Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/bdace15a554f908388892a834c322577b7d24233.roa
File:                     bdace15a554f908388892a834c322577b7d24233.roa (raw, json)
Hash identifier:          1fBoZzaOqtRne6Gr5P+r3k/hVYvT2Tyf9CNHoIl6K1o=
Subject key identifier:   A0:FD:C8:D4:0B:A1:B1:7B:AC:F7:BD:3A:E6:5C:56:CF:17:1E:EA:1F
Certificate issuer:       /CN=9b3d6002276e2295200c85a66129c42e4d483c34
Certificate serial:       1FF68B
Authority key identifier: 30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/bdace15a554f908388892a834c322577b7d24233.roa
Signing time:             Thu 23 Mar 2023 08:30:10 +0000
ROA not before:           Wed 22 Mar 2023 08:30:10 +0000
ROA not after:            Fri 21 Mar 2025 08:30:10 +0000
asID:                     264668
IP address blocks:        200.24.128.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2094731 (0x1ff68b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b3d6002276e2295200c85a66129c42e4d483c34
        Validity
            Not Before: Mar 22 08:30:10 2023 GMT
            Not After : Mar 21 08:30:10 2025 GMT
        Subject: CN=bdace15a554f908388892a834c322577b7d24233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8a:f1:0c:bf:69:fd:76:57:c0:5c:36:e8:d5:
                    6c:28:6c:9d:f5:33:07:c8:cc:5c:39:6b:a4:6d:64:
                    a0:2e:8b:82:a9:89:fa:d0:61:26:a9:5d:01:a8:b7:
                    38:ea:9a:32:fc:70:14:a4:56:5d:d0:0e:e4:9a:6a:
                    a3:7e:b7:de:d7:ea:6f:e4:35:bb:2c:18:6a:52:52:
                    65:3a:c9:77:f2:74:78:01:56:c0:1c:12:83:c9:b2:
                    62:71:e9:13:58:35:d9:ff:d4:f3:3b:5e:b4:b8:c0:
                    81:6e:0b:de:7d:a5:08:a7:bf:13:dd:8a:64:4a:00:
                    ac:4e:51:ae:29:39:d6:8e:1b:f8:e7:25:86:bb:05:
                    ca:69:84:37:6e:3a:7f:03:58:02:18:ab:41:55:fd:
                    f5:72:0b:47:e6:6c:6b:93:0a:3f:2d:5a:af:75:b5:
                    21:8d:b3:86:9d:a8:c8:4e:54:0e:a9:ea:68:14:ad:
                    a3:7c:63:d7:07:70:a3:98:15:2a:14:73:56:07:5d:
                    e7:b2:fe:d1:50:7d:d4:1c:0d:e4:e0:57:f4:87:9c:
                    30:6c:6d:32:fd:e9:e9:90:d8:16:80:af:1e:1e:13:
                    13:11:4c:df:0b:b0:22:28:e6:f0:0a:e2:2c:3d:38:
                    1c:55:0a:19:14:0b:b7:6f:54:f6:dd:4f:16:40:e3:
                    be:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FD:C8:D4:0B:A1:B1:7B:AC:F7:BD:3A:E6:5C:56:CF:17:1E:EA:1F
            X509v3 Authority Key Identifier:
                keyid:30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/bdace15a554f908388892a834c322577b7d24233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         01:3c:ad:af:e2:c4:d5:9f:0f:f7:df:6c:9f:1b:77:a7:c3:46:
         bb:57:ad:b9:de:9c:70:c9:58:6f:6a:75:b2:12:28:72:af:d6:
         2a:e1:e6:ff:d0:40:38:c3:a3:01:fe:eb:dc:63:cd:0b:d4:e1:
         9b:97:5e:37:18:19:69:56:8f:b4:02:c7:c7:65:e9:60:b8:be:
         f6:30:61:13:96:92:1e:cf:69:14:05:70:13:d4:c5:c5:69:ce:
         31:6d:da:54:16:d7:1a:d6:01:d6:d3:3e:a5:d4:0a:87:83:c7:
         2a:20:5d:bf:fa:6a:b7:8b:5b:af:76:1e:f3:08:14:d6:6c:4e:
         8b:0d:93:27:f1:3f:53:7a:6d:ed:e8:2e:8a:5e:fe:80:1a:c9:
         04:9b:bf:36:ea:bf:f2:36:c1:8e:e2:5c:88:fe:31:19:ee:77:
         43:5d:4b:bc:e1:a6:d1:b9:64:55:d8:f5:4d:60:b7:63:24:38:
         48:1d:4f:98:ac:ef:70:6a:22:22:cf:90:a0:ae:9e:80:99:23:
         ce:fe:cd:02:51:fa:5c:2c:67:d0:3c:40:a8:32:16:cc:47:a4:
         70:5b:9b:42:2a:a3:31:45:ed:d2:6e:0f:58:79:82:86:d7:6a:
         d8:97:7d:1d:f8:1b:4d:9c:39:30:a0:5f:9d:f1:d2:b5:5d:c1:
         d8:67:4a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----