Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/3b9dba7df19b2143dd44ae55da7b65617c69fdda.roa
File:                     3b9dba7df19b2143dd44ae55da7b65617c69fdda.roa (raw, json)
Hash identifier:          VvJ3t479byBJy+Dfcv3VT1985uKRSa01orsBW4Uqel8=
Subject key identifier:   BA:F9:A7:28:5F:F0:00:BF:63:98:BE:E1:F0:62:F5:30:15:28:1B:D2
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       1C597F
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/3b9dba7df19b2143dd44ae55da7b65617c69fdda.roa
Signing time:             Tue 15 Nov 2022 13:48:45 +0000
ROA not before:           Mon 19 Sep 2022 20:17:05 +0000
ROA not after:            Sun 22 Sep 2024 20:17:05 +0000
asID:                     265705
IP address blocks:        186.28.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1857919 (0x1c597f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Sep 19 20:17:05 2022 GMT
            Not After : Sep 22 20:17:05 2024 GMT
        Subject: CN=3b9dba7df19b2143dd44ae55da7b65617c69fdda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:62:cd:04:a6:4c:eb:96:cd:7e:c9:69:49:c4:
                    d7:f5:85:c7:57:0d:74:70:bb:b5:fe:67:26:41:1d:
                    d0:e0:67:a1:93:3a:2b:6e:e0:92:57:53:93:7d:c2:
                    76:19:8b:26:25:c3:04:0d:e3:30:65:8e:65:ec:93:
                    38:63:71:c1:e2:28:af:de:20:be:b7:26:7a:ff:b8:
                    b3:e3:06:ad:13:71:a2:f5:91:92:9d:fb:8e:de:47:
                    6a:6a:9a:37:2d:e8:5c:a4:d9:86:ef:28:c4:d9:57:
                    b7:26:d3:f0:6e:77:da:e5:c9:3a:35:9c:5c:86:15:
                    e6:c4:d2:06:7d:e8:ef:98:2d:b5:c8:79:5e:30:cb:
                    e5:79:90:6b:43:d2:68:23:d8:c7:d7:98:cf:1f:53:
                    d7:40:dc:7e:3a:d4:96:41:89:e3:26:c5:2a:2a:e4:
                    be:ba:ca:6a:b0:de:6d:13:57:dc:f0:7d:d2:3a:9a:
                    c9:94:f1:a7:83:b0:22:44:19:4e:8c:ed:54:cb:44:
                    39:01:ad:32:44:40:7a:9b:b4:3a:3b:95:10:93:ff:
                    4e:71:3b:18:d0:14:2a:47:c3:a8:90:07:7e:8f:b5:
                    7a:8a:b4:54:ef:24:d5:7b:52:44:24:6a:23:4c:2e:
                    ae:84:b3:39:75:82:77:50:6d:bd:5c:7c:e8:4e:0c:
                    5f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F9:A7:28:5F:F0:00:BF:63:98:BE:E1:F0:62:F5:30:15:28:1B:D2
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/3b9dba7df19b2143dd44ae55da7b65617c69fdda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.28.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e8:80:cd:e4:ba:fa:54:77:84:c7:44:59:fa:ca:29:9c:13:fa:
         f3:02:50:f9:fd:61:9c:74:e3:9f:b9:56:25:4d:2c:73:5b:c4:
         fd:ef:1e:71:2a:a4:fd:81:0b:05:f0:d1:cd:91:fb:02:95:35:
         3f:1f:64:56:8f:db:c4:ec:a3:4a:f2:b8:27:f6:3c:a8:c6:d8:
         91:cb:60:5b:c0:4d:2f:51:9c:1a:06:0e:2e:ff:5a:f7:42:c2:
         f6:19:ff:5f:ef:8f:56:4d:97:d4:b9:c2:7c:b0:8a:7a:5d:da:
         5e:a3:5e:3a:12:88:76:72:c5:21:b5:61:37:61:ae:09:75:d8:
         1e:ff:53:ec:e3:8c:17:61:b6:68:62:a4:8b:b3:26:2e:a4:aa:
         9b:42:41:1f:69:4a:ee:d1:f2:43:3e:30:cf:e1:0d:f5:ff:43:
         01:98:e2:d3:a5:d8:31:f8:d1:57:f8:8c:52:b2:1d:35:67:38:
         18:fa:fa:a5:49:2f:4a:a7:ef:44:15:34:56:12:8b:25:65:a7:
         ce:77:be:b8:63:82:b7:9f:62:09:56:32:1c:20:86:e5:a2:93:
         b3:c0:10:54:e6:89:89:25:a7:b1:1d:da:0d:c0:26:27:6d:85:
         a6:cf:3b:a8:fb:86:9a:8d:82:01:66:8e:4d:fc:b0:5c:c0:11:
         c4:40:c6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----