Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/998d746f-7f8c-4863-9ba3-2c18a1be8990/073c28736ce88f68ed7e0e31b656bf6efda2ab4d.roa
File:                     073c28736ce88f68ed7e0e31b656bf6efda2ab4d.roa (raw, json)
Hash identifier:          BzTkAR1Oem0Pw63g8aLsq9Gn8x3FUYolCg+Ux2z7P/A=
Subject key identifier:   27:9B:62:25:C0:5C:10:F9:9C:A9:2B:83:78:5D:60:B2:6F:F0:25:10
Certificate issuer:       /CN=bfa311fa695991c4b5507c099d6fea84b510979a
Certificate serial:       028448
Authority key identifier: B0:CF:F0:34:30:A9:65:96:A9:33:18:FF:D7:FE:EE:CD:8F:4A:ED:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfa311fa695991c4b5507c099d6fea84b510979a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/998d746f-7f8c-4863-9ba3-2c18a1be8990/073c28736ce88f68ed7e0e31b656bf6efda2ab4d.roa
Signing time:             Fri 28 Jul 2023 19:58:21 +0000
ROA not before:           Thu 27 Jul 2023 19:58:20 +0000
ROA not after:            Mon 28 Jul 2025 19:58:20 +0000
asID:                     272099
IP address blocks:        181.233.100.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164936 (0x28448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfa311fa695991c4b5507c099d6fea84b510979a
        Validity
            Not Before: Jul 27 19:58:20 2023 GMT
            Not After : Jul 28 19:58:20 2025 GMT
        Subject: CN=073c28736ce88f68ed7e0e31b656bf6efda2ab4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f3:11:e5:dd:83:d4:2c:b0:c3:db:4b:8d:b4:
                    24:0c:ae:99:9d:9f:de:7d:b4:c7:80:0c:96:2f:af:
                    93:bc:54:c0:77:96:aa:a2:d4:46:d3:06:12:86:4f:
                    00:5f:80:77:9b:21:39:f6:13:f1:ee:01:e3:a3:2b:
                    87:63:2b:79:61:1a:4d:ae:ca:a8:43:72:a1:76:07:
                    fb:0a:91:48:e7:0f:5d:d1:78:79:29:d5:cc:37:ae:
                    b3:17:ec:f8:23:f0:e1:33:1b:33:37:36:d6:cb:02:
                    5e:11:bf:62:7a:4d:03:37:18:a2:47:b9:99:4d:12:
                    23:ac:04:93:80:e8:9e:ba:74:e7:79:f7:6a:62:22:
                    32:99:1c:96:1f:2f:9b:c8:30:bf:31:e7:56:7c:a6:
                    26:e1:9d:55:91:68:dd:04:02:ea:8c:7e:a9:b8:3a:
                    ad:56:c5:9c:25:a8:00:90:07:a5:ed:15:36:85:52:
                    d6:83:0f:a6:38:79:1d:34:02:d4:c3:d5:81:9b:4e:
                    fd:bf:f6:fd:0a:8c:3b:d6:48:5e:a0:69:8b:3c:3c:
                    90:1e:37:fe:ac:9f:84:b9:e8:8b:fd:96:ca:16:63:
                    6a:85:1d:7f:50:58:4c:82:dd:a4:c6:13:92:58:77:
                    0a:ad:61:6c:2c:21:e5:29:7f:50:a0:44:ec:39:0f:
                    a5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9B:62:25:C0:5C:10:F9:9C:A9:2B:83:78:5D:60:B2:6F:F0:25:10
            X509v3 Authority Key Identifier:
                keyid:B0:CF:F0:34:30:A9:65:96:A9:33:18:FF:D7:FE:EE:CD:8F:4A:ED:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfa311fa695991c4b5507c099d6fea84b510979a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/998d746f-7f8c-4863-9ba3-2c18a1be8990/073c28736ce88f68ed7e0e31b656bf6efda2ab4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/998d746f-7f8c-4863-9ba3-2c18a1be8990/bfa311fa695991c4b5507c099d6fea84b510979a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:25:1e:d6:c2:71:09:07:5c:ca:a8:e2:74:9d:d1:1a:24:40:
         a4:45:11:23:e1:15:61:89:8f:b7:8f:9d:c4:03:32:ca:bc:1a:
         91:0a:81:15:ea:5e:ea:29:cb:23:4d:e6:40:39:14:10:d1:69:
         b6:63:be:28:75:6a:ff:ee:ec:1f:84:d6:fb:91:1c:07:2b:6f:
         a7:fa:10:ae:57:ed:fc:cb:77:7f:d0:e3:de:ab:38:89:6a:5f:
         b5:cf:c5:0b:53:82:64:f1:6f:ed:39:84:d6:3c:e5:e9:1e:07:
         a8:03:88:64:6c:fc:f4:47:eb:8c:59:85:bd:22:8d:b1:35:2b:
         ee:16:b1:4a:74:f8:f7:14:ef:fe:1a:5c:f0:45:9d:a9:ed:a6:
         76:8d:0f:5f:c6:f5:6f:db:a1:3f:5f:ce:eb:83:5d:73:7a:77:
         01:75:d9:fa:34:99:cf:c3:96:12:36:96:b5:bf:3a:87:45:c0:
         6f:6d:f7:ff:e6:cc:af:bf:ae:64:6f:48:50:22:71:f2:f2:7c:
         ac:9f:bb:e8:53:00:63:10:5a:ca:05:ad:62:db:cd:f3:e7:e8:
         d3:48:b3:40:25:2f:a7:0d:24:1e:a4:1c:18:8d:b6:fc:78:06:
         76:e2:ac:f1:c8:0a:8f:87:e8:47:27:ac:7e:1d:1e:b8:15:f5:
         5b:06:50:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----