Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/f62741b5e39fb17c7ad849f7697f147f8bce44a8.roa
File:                     f62741b5e39fb17c7ad849f7697f147f8bce44a8.roa (raw, json)
Hash identifier:          icrIC8KTKKXEunjF+D5+vzXZY/iNFwmBCQntLnvhCf8=
Subject key identifier:   0F:23:E4:06:F5:BD:86:B3:99:BA:33:55:0B:3A:D0:E6:21:C0:9C:EA
Certificate issuer:       /CN=9b3d6002276e2295200c85a66129c42e4d483c34
Certificate serial:       2004FD
Authority key identifier: 30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/f62741b5e39fb17c7ad849f7697f147f8bce44a8.roa
Signing time:             Fri 24 Mar 2023 08:31:22 +0000
ROA not before:           Thu 23 Mar 2023 08:31:22 +0000
ROA not after:            Sat 22 Mar 2025 08:31:22 +0000
asID:                     264668
IP address blocks:        167.250.180.0/23 maxlen: 23
                          200.24.128.0/20 maxlen: 22
                          200.24.128.0/22 maxlen: 24
                          200.24.132.0/22 maxlen: 24
                          200.24.136.0/22 maxlen: 24
                          200.24.140.0/22 maxlen: 24
                          200.24.144.0/20 maxlen: 22
                          200.24.144.0/22 maxlen: 24
                          200.24.148.0/22 maxlen: 24
                          200.24.152.0/22 maxlen: 24
                          200.24.156.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2098429 (0x2004fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b3d6002276e2295200c85a66129c42e4d483c34
        Validity
            Not Before: Mar 23 08:31:22 2023 GMT
            Not After : Mar 22 08:31:22 2025 GMT
        Subject: CN=f62741b5e39fb17c7ad849f7697f147f8bce44a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:8d:37:f1:2e:b7:6e:aa:78:87:19:ab:b3:08:
                    9c:8c:b7:e2:de:b3:e2:c0:e3:70:56:b1:ca:30:6f:
                    98:6c:61:30:a0:c0:cc:55:0b:a2:9e:f8:07:b0:94:
                    35:f7:a8:44:8a:a4:ea:7e:83:40:7c:f0:10:70:6f:
                    16:0b:79:d9:1a:fb:ca:1c:2c:5a:d6:42:b5:44:92:
                    8e:12:8b:b8:c8:67:fe:40:a3:0c:52:cd:d6:d9:00:
                    ff:6d:01:e2:5b:68:2b:ef:41:0a:ef:ae:74:79:58:
                    1a:a0:0b:a6:23:03:01:d3:83:a4:be:3e:27:53:6f:
                    8e:3c:c8:9a:45:4d:96:52:6a:52:00:41:2a:29:9d:
                    b3:2c:48:86:fe:0d:47:4c:b8:c1:b1:2f:a6:9d:30:
                    a0:8f:10:44:44:3f:ef:17:e1:65:eb:08:10:02:20:
                    90:00:57:f9:b8:e2:a8:d8:d5:ee:3b:7b:42:3b:de:
                    e2:5f:a3:e6:10:3a:9b:2c:dc:c0:7e:21:d3:c3:e7:
                    36:be:1e:5f:05:2e:c3:75:fb:e7:7a:2a:ed:ee:47:
                    22:bc:7e:39:aa:04:c1:fa:f7:fa:fb:fc:59:2e:b7:
                    6e:82:68:be:3c:8f:2c:65:ee:ca:53:ab:3c:a5:c5:
                    69:5f:14:12:1e:fc:07:8b:96:1c:4b:5a:20:23:78:
                    30:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:23:E4:06:F5:BD:86:B3:99:BA:33:55:0B:3A:D0:E6:21:C0:9C:EA
            X509v3 Authority Key Identifier:
                keyid:30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/f62741b5e39fb17c7ad849f7697f147f8bce44a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.180.0/23
                  200.24.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         90:ce:53:33:28:43:2d:04:fb:4d:f8:91:44:4c:b9:b9:4a:9b:
         a8:03:38:bf:5b:2e:0c:cd:a1:44:79:ea:75:63:13:c0:65:c9:
         90:e8:06:02:1f:68:a1:ed:af:65:f6:a8:08:c6:05:8c:84:bc:
         63:8d:c8:a6:d8:0b:5a:a1:36:45:72:34:a0:da:1b:59:ad:98:
         25:56:eb:f5:1f:20:8e:a5:7c:eb:0b:7f:1e:f3:ea:a2:0f:21:
         11:d6:59:82:1f:43:9d:83:c8:d3:f0:d5:56:3a:69:04:d2:d4:
         f4:3a:5f:70:b9:e0:ee:2f:0d:01:97:a3:75:2d:fc:97:56:3a:
         97:f6:41:87:d0:dd:33:06:5c:48:fd:72:8b:08:2f:37:cd:1a:
         6f:a8:44:36:a8:49:b9:e4:9a:fc:c8:68:29:35:f2:d1:71:6d:
         b0:7f:0b:c3:7e:41:1d:c3:7c:d4:20:bd:9a:47:0d:53:6d:66:
         5a:7a:d1:86:88:0e:d0:f7:85:18:a7:ab:30:df:e6:8e:5c:d1:
         b1:65:fb:be:16:50:81:e6:86:02:23:44:68:b0:6c:ba:c5:35:
         4d:e4:93:ba:49:53:71:f6:48:24:29:f0:80:8e:22:40:43:51:
         97:15:29:92:ae:08:fd:37:cc:2f:12:e0:eb:85:64:90:b5:12:
         b1:aa:eb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----