Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/aeb72022adc23252287a0e4f95ad82c601ca6f33.roa
File:                     aeb72022adc23252287a0e4f95ad82c601ca6f33.roa (raw, json)
Hash identifier:          WtB/u0hzRTpN5jNnZ6EhDIZTTUtWPCEn9+xQJL5ByHA=
Subject key identifier:   F4:C8:57:13:E9:74:14:E7:BD:6C:C4:62:BF:59:50:02:CA:DF:B6:C1
Certificate issuer:       /CN=d407c72537519f11553c7ee9eb83baa042334380
Certificate serial:       11A562
Authority key identifier: 44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/aeb72022adc23252287a0e4f95ad82c601ca6f33.roa
Signing time:             Fri 30 Jun 2023 17:33:35 +0000
ROA not before:           Thu 29 Jun 2023 17:33:34 +0000
ROA not after:            Fri 30 Jun 2028 17:33:34 +0000
asID:                     272095
IP address blocks:        200.26.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1156450 (0x11a562)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d407c72537519f11553c7ee9eb83baa042334380
        Validity
            Not Before: Jun 29 17:33:34 2023 GMT
            Not After : Jun 30 17:33:34 2028 GMT
        Subject: CN=aeb72022adc23252287a0e4f95ad82c601ca6f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7e:32:81:46:af:75:08:ba:2c:8d:ab:59:1f:
                    e8:12:47:eb:e0:1d:62:9c:d2:17:7b:3b:c3:f3:ad:
                    cc:6e:05:fd:b1:83:b9:51:f5:06:be:d6:d2:6d:20:
                    a3:60:d7:57:78:1b:d7:56:9d:37:d8:59:3a:a6:c1:
                    f7:32:66:20:a6:f6:87:13:1e:fe:f0:e3:e9:dd:50:
                    14:9c:ad:f1:9e:9b:78:6a:29:66:ed:e8:a6:b0:29:
                    9f:75:56:d8:11:08:fd:a2:d3:ad:c4:58:79:77:4b:
                    6b:fe:b2:8c:e4:94:32:a9:60:9c:55:35:33:8c:7b:
                    d5:99:16:1c:96:6a:1b:65:e6:b5:c3:3b:2f:7f:74:
                    32:4a:25:df:f7:50:00:c4:f6:4d:c6:2a:87:15:57:
                    a8:c2:cb:9c:e5:63:ba:28:67:34:de:9d:ca:e1:8e:
                    07:6a:85:de:c2:02:ca:c7:25:a9:6d:e5:06:a6:1f:
                    12:6e:7b:9d:d3:9c:6e:fc:49:8e:3c:2d:81:c1:58:
                    1b:21:e3:b7:8c:55:c7:9c:0c:cc:9d:f2:54:eb:b1:
                    46:69:6c:f4:80:05:4c:13:13:ce:42:99:03:b6:3d:
                    50:6a:ed:20:84:d1:fd:d6:4c:0a:8e:79:ef:e4:27:
                    69:65:0f:d8:2a:00:69:6e:3d:16:52:2e:db:e4:d6:
                    fe:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C8:57:13:E9:74:14:E7:BD:6C:C4:62:BF:59:50:02:CA:DF:B6:C1
            X509v3 Authority Key Identifier:
                keyid:44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/aeb72022adc23252287a0e4f95ad82c601ca6f33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/d407c72537519f11553c7ee9eb83baa042334380.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:51:5c:27:69:0f:2a:4b:07:17:86:3d:d0:33:f5:64:d8:ee:
         16:e7:8e:4b:85:2b:c2:24:ea:9c:b7:68:6d:10:e6:bf:f9:5e:
         3e:68:6f:f0:1a:86:f5:eb:1e:42:0f:ed:5a:93:f7:14:bc:3e:
         b0:31:fa:e3:39:55:80:b9:0f:40:40:42:cc:66:80:25:73:fa:
         9a:ff:ba:38:3c:35:1d:c1:9e:14:68:8d:a8:a9:5e:8b:b4:50:
         17:fb:cf:b7:7c:a2:ff:b0:98:8a:7f:d1:19:56:56:45:cc:7c:
         3c:35:c8:37:53:d1:d9:8d:77:a2:f0:f3:06:37:19:58:c5:5d:
         bc:d8:a4:f9:bc:4b:86:38:5b:92:59:34:0f:48:c2:29:10:b2:
         b6:94:c0:75:69:50:a7:4e:f1:54:a4:93:dc:b5:0c:b0:a8:ee:
         78:22:10:91:7d:59:91:64:cd:82:2f:df:3e:5a:a4:8f:d2:85:
         02:de:54:bc:88:d6:08:3e:c3:8c:8b:10:22:b6:2f:4c:52:ff:
         f5:4e:79:7b:d4:d5:21:d5:9c:6c:a1:fb:39:a3:88:69:52:18:
         3c:67:37:13:70:e0:b3:02:90:e5:b9:d6:3e:a4:22:a5:ee:32:
         be:21:cc:47:a8:72:2c:58:ed:b8:e5:ac:35:eb:e4:91:b2:20:
         07:a0:5b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----