Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/5bce13e542580d6e7931619c1dce2b8080022695.roa
File:                     5bce13e542580d6e7931619c1dce2b8080022695.roa (raw, json)
Hash identifier:          mJn3NFn3R65/jhhGaUb2d3DpF3mxIEN25STxzFmTfgc=
Subject key identifier:   A8:82:BA:DA:6E:83:EB:78:F3:E6:09:46:A0:D2:54:D0:79:08:18:94
Certificate issuer:       /CN=39c565bbc1beca70ca953d23feff753b392a17a7
Certificate serial:       1A93BE
Authority key identifier: 87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/5bce13e542580d6e7931619c1dce2b8080022695.roa
Signing time:             Wed 31 Aug 2022 15:56:59 +0000
ROA not before:           Wed 31 Aug 2022 15:55:58 +0000
ROA not after:            Sat 31 Aug 2024 15:55:58 +0000
asID:                     266747
IP address blocks:        181.118.149.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1741758 (0x1a93be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39c565bbc1beca70ca953d23feff753b392a17a7
        Validity
            Not Before: Aug 31 15:55:58 2022 GMT
            Not After : Aug 31 15:55:58 2024 GMT
        Subject: CN=5bce13e542580d6e7931619c1dce2b8080022695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4f:dc:55:34:7e:de:25:ea:ad:b1:2f:3a:de:
                    a3:82:0f:72:9d:54:08:5e:b9:d1:42:aa:78:9f:c8:
                    e4:e9:0c:ae:66:b6:61:f4:66:ab:e8:14:83:11:a7:
                    a3:c8:ff:6b:27:81:ea:c4:7d:bb:5f:7f:19:ae:e8:
                    71:52:41:35:64:c2:34:14:be:e4:5a:41:c0:25:14:
                    eb:5e:31:7e:b1:13:8b:1d:fd:96:5e:3f:ca:77:77:
                    6f:ad:74:3b:67:25:7c:01:09:96:8a:65:f8:ce:7b:
                    73:a0:29:f3:de:6f:d8:88:c0:e8:ef:7a:3f:e1:77:
                    f8:3f:84:9c:b5:1f:8e:e0:72:ff:90:82:88:0b:66:
                    5e:9f:21:3b:35:da:74:60:74:3b:b6:0a:c6:34:22:
                    5c:49:85:84:2b:3d:42:da:22:47:bb:5f:69:c2:61:
                    ed:ec:9d:fd:dc:8e:96:2f:51:dc:fb:a3:88:df:43:
                    ac:a4:52:5a:1b:d0:85:c7:25:c2:1a:95:55:f0:c8:
                    c8:81:4b:70:51:88:41:b5:a2:1e:5a:05:ea:75:89:
                    fe:af:c2:df:69:1d:c9:d2:fa:fb:1d:07:7c:07:7e:
                    ca:89:9c:61:26:b9:d8:31:84:ee:ca:a0:61:a7:b5:
                    e1:84:df:9d:23:bc:eb:3f:c2:9e:96:37:89:e7:ea:
                    71:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:82:BA:DA:6E:83:EB:78:F3:E6:09:46:A0:D2:54:D0:79:08:18:94
            X509v3 Authority Key Identifier:
                keyid:87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/5bce13e542580d6e7931619c1dce2b8080022695.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/39c565bbc1beca70ca953d23feff753b392a17a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:57:d5:4f:e6:d2:aa:9b:b9:c0:6b:5c:73:da:a3:d5:3c:f3:
         0c:bb:d3:be:4a:73:d4:e4:86:53:1e:d0:53:38:20:e3:9f:1b:
         3c:f1:bc:b4:31:03:5c:18:b3:c1:40:65:0d:5b:04:d7:3d:97:
         75:12:13:1b:f4:13:9f:00:e9:98:d0:fb:f7:8b:d8:8f:0f:d5:
         d2:f7:56:bf:2a:c7:0b:e0:d4:62:73:d7:1d:f4:58:86:af:f6:
         d1:ed:22:65:dd:0d:49:ed:b4:a2:5d:e5:cd:21:30:2d:2b:6f:
         6d:6c:ed:85:02:00:21:b0:67:22:52:3f:89:a8:ca:a7:f6:97:
         10:8b:8c:71:2d:b8:3f:da:dc:82:2d:8b:6c:62:9e:15:60:8c:
         e0:0b:b1:b6:8d:26:16:ed:59:5b:5f:f5:0e:49:ba:5f:b2:a4:
         26:58:ea:42:bc:a0:3e:e8:96:36:cd:22:a5:97:d6:6d:4b:b6:
         3b:b6:d7:e9:65:c8:97:a4:4d:8f:ce:e3:a5:b7:07:a4:42:2c:
         8a:f5:67:29:1e:4f:ed:8c:f6:81:58:ee:01:ef:eb:cd:94:f2:
         97:69:52:7c:80:80:a0:ca:6d:be:5b:6d:69:32:2b:12:0b:d1:
         d9:37:ac:d9:25:26:f9:27:ee:20:78:e3:db:b7:ee:44:a3:16:
         23:b0:8e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----