Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/38e59f7ed898309e564e97aa8c3dee179ec9b737.roa
File:                     38e59f7ed898309e564e97aa8c3dee179ec9b737.roa (raw, json)
Hash identifier:          ombQXB9gwqZPlTUPxiE/xirdJMheIYKDxayiQ2tNZJQ=
Subject key identifier:   47:CB:A7:23:3E:8B:5B:DF:D4:57:8B:92:2D:7F:B2:13:E3:DC:A7:D4
Certificate issuer:       /CN=600a05248a907def76410027882b2f4a8085c07a
Certificate serial:       21B746
Authority key identifier: BC:3B:FF:4B:5D:A8:0B:F5:44:27:AE:25:A5:40:BB:0C:11:7C:D2:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/600a05248a907def76410027882b2f4a8085c07a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/38e59f7ed898309e564e97aa8c3dee179ec9b737.roa
Signing time:             Wed 19 Jul 2023 16:21:48 +0000
ROA not before:           Tue 18 Jul 2023 16:21:47 +0000
ROA not after:            Sat 19 Jul 2025 16:21:47 +0000
asID:                     27831
IP address blocks:        181.68.0.0/14 maxlen: 14

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2209606 (0x21b746)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600a05248a907def76410027882b2f4a8085c07a
        Validity
            Not Before: Jul 18 16:21:47 2023 GMT
            Not After : Jul 19 16:21:47 2025 GMT
        Subject: CN=38e59f7ed898309e564e97aa8c3dee179ec9b737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:75:77:84:e6:8b:e4:b0:75:a6:d5:bb:06:85:
                    4b:4c:47:22:df:e5:4f:74:bd:ed:53:66:e4:88:5a:
                    37:8e:d3:b5:d3:9f:28:80:44:25:92:36:20:26:87:
                    34:4f:27:c7:bc:66:9b:97:a8:2f:6d:f7:f0:3d:96:
                    82:f7:59:0e:d1:ec:57:a6:5e:44:8c:4e:b1:5b:c7:
                    f8:2e:4b:8f:b3:63:a9:5a:4f:3d:35:d8:db:25:0c:
                    28:fd:d7:5b:9c:09:64:95:3c:3b:f6:e4:34:3c:bd:
                    62:be:4b:08:62:78:01:d2:8f:18:76:60:ab:65:9a:
                    f4:02:88:ad:a5:57:f2:65:5d:8e:5c:a0:c1:f2:c3:
                    38:3d:e9:54:f0:f4:82:51:6d:cb:5d:93:64:b1:85:
                    b2:85:25:e8:3d:4b:35:ba:06:39:8c:43:92:e1:7b:
                    1b:cc:20:97:63:33:28:88:ec:18:f5:65:22:2b:03:
                    3e:17:00:26:f6:eb:6f:88:93:ee:ff:4a:99:ae:3b:
                    de:06:5f:f3:d7:1c:50:90:0b:7b:2a:2e:01:3f:7d:
                    9f:c9:bb:dc:ea:98:cb:7f:1d:2a:a3:4c:30:8b:38:
                    25:bf:d6:a2:af:cf:b2:7f:75:d7:c3:07:6d:e1:31:
                    58:4b:05:a1:6c:df:9e:c0:1e:82:93:3d:7c:a6:72:
                    e2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CB:A7:23:3E:8B:5B:DF:D4:57:8B:92:2D:7F:B2:13:E3:DC:A7:D4
            X509v3 Authority Key Identifier:
                keyid:BC:3B:FF:4B:5D:A8:0B:F5:44:27:AE:25:A5:40:BB:0C:11:7C:D2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/600a05248a907def76410027882b2f4a8085c07a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/38e59f7ed898309e564e97aa8c3dee179ec9b737.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/600a05248a907def76410027882b2f4a8085c07a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.68.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         6c:c9:6e:20:98:e8:9e:17:27:4a:a3:95:36:07:70:cb:b9:df:
         c8:7a:d4:62:43:62:3c:8e:c3:cd:47:1f:84:a8:83:1b:66:18:
         64:6a:44:9b:18:23:75:4a:28:79:04:28:4d:9d:b7:09:22:c0:
         a6:c6:90:a1:c3:02:48:a6:4f:41:c9:68:5e:03:3a:06:1e:34:
         77:59:a6:78:5e:08:53:68:35:a4:8d:a8:7b:31:66:5c:c7:0d:
         2d:e3:4f:0d:3a:8b:72:5c:30:71:91:8c:8f:89:e7:34:26:12:
         d5:e5:21:ce:84:55:73:ca:d4:86:99:b7:79:f7:ef:6f:a4:c8:
         15:3e:49:26:de:10:74:47:0c:df:e8:d8:4c:17:41:e8:f0:51:
         96:f5:8f:2b:f0:2a:80:d8:ec:7b:7d:95:5c:63:86:b1:a5:ee:
         05:04:35:b2:19:c1:10:09:f8:ab:4c:bc:94:a7:4f:f9:e4:ab:
         5b:a6:e0:85:65:a2:fc:e7:80:c6:a1:10:35:70:97:ba:c7:62:
         fc:60:d7:ef:5e:0f:13:34:e6:ba:93:fb:4d:6c:18:1a:58:7f:
         91:13:51:41:ac:bd:cd:11:aa:69:5d:6e:23:eb:8f:07:b8:75:
         4e:3b:81:5d:60:0e:1a:b1:0e:6b:7c:b2:60:72:fa:53:e9:80:
         33:c8:9d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----