe:65:e3:3c:5c:73:89:b5:28:ae:
                    35:7a:0e:d6:6f:fc:71:fa:85:c2:e8:68:82:35:4f:
                    af:cd:92:03:e3:c8:e6:4e:9d:76:81:47:83:5c:5b:
                    b3:9c:42:06:e6:68:32:df:c5:4e:09:86:02:e7:fe:
                    51:a4:e5:89:db:a2:c0:2d:88:78:bd:1e:4d:32:29:
                    61:62:1c:81:77:81:78:86:b0:98:4c:3d:8a:b8:c6:
                    62:54:bc:b7:c3:7a:5c:43:08:7e:ee:eb:c5:93:65:
                    a4:14:07:e9:7d:3a:1e:b5:d0:a9:41:36:64:2a:d9:
                    77:aa:3f:4e:07:4c:d8:3e:0a:1a:e6:77:c7:a0:bb:
                    5f:1e:40:88:77:1a:5a:86:05:d7:49:f9:28:85:1b:
                    e3:5b:f1:3d:d5:e7:b2:19:a4:e0:58:31:33:ea:60:
                    29:a5:fa:16:03:dd:26:ab:6a:12:20:52:f6:b7:f6:
                    64:46:d4:92:d4:79:b7:f4:d5:2b:fa:72:1e:c4:e5:
                    e2:c9:23:93:16:ae:1b:c3:1c:1d:5f:1d:2c:30:e9:
                    70:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:79:7C:B0:97:60:0A:B8:E7:C5:8C:C7:9F:09:24:EC:49:9D:6A:DD
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/78292dcc74b54c230652f6c46f59767b6a4e59fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:72:94:5f:07:a6:ae:bd:7e:a5:3e:80:42:3f:02:a8:3a:a7:
         7e:ba:28:0c:e1:78:aa:1b:fa:03:e7:1a:6b:0d:23:c2:c4:6a:
         a1:09:b6:a3:63:2c:34:05:eb:43:c5:49:cf:a8:17:66:a2:03:
         8f:e7:1e:62:a0:9d:38:d5:32:bc:33:b6:a2:83:ff:a5:5b:62:
         76:96:8d:e8:ec:88:17:3c:e0:d2:4f:8f:ff:fb:0d:d0:c7:0a:
         a0:a0:96:d3:c6:a4:69:27:bf:42:ec:44:c2:52:64:78:c2:2a:
         7b:63:8a:d0:d8:a0:ea:ce:8e:35:4a:72:c2:fd:01:de:43:92:
         de:2e:48:db:ca:9d:db:36:ea:70:06:8e:ce:71:8e:2f:1a:70:
         e0:be:76:38:95:74:4d:bc:3d:2f:50:1a:f0:f2:47:15:ba:8c:
         db:40:8b:10:95:a8:ff:38:56:f2:5c:2f:cb:fe:70:65:5a:0a:
         0b:87:de:1e:ef:7a:7c:49:3e:4c:a9:6e:a5:46:9f:b0:b6:52:
         b8:d8:01:25:1a:1d:b9:b2:44:57:57:6c:f3:d2:9f:3d:41:d1:
         d2:41:2d:88:48:9c:e2:c5:20:36:80:3d:90:f2:19:a2:79:46:
         9a:31:7d:f4:a7:6d:a8:9e:e8:02:77:ae:c3:53:be:f1:3f:4a:
         e5:e1:3c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----