Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d1f8421-d319-4f80-8974-b17d805953c2/c1babe82b8931668a1245d8fe63e72c5f0c69659.roa
File:                     c1babe82b8931668a1245d8fe63e72c5f0c69659.roa (raw, json)
Hash identifier:          HcWP+grmpzqKYV9EzcEzrdcIbrnb+3MX2kcpJzxrMlE=
Subject key identifier:   46:50:CC:0E:32:77:F9:BD:69:E9:7C:08:C3:56:BA:04:FC:60:95:DC
Certificate issuer:       /CN=b1698ad63d2b3605c12e87ac07c0bd8b735bc9ce
Certificate serial:       1227A0
Authority key identifier: E1:56:1B:D6:05:23:EB:2E:18:F3:E4:2E:55:E0:0E:03:0C:79:0F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1698ad63d2b3605c12e87ac07c0bd8b735bc9ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d1f8421-d319-4f80-8974-b17d805953c2/c1babe82b8931668a1245d8fe63e72c5f0c69659.roa
Signing time:             Tue 25 Apr 2023 08:30:01 +0000
ROA not before:           Mon 24 Apr 2023 08:30:01 +0000
ROA not after:            Wed 23 Apr 2025 08:30:01 +0000
asID:                     271779
IP address blocks:        200.106.184.0/22 maxlen: 24
                          2803:6fe0::/32 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1189792 (0x1227a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1698ad63d2b3605c12e87ac07c0bd8b735bc9ce
        Validity
            Not Before: Apr 24 08:30:01 2023 GMT
            Not After : Apr 23 08:30:01 2025 GMT
        Subject: CN=c1babe82b8931668a1245d8fe63e72c5f0c69659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:03:0c:48:ed:0f:b6:6d:76:29:8f:de:65:48:
                    ff:ef:46:a8:1a:ce:8d:6f:96:cc:00:6c:db:cd:b5:
                    40:9d:e8:f0:69:0a:98:a6:ad:88:33:b4:d0:47:2d:
                    55:8d:1e:60:8c:1c:34:8d:08:d6:21:0a:b8:ea:c9:
                    95:a3:68:7e:88:ea:b9:f8:a0:bc:84:bc:47:85:22:
                    ac:ac:86:82:09:10:43:c5:75:2e:e3:1d:2e:20:59:
                    00:81:7f:6f:35:5f:5e:8c:d3:68:a9:a2:f5:ab:d7:
                    01:aa:a6:45:35:14:ee:40:8e:aa:1f:45:d1:32:54:
                    4c:62:6f:b8:0b:c2:32:73:55:c0:72:53:d2:c0:01:
                    ff:d0:85:b2:fe:b9:1d:13:5e:d5:c7:08:8d:ea:72:
                    9e:1b:46:89:57:80:5f:b0:9b:c6:6d:30:79:ff:70:
                    f3:bb:9e:11:e6:ec:e7:7f:40:6f:ca:fd:47:ab:55:
                    e6:28:f5:00:58:2b:42:26:d1:de:95:31:31:de:d0:
                    57:fd:f3:e5:34:e7:9b:66:8c:85:25:2b:af:80:d8:
                    fd:4b:43:8e:6b:77:92:6a:e6:63:cd:e0:bd:14:5b:
                    2d:66:5e:6b:1f:1c:ce:f0:ad:d7:41:63:dc:bc:7f:
                    f5:e6:9d:1b:e6:49:af:2b:21:6d:32:04:50:65:65:
                    3b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:50:CC:0E:32:77:F9:BD:69:E9:7C:08:C3:56:BA:04:FC:60:95:DC
            X509v3 Authority Key Identifier:
                keyid:E1:56:1B:D6:05:23:EB:2E:18:F3:E4:2E:55:E0:0E:03:0C:79:0F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1698ad63d2b3605c12e87ac07c0bd8b735bc9ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d1f8421-d319-4f80-8974-b17d805953c2/c1babe82b8931668a1245d8fe63e72c5f0c69659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d1f8421-d319-4f80-8974-b17d805953c2/b1698ad63d2b3605c12e87ac07c0bd8b735bc9ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.184.0/22
                IPv6:
                  2803:6fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:41:47:06:78:41:74:64:7a:2a:89:13:4c:6c:f5:7e:23:fe:
         12:d5:8a:e2:3e:9b:72:0f:5d:40:d6:eb:b2:c2:b8:9a:fd:3b:
         7e:c8:a4:a8:bd:10:53:46:3b:a2:88:11:e9:88:94:c7:03:07:
         88:d7:c6:91:9d:d6:d6:61:e3:c0:2c:e2:b7:ee:e8:fa:bc:c0:
         ff:8c:fb:cc:e5:39:bb:d5:78:2d:c9:45:14:4c:b8:9d:b9:e3:
         83:60:f4:c3:fd:8c:6d:05:fc:dd:7d:fb:d0:20:04:5f:20:8b:
         04:e4:b7:40:a4:a7:a3:04:cb:1e:e5:62:13:aa:f0:4b:28:61:
         8d:b0:c0:a4:62:e1:22:ce:d0:52:39:cf:b1:c2:68:89:bb:24:
         ca:86:86:ca:60:93:82:e7:7f:77:6f:a2:e3:fb:99:70:a5:a2:
         5c:4c:9b:61:e9:3f:f9:26:53:c9:da:11:3a:f5:e7:c2:00:51:
         67:7b:db:75:e7:e3:08:e8:f1:3b:df:b7:9c:35:88:80:22:5f:
         0f:62:45:08:4b:4a:4a:d6:cf:fe:99:a0:4a:0b:56:7b:e2:7b:
         b9:bf:f9:3d:79:a2:1a:89:eb:86:78:1a:6a:78:be:80:80:a3:
         5e:41:fe:b5:d4:26:2d:3b:7f:fa:b4:3d:9e:40:14:46:6c:38:
         7a:05:8b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----