Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/96a19fbdcab731439e652a5bb467f20c80e24f04.roa
File:                     96a19fbdcab731439e652a5bb467f20c80e24f04.roa (raw, json)
Hash identifier:          7n1l3l0+gbxL6Bfdz22GNmZJAO2zixd2x6772sIun8k=
Subject key identifier:   2A:DB:BA:B7:5A:52:79:3D:1A:B2:B5:E3:BC:BF:2F:B4:5B:0C:51:5B
Certificate issuer:       /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial:       201E09
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/96a19fbdcab731439e652a5bb467f20c80e24f04.roa
Signing time:             Tue 25 Apr 2023 02:33:27 +0000
ROA not before:           Mon 24 Apr 2023 02:33:27 +0000
ROA not after:            Fri 25 Apr 2025 02:33:27 +0000
asID:                     27717
IP address blocks:        131.72.168.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2104841 (0x201e09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
        Validity
            Not Before: Apr 24 02:33:27 2023 GMT
            Not After : Apr 25 02:33:27 2025 GMT
        Subject: CN=96a19fbdcab731439e652a5bb467f20c80e24f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:55:73:a5:35:4c:9a:2e:8a:43:19:01:fc:2e:
                    8b:b8:71:48:83:27:56:e9:ee:29:6d:4a:c3:58:f2:
                    58:da:37:2f:be:52:a1:c9:0b:9e:a3:a8:72:87:47:
                    96:27:4e:eb:2b:0d:16:e8:67:74:88:c5:e2:eb:4b:
                    18:83:7c:00:36:a1:03:1a:93:9f:46:30:2f:90:42:
                    4f:26:69:8f:02:fb:da:19:83:89:f2:91:ae:87:d1:
                    c2:f2:c9:c9:12:37:fc:e4:a5:42:d5:d9:f4:95:f9:
                    d3:14:5e:ec:ae:9b:b8:01:62:12:ac:20:08:ca:8a:
                    b7:9a:db:89:e5:b3:23:06:af:a1:d3:b0:48:b5:16:
                    9e:f3:22:15:f6:a7:1b:2d:66:ca:a4:46:e6:84:d9:
                    b9:a8:3d:cc:7e:9e:bb:8e:c7:7f:8e:ed:b6:c0:2d:
                    bc:7e:d8:ee:f2:87:24:4b:1c:aa:0e:cd:c9:5c:0c:
                    63:ed:ed:86:48:d7:f8:67:0a:2f:c4:98:0f:16:c1:
                    4a:1e:26:c5:3f:36:ae:b2:4d:64:ca:cf:15:05:f8:
                    e1:79:69:03:ca:0d:d6:93:71:f1:7d:41:18:7d:f6:
                    01:81:70:23:a8:89:bc:10:7e:59:11:c4:16:b9:f4:
                    7b:30:22:7b:85:ae:40:ed:82:e1:ce:ca:32:d5:31:
                    5f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DB:BA:B7:5A:52:79:3D:1A:B2:B5:E3:BC:BF:2F:B4:5B:0C:51:5B
            X509v3 Authority Key Identifier:
                keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/96a19fbdcab731439e652a5bb467f20c80e24f04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:85:bf:7a:ff:7c:2f:2c:9f:75:89:d3:f2:03:2a:c5:25:d8:
         5a:da:78:77:32:5b:df:34:9f:83:48:41:f5:1a:58:7b:df:9e:
         53:35:79:55:f5:4f:d8:d6:38:bd:8f:ec:c7:f9:88:45:2e:2d:
         fc:98:da:3b:f7:28:e8:2e:c3:eb:73:a5:0f:13:5f:e2:75:39:
         ae:e5:74:6c:99:71:ab:55:03:63:c9:1a:61:ee:d6:b4:e9:b0:
         ef:56:43:90:f2:a2:49:e6:06:7e:86:3a:9d:46:6b:49:96:b4:
         82:c1:6e:64:a7:03:8c:4c:86:b1:8a:b2:66:ca:81:60:7e:c6:
         55:7e:c5:ef:6d:0f:af:92:0b:3a:0b:a0:b0:21:b5:94:99:93:
         b9:a6:8f:3e:2f:ea:61:d4:de:ef:25:60:8e:67:0e:8d:24:46:
         a4:54:da:a8:23:fd:ff:7a:a7:b9:8b:15:0a:72:2a:d7:68:89:
         e7:33:22:75:c6:ce:53:07:ee:1e:bf:a4:97:9d:38:83:7d:40:
         a6:0a:d5:95:32:41:c9:4f:ab:62:44:42:fe:b3:0b:8a:1b:f7:
         13:03:52:3b:b5:51:68:8b:aa:53:bf:93:de:c0:0f:de:35:3b:
         db:54:c1:f1:0a:c1:3a:7e:93:df:87:49:be:5a:1a:53:f6:80:
         92:f9:7a:cf
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIB4JMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM0
MjY4N2JjZWJkMjdkNmZkNjhmYzBmOTVhMThmZDhhZjhiNDM2YmIwHhcNMjMwNDI0
MDIzMzI3WhcNMjUwNDI1MDIzMzI3WjAzMTEwLwYDVQQDEyg5NmExOWZiZGNhYjcz
MTQzOWU2NTJhNWJiNDY3ZjIwYzgwZTI0ZjA0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAplVzpTVMmi6KQxkB/C6LuHFIgydW6e4pbUrDWPJY2jcvvlKh
yQueo6hyh0eWJ07rKw0W6Gd0iMXi60sYg3wANqEDGpOfRjAvkEJPJmmPAvvaGYOJ
8pGuh9HC8snJEjf85KVC1dn0lfnTFF7srpu4AWISrCAIyoq3mtuJ5bMjBq+h07BI
tRae8yIV9qcbLWbKpEbmhNm5qD3Mfp67jsd/ju22wC28ftju8ockSxyqDs3JXAxj
7e2GSNf4ZwovxJgPFsFKHibFPzausk1kys8VBfjheWkDyg3Wk3HxfUEYffYBgXAj
qIm8EH5ZEcQWufR7MCJ7ha5A7YLhzsoy1TFfBQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCrburdaUnk9GrK147y/L7RbDFFbMB8GA1UdIwQYMBaAFL4+q3oQa0Cw9kKP
S3ATUXycZmTgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzQyNjg3
YmNlYmQyN2Q2ZmQ2OGZjMGY5NWExOGZkOGFmOGI0MzZiYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTAxMzQ1NjUtOWYzYy00OWIxLWFhZjYtZGZmMmVh
MzE0NmZlLzk2YTE5ZmJkY2FiNzMxNDM5ZTY1MmE1YmI0NjdmMjBjODBlMjRmMDQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMDEzNDU2NS05ZjNjLTQ5YjEtYWFmNi1kZmYy
ZWEzMTQ2ZmUvYzQyNjg3YmNlYmQyN2Q2ZmQ2OGZjMGY5NWExOGZkOGFmOGI0MzZi
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAINIqDANBgkqhkiG9w0BAQsFAAOCAQEAA4W/ev98LyyfdYnT
8gMqxSXYWtp4dzJb3zSfg0hB9RpYe9+eUzV5VfVP2NY4vY/sx/mIRS4t/JjaO/co
6C7D63OlDxNf4nU5ruV0bJlxq1UDY8kaYe7WtOmw71ZDkPKiSeYGfoY6nUZrSZa0
gsFuZKcDjEyGsYqyZsqBYH7GVX7F720Pr5ILOgugsCG1lJmTuaaPPi/qYdTe7yVg
jmcOjSRGpFTaqCP9/3qnuYsVCnIq12iJ5zMidcbOUwfuHr+kl504g31ApgrVlTJB
yU+rYkRC/rMLihv3EwNSO7VRaIuqU7+T3sAP3jU721TB8QrBOn6T34dJvloaU/aA
kvl6zw==
-----END CERTIFICATE-----