Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/b803cb76cd1a78a7b145c60845f4b1ff5ae6dd87.roa
File:                     b803cb76cd1a78a7b145c60845f4b1ff5ae6dd87.roa (raw, json)
Hash identifier:          n0TKv2V15QqrmJ44t6jFP6J5eKnySq9asClwP0M620o=
Subject key identifier:   75:06:15:3E:95:EB:89:F5:40:11:79:72:48:0B:05:B2:39:BF:83:6C
Certificate issuer:       /CN=1b429c72865e191f13438ce54026b95b47e06113
Certificate serial:       33CB
Authority key identifier: 62:58:9B:CF:97:B8:14:9A:7C:D4:6C:7D:9A:64:67:27:1B:59:EF:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b429c72865e191f13438ce54026b95b47e06113.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/b803cb76cd1a78a7b145c60845f4b1ff5ae6dd87.roa
Signing time:             Sat 15 Oct 2022 07:06:38 +0000
ROA not before:           Mon 10 Oct 2022 14:19:50 +0000
ROA not after:            Fri 11 Oct 2024 14:19:50 +0000
asID:                     28415
IP address blocks:        189.201.224.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13259 (0x33cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b429c72865e191f13438ce54026b95b47e06113
        Validity
            Not Before: Oct 10 14:19:50 2022 GMT
            Not After : Oct 11 14:19:50 2024 GMT
        Subject: CN=b803cb76cd1a78a7b145c60845f4b1ff5ae6dd87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bf:47:99:f3:53:f8:3c:02:63:4e:4d:d3:1f:
                    59:77:25:63:f7:02:e8:6f:c7:50:87:55:59:a5:93:
                    95:be:25:da:c6:86:48:b7:1c:a0:d7:b3:d1:1c:78:
                    6b:bb:96:fa:32:83:9c:6f:1b:7d:51:ac:63:65:bb:
                    e2:2a:f1:de:b3:fe:93:c2:d4:2b:27:91:24:6e:6d:
                    9d:76:f1:f2:e8:d3:60:48:9e:6c:cb:be:3c:a9:ff:
                    b2:d4:77:fa:7d:fc:12:3d:89:a4:50:69:d7:e5:15:
                    8e:6c:7b:25:43:f2:0f:93:58:fd:ec:e2:40:70:61:
                    02:c9:60:09:11:46:b2:02:1a:6b:c2:f5:e4:50:da:
                    5b:43:df:70:a2:62:c6:ab:3e:80:9e:ea:6d:d0:de:
                    dd:4b:f5:b4:c7:09:23:32:50:94:cd:76:0d:cb:38:
                    d1:51:de:ff:7a:b1:02:f6:b1:d3:48:15:23:fe:2f:
                    87:ae:1a:99:9d:d9:1a:d5:6b:24:ae:46:19:84:15:
                    ab:b0:b6:af:66:d0:57:b6:5b:9d:6f:e2:59:3d:24:
                    d9:1c:e8:0b:7c:e2:2b:2e:5b:16:98:cc:0f:66:e8:
                    01:e5:a9:7e:a6:2b:b6:10:8c:7f:79:2c:8c:cb:cd:
                    17:0e:a0:47:04:c4:cb:6f:79:38:09:a5:9a:aa:07:
                    64:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:06:15:3E:95:EB:89:F5:40:11:79:72:48:0B:05:B2:39:BF:83:6C
            X509v3 Authority Key Identifier:
                keyid:62:58:9B:CF:97:B8:14:9A:7C:D4:6C:7D:9A:64:67:27:1B:59:EF:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b429c72865e191f13438ce54026b95b47e06113.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/b803cb76cd1a78a7b145c60845f4b1ff5ae6dd87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/1b429c72865e191f13438ce54026b95b47e06113.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.201.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:ce:2a:96:97:2b:ca:34:fa:b2:10:15:70:29:8d:ec:3f:4f:
         50:4f:aa:e4:33:b1:fa:10:b1:47:9c:d5:4b:22:1c:73:ab:07:
         b0:ed:4f:37:2d:b5:a0:f4:f1:a7:0f:ea:c8:2d:13:9e:aa:29:
         87:76:56:58:1b:2d:48:ed:b6:39:73:0c:b8:d1:49:d2:47:6f:
         5e:fd:19:16:9e:04:d4:af:02:c4:6c:17:b4:ef:2c:0f:76:dd:
         42:e7:e2:6b:d5:1d:2d:52:28:38:9a:3d:19:87:28:f6:39:43:
         94:06:53:3f:79:a6:52:0a:e4:b3:85:3c:67:63:12:7c:ee:fa:
         8b:2c:35:bf:a3:02:91:09:b7:63:22:41:02:1e:5f:1b:a9:c3:
         38:f6:eb:2b:92:d3:e0:8b:60:94:0f:5f:5c:cf:cc:31:b8:f3:
         a1:0b:e0:fb:20:1b:77:d9:a1:8a:32:db:c6:97:09:3b:89:68:
         d8:d2:1e:7b:d1:cb:29:2a:f3:ca:b6:aa:68:4a:ff:a2:ca:a8:
         3b:c6:d3:a9:9c:d8:41:1c:41:85:e7:07:51:69:78:d5:7e:38:
         cd:bf:e2:0b:55:7f:05:46:b8:91:a0:45:57:6a:b0:1b:17:c4:
         f1:09:db:df:10:0b:50:e2:dd:dd:8c:bc:d5:9b:ed:3f:75:e2:
         cd:83:00:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----