Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/765bd4b4340edb7dde277d60d4b7f191badd3221.roa
File:                     765bd4b4340edb7dde277d60d4b7f191badd3221.roa (raw, json)
Hash identifier:          5iRsgBbrM4lK2NPnUzANJ1EFMzm1/URNsawTjfkj/BU=
Subject key identifier:   74:A6:64:35:DD:4B:90:A7:F3:5E:A7:32:55:E4:F9:10:B2:F9:CC:49
Certificate issuer:       /CN=9b3d6002276e2295200c85a66129c42e4d483c34
Certificate serial:       1EE28D
Authority key identifier: 30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/765bd4b4340edb7dde277d60d4b7f191badd3221.roa
Signing time:             Sat 11 Feb 2023 07:45:30 +0000
ROA not before:           Tue 23 Mar 2021 14:40:20 +0000
ROA not after:            Tue 24 Mar 2026 14:40:20 +0000
asID:                     264668
IP address blocks:        177.234.192.0/18 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2024077 (0x1ee28d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b3d6002276e2295200c85a66129c42e4d483c34
        Validity
            Not Before: Mar 23 14:40:20 2021 GMT
            Not After : Mar 24 14:40:20 2026 GMT
        Subject: CN=765bd4b4340edb7dde277d60d4b7f191badd3221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:52:80:44:65:e8:79:ba:49:d1:bc:40:37:
                    37:f1:ff:cb:9e:7b:9a:61:d2:45:47:49:cb:c8:63:
                    7a:78:a0:34:02:f1:7f:19:ac:36:f8:c1:c5:bb:40:
                    65:2f:95:2c:d2:c8:a3:3a:28:09:de:09:1c:51:ba:
                    e2:9c:01:cf:12:6d:7d:89:98:40:30:0e:36:82:93:
                    94:d4:d8:1e:0f:a8:9e:d1:0c:83:e1:55:3a:5c:c9:
                    36:7b:17:7a:79:a3:3d:7a:a1:3f:bb:79:0a:6d:a7:
                    b2:86:fd:40:7f:fd:41:df:78:38:1b:c0:3f:09:37:
                    8b:0a:72:15:35:6d:cd:b2:e2:a5:8e:f3:c7:5b:f4:
                    48:82:17:d8:c2:74:e2:88:a9:a5:6a:63:29:08:eb:
                    78:6d:b5:68:97:a3:bb:f5:82:89:67:7d:52:43:0a:
                    3b:af:8e:1e:a0:a2:14:b2:b3:12:b0:54:05:94:8f:
                    52:b2:10:66:6b:2a:e8:b6:ac:1c:8a:49:2b:90:4e:
                    77:50:aa:c3:c9:4a:db:8e:0b:40:c7:d3:7f:2a:f4:
                    5f:e0:26:90:2e:cf:cb:e8:2f:52:7e:d5:c9:f5:d6:
                    ee:1d:c2:4b:80:5e:ed:91:03:0e:61:79:a1:a1:4c:
                    95:1a:d1:b6:91:df:79:0a:c6:2a:27:75:99:a7:79:
                    7c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A6:64:35:DD:4B:90:A7:F3:5E:A7:32:55:E4:F9:10:B2:F9:CC:49
            X509v3 Authority Key Identifier:
                keyid:30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/765bd4b4340edb7dde277d60d4b7f191badd3221.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.234.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         91:e8:1e:98:7a:ce:ba:19:04:07:91:77:7d:db:db:1b:a1:ae:
         b9:ad:f3:96:e6:2d:85:1d:f9:39:c4:f2:47:bc:ab:6f:d5:db:
         57:28:63:e1:af:f3:cf:92:3a:ca:85:5b:71:8a:7c:c6:13:03:
         cc:a0:e9:ab:14:5d:ec:52:06:af:0c:72:3c:75:20:5e:7c:7c:
         d5:e3:f2:e4:80:fa:c6:0b:05:b0:26:2e:63:6a:17:40:c3:f8:
         8c:b6:03:39:00:3e:65:97:87:af:1b:4e:32:03:53:82:de:50:
         50:60:28:10:7d:4b:3d:66:1d:74:9b:3d:8b:52:81:fb:28:c3:
         cb:05:92:6a:d4:80:71:47:26:5a:bc:04:cb:5e:7c:d8:ad:38:
         10:0a:de:0c:58:74:48:a8:7d:df:83:a4:97:45:d8:12:85:79:
         66:a0:fc:92:b8:65:2c:05:0b:c5:73:1e:84:fb:ce:54:58:b4:
         ac:fa:9b:b4:5a:12:3e:93:65:6e:33:fd:6e:5f:12:3c:8d:86:
         ff:be:05:1b:69:97:90:d1:d3:03:d7:ce:d7:ee:1a:91:6e:dc:
         4d:34:64:26:d8:6b:d9:76:61:2c:c5:32:97:2c:9f:26:bd:e3:
         b3:11:f1:7d:b4:d8:c5:30:20:52:6f:90:7c:4b:59:56:e1:e0:
         dd:d6:a9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----