Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/be59f4be-0a7f-40b5-b84d-7e78e5124d99/2a5b155dcb4b0f6fe3319cfdfbc5b4087284514a.roa
File:                     2a5b155dcb4b0f6fe3319cfdfbc5b4087284514a.roa (raw, json)
Hash identifier:          4W4tNM0OG+DL9x9OIWwYF42Usdcsi3wGr9x/O46AG5w=
Subject key identifier:   91:41:32:6F:BF:93:DA:23:BB:D5:C8:8D:67:84:FB:31:E0:DD:38:C7
Certificate issuer:       /CN=cb6445348fda58c2a60a9db541fbbec77e7a759a
Certificate serial:       1B00D8
Authority key identifier: A6:9A:E2:37:BB:C1:29:63:A9:3F:84:A2:28:27:19:E2:79:D4:AA:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb6445348fda58c2a60a9db541fbbec77e7a759a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/be59f4be-0a7f-40b5-b84d-7e78e5124d99/2a5b155dcb4b0f6fe3319cfdfbc5b4087284514a.roa
Signing time:             Thu 21 Sep 2023 08:30:01 +0000
ROA not before:           Wed 20 Sep 2023 08:30:01 +0000
ROA not after:            Fri 19 Sep 2025 08:30:01 +0000
asID:                     263230
IP address blocks:        179.0.224.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1769688 (0x1b00d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb6445348fda58c2a60a9db541fbbec77e7a759a
        Validity
            Not Before: Sep 20 08:30:01 2023 GMT
            Not After : Sep 19 08:30:01 2025 GMT
        Subject: CN=2a5b155dcb4b0f6fe3319cfdfbc5b4087284514a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:18:e9:80:cd:c2:3e:be:64:19:08:59:9b:c1:
                    a2:6b:92:c8:c6:31:69:6a:73:92:f2:02:f4:ba:3e:
                    b4:7c:e2:97:5a:14:35:a6:53:bc:14:53:38:4e:e2:
                    e2:85:b0:5b:09:fa:a2:21:fd:3b:c6:b9:07:b2:b0:
                    ee:82:8b:f2:0c:56:a5:78:ab:f4:3b:94:e1:91:fc:
                    de:3a:a1:91:c3:f7:9f:45:27:58:f1:08:57:30:a6:
                    bb:99:0f:c6:eb:fe:05:be:98:fd:ae:8c:1b:9d:ce:
                    c3:09:49:80:80:cd:61:6c:f3:5e:01:b0:1a:2e:85:
                    6a:5b:78:31:bc:42:42:da:c9:15:72:70:bc:ef:53:
                    0f:fd:e7:77:ec:e2:10:7a:b3:33:8c:d6:12:76:cc:
                    d9:95:0b:24:3a:70:a1:9f:fa:1b:38:4d:b9:17:93:
                    27:2c:33:9b:a0:b0:27:73:db:d8:e9:a0:10:18:5c:
                    04:f5:33:c4:a3:d2:ea:8f:4d:0f:65:11:7a:c4:f6:
                    da:50:53:4e:b1:04:aa:f9:0c:9c:2e:d5:1e:e2:f4:
                    3a:0d:0a:96:ae:83:19:7d:3f:ae:99:21:59:ab:a8:
                    b2:27:a9:a2:c4:95:6e:34:ef:4d:7d:58:8a:49:0a:
                    b4:08:1d:97:73:67:f9:3f:a4:49:6c:8f:8a:f4:47:
                    13:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:41:32:6F:BF:93:DA:23:BB:D5:C8:8D:67:84:FB:31:E0:DD:38:C7
            X509v3 Authority Key Identifier:
                keyid:A6:9A:E2:37:BB:C1:29:63:A9:3F:84:A2:28:27:19:E2:79:D4:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb6445348fda58c2a60a9db541fbbec77e7a759a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/be59f4be-0a7f-40b5-b84d-7e78e5124d99/2a5b155dcb4b0f6fe3319cfdfbc5b4087284514a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/be59f4be-0a7f-40b5-b84d-7e78e5124d99/cb6445348fda58c2a60a9db541fbbec77e7a759a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         48:cb:1c:7d:e7:1f:92:5d:a8:c1:cb:7b:ad:b8:06:c1:18:1c:
         2f:00:34:d4:89:91:93:e6:8f:c4:eb:07:39:00:24:67:d7:95:
         2f:5c:fd:d7:49:61:b9:a4:ea:42:e7:e2:b5:59:6c:c6:79:c0:
         88:d6:67:ea:b2:a5:e1:76:c8:97:30:ee:29:bf:3c:e0:18:b3:
         c8:b6:30:e6:04:53:dc:a0:34:fd:70:dc:13:9c:36:ec:cc:8c:
         d6:e4:0b:25:4b:10:64:ee:37:39:bf:1e:8c:a2:72:88:01:b9:
         83:80:71:30:37:5d:64:e7:8e:04:64:34:13:cd:ab:91:e8:43:
         d3:92:27:6a:ad:da:50:40:dc:d0:88:d6:8b:f8:02:79:dd:75:
         61:ac:96:cb:a6:3b:64:d1:fb:9b:f3:d4:59:87:69:42:f3:b4:
         d9:76:ec:ce:27:27:f1:c3:6e:3f:bb:65:6f:cd:b3:78:a0:19:
         a0:a3:9a:5f:64:d6:bb:80:0f:64:db:4d:2d:19:d5:12:63:28:
         e0:58:ea:07:66:ce:66:4f:e6:8a:28:75:9f:34:3e:cc:f4:17:
         7d:69:7e:77:ab:42:d7:7b:04:a6:6f:38:e1:b7:c9:f5:08:98:
         35:81:9f:6b:43:e9:9c:f3:91:7f:9d:e2:18:1d:33:a9:18:03:
         dd:a1:ac:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----