Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/1250de54bdc19c2842d7b99803f346a9151f222b.roa
File:                     1250de54bdc19c2842d7b99803f346a9151f222b.roa (raw, json)
Hash identifier:          SVB9SpMND0+o0Fej4HUM978V4PEocZdxdmufdM2DmHI=
Subject key identifier:   F7:7A:28:BC:8A:A6:25:0A:BD:E9:EC:79:E1:FC:46:BF:C3:24:BF:3C
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       268F92
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/1250de54bdc19c2842d7b99803f346a9151f222b.roa
Signing time:             Wed 30 Aug 2023 17:36:30 +0000
ROA not before:           Tue 29 Aug 2023 17:36:22 +0000
ROA not after:            Sat 30 Aug 2025 17:36:22 +0000
asID:                     27817
IP address blocks:        186.113.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2527122 (0x268f92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Aug 29 17:36:22 2023 GMT
            Not After : Aug 30 17:36:22 2025 GMT
        Subject: CN=1250de54bdc19c2842d7b99803f346a9151f222b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:10:11:e4:55:35:cd:b5:f3:c1:45:56:32:4c:
                    18:2a:ec:9d:3b:1a:69:f4:90:a8:b0:12:2c:e5:74:
                    e4:01:9b:fe:34:5d:4a:4a:f0:de:5d:bf:45:29:39:
                    23:fa:35:d9:8f:fb:f5:3f:f5:e2:98:53:66:ac:ff:
                    2f:28:c1:d5:a1:c8:0a:1a:04:54:5b:94:91:8c:9b:
                    4e:63:ff:8f:87:0a:7b:8a:b6:db:8d:fb:4e:0e:55:
                    26:5b:d8:1f:66:56:4a:41:77:72:9e:0f:7a:50:cb:
                    df:b9:db:4d:fb:5f:92:d4:cf:f2:4d:2a:20:00:ba:
                    bd:52:a3:f4:8a:96:e5:1a:5c:70:d6:f6:9c:8d:22:
                    51:bd:6f:f2:2c:93:5e:6e:ae:fa:f6:22:f5:bd:96:
                    48:34:18:0e:74:8b:c0:74:dd:d7:30:77:0a:4d:4f:
                    f9:3e:f6:bf:ca:f3:4f:ee:b6:5b:a2:fb:3d:36:d9:
                    08:55:9d:52:bf:6d:87:1e:be:58:32:50:0b:56:d4:
                    fb:93:37:15:e5:01:8f:da:4d:97:5a:f2:31:54:3c:
                    09:5c:4e:c9:41:c7:7c:8a:d0:4e:9c:b6:0b:a6:68:
                    c0:a6:25:4c:1d:6f:1f:ce:11:53:1f:0c:9a:90:58:
                    de:81:30:aa:ad:c3:d1:04:ee:b4:72:18:22:65:7a:
                    93:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7A:28:BC:8A:A6:25:0A:BD:E9:EC:79:E1:FC:46:BF:C3:24:BF:3C
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/1250de54bdc19c2842d7b99803f346a9151f222b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.113.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:53:f6:57:4c:d4:db:97:57:60:7c:d2:b6:c6:ad:ea:cf:0f:
         57:42:9b:eb:fb:9f:a1:de:de:ca:ec:e6:d0:20:0f:86:50:43:
         9d:f0:01:59:b5:fb:6e:bd:bc:0d:75:72:1d:98:43:46:1b:e3:
         b2:34:03:ec:44:eb:46:81:61:95:06:cd:cf:88:32:3d:7e:cd:
         61:cb:01:2c:ad:17:9f:c2:81:86:0c:fa:fe:4c:11:81:c3:5e:
         e1:33:9f:40:c2:56:b8:c1:5f:5e:14:73:2b:2a:fa:db:8c:7b:
         23:30:57:1b:10:22:de:60:27:0a:13:a9:55:f9:1d:87:7b:a5:
         f1:8d:47:66:00:34:bd:92:d1:58:c5:86:fc:2c:dc:9f:67:03:
         d1:03:bb:24:1c:d1:90:15:fe:8d:15:3b:67:e6:e0:cd:7d:18:
         0d:55:dc:d5:d1:01:59:c7:98:22:d1:17:50:2b:8b:fa:a7:6d:
         2c:30:19:86:35:04:58:ec:71:52:0b:22:0a:81:96:20:df:e3:
         7d:40:5a:39:01:02:49:7f:60:5f:b9:8b:f0:d0:64:6d:bc:50:
         ff:0d:ca:17:13:41:17:7e:ec:98:5b:6e:3b:fa:9a:9b:56:07:
         ee:45:42:6a:17:3b:9a:30:9d:2f:bd:50:d1:a0:78:b2:a2:83:
         63:9f:4c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----