Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/1572af99dcfca3d878ed5707c4a3301e30d3513f.roa
File:                     1572af99dcfca3d878ed5707c4a3301e30d3513f.roa (raw, json)
Hash identifier:          Yrs7vMyvnQTpN/dS6gTgY1elOZVy6ocPfpAU2365IrQ=
Subject key identifier:   27:84:E9:9E:7B:E7:CC:F2:6C:B8:C0:F8:B2:00:96:1E:21:19:0E:35
Certificate issuer:       /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial:       1F5149
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/1572af99dcfca3d878ed5707c4a3301e30d3513f.roa
Signing time:             Sun 09 Apr 2023 01:48:43 +0000
ROA not before:           Sat 08 Apr 2023 01:48:43 +0000
ROA not after:            Wed 09 Apr 2025 01:48:43 +0000
asID:                     269918
IP address blocks:        131.72.168.0/22 maxlen: 24
                          2803:dd80::/32 maxlen: 128

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2052425 (0x1f5149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
        Validity
            Not Before: Apr  8 01:48:43 2023 GMT
            Not After : Apr  9 01:48:43 2025 GMT
        Subject: CN=1572af99dcfca3d878ed5707c4a3301e30d3513f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:06:68:46:30:ed:b1:60:98:8e:56:5a:f8:c4:
                    11:45:ca:cf:a4:45:48:81:31:1e:de:3a:67:77:80:
                    fb:37:2f:d6:0f:b7:7b:80:96:7a:39:2e:0f:ea:be:
                    ed:57:7a:50:23:d3:b2:f1:19:1b:9f:2a:d3:c7:37:
                    18:39:d3:76:63:e8:4e:17:da:3d:8c:6b:6e:55:39:
                    61:67:a9:95:aa:6e:a1:c5:8e:84:67:19:a8:15:e5:
                    46:22:3f:5f:01:6a:64:fc:57:04:d9:f8:dd:93:66:
                    47:91:71:1e:78:11:60:8b:ca:34:05:95:08:1b:17:
                    27:1c:47:0e:ba:c5:0e:10:9c:0f:b6:32:8a:e2:54:
                    1b:29:d2:59:3f:61:dc:3d:67:b8:45:16:e9:bb:d8:
                    41:8a:d3:72:2e:38:e4:3f:b7:0c:0b:1e:c1:40:be:
                    34:16:33:56:ee:95:f5:a2:55:12:ff:47:0c:bb:7b:
                    a0:71:38:0f:8d:43:2d:49:63:4b:06:3f:45:96:02:
                    bc:0b:0c:47:fe:ac:c8:26:13:ba:d9:bf:5a:27:8a:
                    bc:7e:50:99:1f:3a:60:75:ab:a9:56:a2:b7:4b:31:
                    09:ad:fc:76:1c:1b:ff:ef:10:61:8e:70:a8:9a:00:
                    1e:53:91:db:b0:83:00:a4:bf:7b:49:8c:d5:f3:5f:
                    cd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:84:E9:9E:7B:E7:CC:F2:6C:B8:C0:F8:B2:00:96:1E:21:19:0E:35
            X509v3 Authority Key Identifier:
                keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/1572af99dcfca3d878ed5707c4a3301e30d3513f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.168.0/22
                IPv6:
                  2803:dd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:a5:9c:76:94:67:74:e2:50:ee:d8:27:de:eb:7c:89:51:46:
         31:c5:bd:b8:eb:e6:df:26:b0:5d:ea:54:e9:c3:7f:df:fd:a9:
         1f:a2:89:ef:40:f2:fc:ec:63:6b:e0:94:25:12:23:0b:06:c7:
         44:51:03:b2:b7:5b:b7:6d:6e:91:cc:4f:6b:16:48:8f:83:c9:
         75:c8:d9:dc:6b:5d:0c:30:ec:ca:52:5e:bb:bc:b0:60:3a:3e:
         8c:68:58:a6:a6:32:09:a5:b0:f2:75:06:e2:6e:2a:22:57:bc:
         1f:8b:00:a1:d7:a4:a1:58:28:17:a6:c8:8f:e7:a9:ca:74:9c:
         15:e4:b6:14:6c:98:f3:ea:e7:87:7e:f7:8b:06:c1:f6:ad:cd:
         68:6a:ee:2c:a6:d9:69:39:35:cc:32:1d:7d:00:a7:5e:1a:fb:
         94:5c:a1:1a:4b:42:f9:cc:0b:03:b0:39:4a:6b:a5:50:9b:0e:
         51:a6:7c:fa:99:52:8f:b9:a9:0d:dc:c1:1a:03:fb:57:f5:e8:
         62:0a:16:86:e4:b7:78:2e:46:12:af:c1:c2:87:f2:a4:c6:fb:
         3f:dc:82:f4:3d:eb:7b:15:1f:9f:fb:6d:5c:7e:73:9e:ff:1e:
         e5:85:5e:6d:52:3f:63:f0:b4:cc:30:88:de:b2:46:6e:3f:1e:
         61:4b:55:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----