Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/9b4bf1f87c6ae6914eafc468f64562e6a3ce8bc2.roa
File:                     9b4bf1f87c6ae6914eafc468f64562e6a3ce8bc2.roa (raw, json)
Hash identifier:          7SBCR0YqjDzxanpXmZmdYRwMZnlibbMIg/x8Z1uZY9o=
Subject key identifier:   C0:6A:BA:C5:C6:03:F5:94:3E:31:85:4D:F5:37:C3:64:4F:9B:2D:FF
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       1AF4D3
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/9b4bf1f87c6ae6914eafc468f64562e6a3ce8bc2.roa
Signing time:             Mon 01 Aug 2022 16:28:07 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     52323
IP address blocks:        181.16.206.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1766611 (0x1af4d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=9b4bf1f87c6ae6914eafc468f64562e6a3ce8bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:db:3a:48:b7:bf:b1:66:84:4d:1b:65:41:fc:
                    95:9b:39:fe:9d:66:f8:ae:cd:4a:10:b6:93:05:b3:
                    04:09:b4:12:1e:83:9b:60:7d:40:7b:49:cf:32:b2:
                    fe:bc:07:1b:36:ff:5d:92:a0:b0:6e:96:83:ad:87:
                    49:d6:8f:38:21:3a:41:a8:36:b6:92:a3:08:48:23:
                    2a:66:b3:35:ae:3c:48:8c:39:e6:63:8f:0b:d2:35:
                    f5:d9:44:70:e7:fe:8d:16:c7:34:6b:8c:05:ca:eb:
                    42:32:ab:56:45:53:30:11:ea:47:b5:60:e5:eb:68:
                    a2:11:13:f4:2d:0d:52:ec:ce:b3:05:ff:61:f3:68:
                    23:46:20:c8:ea:7f:7b:83:88:28:c9:12:2d:05:45:
                    78:6c:3e:c2:2c:d5:53:9d:ee:27:c8:59:fa:8e:be:
                    0e:9b:b0:4e:20:48:e4:0f:bc:17:9e:9a:d5:2c:42:
                    4c:62:92:e2:a3:7d:f8:2c:a9:b2:00:e8:97:2e:b9:
                    3b:09:8c:e0:55:76:8c:ea:1e:98:13:95:07:2d:0b:
                    ea:db:fe:4c:98:b6:2a:f1:0d:d8:21:11:2d:7c:b2:
                    6e:83:85:07:46:6b:07:c6:8b:b6:41:c0:1e:18:7d:
                    19:47:66:a7:f2:3d:4d:9c:99:f3:7e:4d:3c:a3:b4:
                    e4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6A:BA:C5:C6:03:F5:94:3E:31:85:4D:F5:37:C3:64:4F:9B:2D:FF
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/9b4bf1f87c6ae6914eafc468f64562e6a3ce8bc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:f5:41:fc:e5:a8:f1:ba:8b:a0:1d:7d:ae:b6:f9:e2:ed:f6:
         cc:bb:74:3b:c9:b6:b7:5f:95:46:0f:db:79:40:a7:5c:42:14:
         b6:68:df:89:4f:62:ba:b0:b9:19:07:df:32:d3:45:c3:2b:32:
         c6:01:2e:29:41:d6:b0:e2:9e:7e:8c:5d:7d:4c:0b:3a:32:21:
         c7:66:29:15:14:c6:2a:d8:71:95:95:51:91:1e:60:d6:9e:c7:
         53:36:89:73:48:72:77:19:ea:b2:12:ce:30:52:15:b6:35:25:
         72:c5:1a:c5:cf:1c:2b:33:11:9c:3c:5b:d8:15:a3:92:72:59:
         d3:62:14:95:4b:8f:f0:dc:ce:35:a6:73:b1:38:b8:9f:d8:7d:
         33:05:94:f4:33:df:f7:76:8b:ba:bc:ee:d3:e9:b6:d0:37:a3:
         4d:94:55:71:b1:7b:a4:36:d4:b9:76:55:d8:52:fd:e8:ef:67:
         e2:45:c6:bd:89:ef:8c:53:2a:bd:5b:5a:60:cc:f8:cd:52:63:
         21:8d:f4:15:54:8f:5a:c9:74:eb:a9:29:0c:fa:f8:6f:7b:29:
         ab:7c:21:52:34:70:e2:bb:08:64:49:04:57:46:62:3c:00:65:
         08:bb:25:a7:53:80:30:7f:e4:75:60:df:d9:dc:ad:8f:10:b2:
         aa:11:68:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----