Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/b0d2ee6f9a857b11fe472e7701a97db749f8ceba.roa
File:                     b0d2ee6f9a857b11fe472e7701a97db749f8ceba.roa (raw, json)
Hash identifier:          Jgkxbg7M8K7UZpocdeM07gkYcffBR27slENy6cIjdyE=
Subject key identifier:   91:A1:4A:A6:C6:E8:ED:53:B4:A0:7E:67:C0:9F:EE:A1:64:84:84:09
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       231293
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/b0d2ee6f9a857b11fe472e7701a97db749f8ceba.roa
Signing time:             Fri 28 Apr 2023 17:49:49 +0000
ROA not before:           Thu 27 Apr 2023 17:49:49 +0000
ROA not after:            Mon 28 Apr 2025 17:49:49 +0000
asID:                     269752
IP address blocks:        181.16.170.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2298515 (0x231293)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Apr 27 17:49:49 2023 GMT
            Not After : Apr 28 17:49:49 2025 GMT
        Subject: CN=b0d2ee6f9a857b11fe472e7701a97db749f8ceba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:68:4e:d5:65:82:57:5b:91:5b:2b:5e:fa:2b:
                    ca:83:3f:15:4c:b5:24:4e:b7:5d:71:f2:49:6d:51:
                    82:4b:f1:27:f4:60:e5:02:46:fa:b2:8e:81:cf:94:
                    ed:81:47:42:57:68:a8:f2:2c:6d:92:32:09:82:bd:
                    bd:99:42:0c:60:ad:8f:33:5a:a7:e9:75:83:f9:c8:
                    d3:0b:12:64:95:3e:cc:ec:16:65:ce:ce:48:11:a2:
                    49:dc:47:7a:5d:1c:75:e6:c0:ef:37:a1:a0:24:47:
                    48:1d:95:5a:bb:37:66:90:11:44:ff:35:9f:5c:3d:
                    d6:29:94:80:47:86:ee:0f:6a:6c:c1:e4:25:46:f8:
                    96:b8:e5:8e:95:88:8f:91:d2:e0:e5:9b:91:65:92:
                    76:7e:fd:93:b4:75:23:80:f7:a6:bc:14:fb:c9:7b:
                    cc:22:c7:75:41:bc:cf:24:5e:8a:b3:29:0f:6e:40:
                    01:8c:3c:5e:f4:54:03:67:2c:8e:ce:7e:cd:2b:85:
                    20:87:3d:05:27:01:55:25:be:e0:d5:59:6b:5f:7f:
                    08:c9:51:b7:5e:eb:d6:c1:21:5a:86:6a:bd:7f:1c:
                    b1:69:c2:4f:6c:9c:7a:ef:2b:7a:d3:77:35:f7:25:
                    bb:34:39:24:ac:12:5c:1e:bf:56:ee:78:bc:df:45:
                    f5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A1:4A:A6:C6:E8:ED:53:B4:A0:7E:67:C0:9F:EE:A1:64:84:84:09
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/b0d2ee6f9a857b11fe472e7701a97db749f8ceba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:57:20:72:bc:08:f1:79:ba:ef:bf:bd:8f:c9:49:45:fb:a1:
         8e:da:27:33:29:6c:ed:be:28:f6:24:90:8e:7b:95:7c:ce:e7:
         02:fe:b1:6d:53:8c:bd:ca:5a:17:6f:63:20:7b:da:13:70:b4:
         8d:f6:c3:6c:10:c1:b4:4f:e8:7c:84:b4:20:a2:5f:e1:9a:11:
         6e:42:d3:4e:a9:91:7e:0a:4e:aa:b1:14:76:0e:2b:2e:86:9e:
         85:74:31:a6:0d:ed:b5:7d:8d:31:9a:a0:b3:63:6b:d3:a5:ee:
         bc:31:17:09:5c:5b:8d:c2:bc:3e:8a:1c:34:f6:82:24:b4:cc:
         3b:46:fb:5a:d3:ae:c6:03:43:9a:c9:62:6b:8c:c3:d5:ea:90:
         88:a9:26:3a:83:31:ea:1b:f3:dc:ec:e6:a8:8f:38:39:33:f7:
         b1:62:ed:8c:ff:6d:f9:56:ae:f8:77:c6:e5:76:9e:35:7a:d8:
         2d:97:27:f9:9d:33:f2:22:62:cf:5e:09:1c:e9:f7:c4:8c:b1:
         f1:e5:9e:95:23:02:83:91:24:2e:89:f6:40:61:af:02:49:f4:
         93:61:6c:dd:3c:56:e8:44:ac:a3:50:85:cd:82:ae:a9:b2:fc:
         36:5a:a8:82:13:e6:17:e8:6d:45:db:73:c8:39:eb:38:5b:6f:
         cc:07:25:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----