Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/6901d34762335d3cd37b4b0ae4bf765c532e4072.roa
File:                     6901d34762335d3cd37b4b0ae4bf765c532e4072.roa (raw, json)
Hash identifier:          ZSy57vge9raO/gxzsvPSwHGES8OZQmbYwml9Cvra0cQ=
Subject key identifier:   F2:9A:77:34:A7:F5:2B:CE:1B:B2:3E:8A:A2:FD:64:58:D8:2D:8E:CE
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       1BD14C
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/6901d34762335d3cd37b4b0ae4bf765c532e4072.roa
Signing time:             Mon 26 Sep 2022 20:23:01 +0000
ROA not before:           Mon 26 Sep 2022 20:12:51 +0000
ROA not after:            Thu 26 Sep 2024 20:12:51 +0000
asID:                     3816
IP address blocks:        181.234.0.0/18 maxlen: 18
                          181.234.64.0/18 maxlen: 18
                          181.234.128.0/19 maxlen: 19
                          181.234.160.0/20 maxlen: 20
                          181.234.176.0/20 maxlen: 20
                          181.234.192.0/19 maxlen: 19
                          181.234.224.0/19 maxlen: 19
                          181.235.0.0/20 maxlen: 20
                          181.235.16.0/20 maxlen: 20
                          181.235.32.0/19 maxlen: 19
                          181.235.64.0/20 maxlen: 20
                          181.235.80.0/20 maxlen: 20
                          181.235.96.0/20 maxlen: 20
                          181.235.112.0/20 maxlen: 20
                          181.235.128.0/19 maxlen: 19
                          181.235.160.0/19 maxlen: 19
                          181.235.192.0/19 maxlen: 19
                          181.235.224.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1823052 (0x1bd14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Sep 26 20:12:51 2022 GMT
            Not After : Sep 26 20:12:51 2024 GMT
        Subject: CN=6901d34762335d3cd37b4b0ae4bf765c532e4072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e7:d7:d6:3b:c7:66:0d:e7:64:2c:f0:78:97:
                    73:17:4b:98:7d:76:93:f2:22:21:50:70:ca:ae:36:
                    86:61:07:13:83:65:53:68:7b:92:b4:27:8e:60:28:
                    88:1e:ac:1b:37:f2:af:77:44:5a:42:c4:2b:f2:15:
                    e6:0b:e6:fc:67:15:07:80:ac:24:8e:d5:f4:37:77:
                    66:f0:a5:16:90:5a:ac:fe:33:29:44:c6:66:f5:a4:
                    b7:4f:44:ce:84:79:d5:0f:0b:08:4d:66:08:ab:7d:
                    f7:96:b2:f3:c6:f3:f1:45:18:87:84:ac:ce:41:a1:
                    19:4f:ef:31:84:5c:4a:cb:aa:99:63:13:b1:3c:98:
                    b7:d8:9f:0f:a2:ea:46:9c:fc:20:1c:0e:f8:e0:fb:
                    b1:fd:ca:a9:42:47:86:13:7c:96:6a:ea:72:e6:a6:
                    22:95:c9:d9:c8:7f:c4:6a:ea:be:d4:51:2d:c5:b6:
                    51:b1:02:22:57:bd:75:0e:48:f5:09:63:ee:08:aa:
                    0a:32:6a:8c:3d:28:a0:f2:fc:e9:e4:7d:d0:be:8a:
                    0f:ac:85:d9:79:03:7d:2c:74:ad:b0:7a:57:3b:e3:
                    f8:54:0c:ce:74:54:e4:33:49:91:25:99:00:bb:1f:
                    82:26:d7:cc:f1:95:37:67:e7:50:04:50:b2:5a:cd:
                    98:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9A:77:34:A7:F5:2B:CE:1B:B2:3E:8A:A2:FD:64:58:D8:2D:8E:CE
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/6901d34762335d3cd37b4b0ae4bf765c532e4072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.234.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         0d:50:34:b6:24:05:33:0d:33:0d:36:08:16:e8:5a:56:cd:b5:
         80:5b:c7:21:8b:5d:d4:94:28:86:8f:de:60:53:c5:7e:11:c4:
         96:66:41:11:d2:a5:6e:33:e5:b7:ba:b1:d1:eb:88:91:71:00:
         eb:0e:f5:04:01:fb:03:69:1c:f5:76:85:c1:a2:d4:e5:ea:95:
         59:ec:1d:fb:6d:c4:0b:dd:7b:0b:39:3f:f1:b6:c0:38:15:21:
         ea:cc:5a:00:22:e1:f8:a4:4d:8a:40:ba:a3:cd:61:0c:63:06:
         d4:17:10:f4:9b:ec:db:af:50:e7:dd:1c:3b:22:04:83:b7:93:
         20:a7:24:d1:1e:81:43:f9:8a:75:fc:4e:0a:b4:d2:99:16:01:
         6d:06:56:cc:26:3c:0d:29:03:d8:d7:72:88:9f:31:0f:f3:e1:
         05:11:69:93:64:f7:96:73:5a:3f:de:3d:8e:6e:30:34:fe:5c:
         ef:40:65:82:63:3e:8d:19:d6:3d:ed:79:31:31:81:92:a0:1e:
         b9:d9:c7:a1:5f:28:04:29:58:5f:cf:fa:08:11:07:1f:3a:24:
         9d:fa:63:1a:cd:39:1b:c7:80:0a:41:31:0b:9c:bb:8a:9b:50:
         1c:12:83:85:95:75:e9:ec:fd:af:6f:98:a3:d3:86:b7:e1:5e:
         e4:1e:b9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----