Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/cd92010daa3f0ec8b9a3996cc16fd6216cd1c9c7.roa
File:                     cd92010daa3f0ec8b9a3996cc16fd6216cd1c9c7.roa (raw, json)
Hash identifier:          EbG8I+LhM5rfl4J8hHGG05WPDU8sg8sibZBrXGzH5SE=
Subject key identifier:   C8:84:8F:9C:D6:3F:43:FC:0F:E6:06:B7:5B:72:7E:14:FE:AE:28:60
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       1CD823
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/cd92010daa3f0ec8b9a3996cc16fd6216cd1c9c7.roa
Signing time:             Fri 30 Sep 2022 01:22:10 +0000
ROA not before:           Wed 24 Mar 2021 14:34:57 +0000
ROA not after:            Tue 24 Mar 2026 14:34:57 +0000
asID:                     27817
IP address blocks:        186.113.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1890339 (0x1cd823)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Mar 24 14:34:57 2021 GMT
            Not After : Mar 24 14:34:57 2026 GMT
        Subject: CN=cd92010daa3f0ec8b9a3996cc16fd6216cd1c9c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:40:ef:9a:b9:96:21:d5:91:3e:11:b9:bf:da:
                    6d:65:f7:b6:d8:9c:ed:6d:0c:87:bf:54:ce:73:6a:
                    34:62:ad:4e:95:a1:8d:17:63:a5:31:57:75:84:d2:
                    84:00:81:fb:3f:b8:81:7d:b6:c5:65:e0:a2:08:e9:
                    16:48:6e:69:5e:ab:43:fa:da:27:56:e0:a0:5f:d3:
                    4e:6d:64:72:f3:0f:b1:99:0f:a1:ba:52:90:4d:7a:
                    c3:63:b7:d5:1f:35:f3:69:6d:9e:69:ff:3e:d6:87:
                    b0:f9:b6:ad:12:69:17:cb:a3:ca:b0:ab:d0:e8:ec:
                    68:63:57:21:c3:8c:81:f4:be:91:40:39:ba:bc:c6:
                    67:89:8b:17:9d:46:e8:ab:06:0a:98:5e:1f:66:23:
                    2b:72:0d:33:ae:c8:be:53:a4:ba:69:88:7a:b5:f1:
                    43:5d:00:a3:cd:46:96:1e:1c:de:22:89:1e:63:fd:
                    b9:e2:67:ab:67:42:1c:ca:68:9e:20:85:f2:97:94:
                    10:c0:4f:81:52:88:ec:8a:8f:d6:ed:3e:8d:7c:19:
                    47:4c:4d:43:0b:d1:08:3f:50:68:b4:0c:86:59:ba:
                    b9:6a:ae:b7:0e:7b:21:e2:a5:83:f8:a5:7d:00:13:
                    81:54:e7:a9:7d:ed:f9:ed:ba:60:7a:ff:dc:a6:03:
                    f1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:84:8F:9C:D6:3F:43:FC:0F:E6:06:B7:5B:72:7E:14:FE:AE:28:60
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/cd92010daa3f0ec8b9a3996cc16fd6216cd1c9c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.113.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:9f:83:95:ff:fb:34:bf:7b:71:ec:52:3a:56:0b:24:55:e4:
         57:fd:2b:0d:3d:66:84:16:5d:43:b8:d5:87:c6:b5:47:35:da:
         c5:b8:bb:87:c8:8b:d8:05:ed:1b:ad:c6:88:4e:e4:bc:5d:f3:
         0f:77:75:fe:36:49:8c:d9:9b:80:0c:97:11:e4:35:e7:e7:83:
         f1:77:92:a6:5f:f2:11:0d:c0:d1:ec:99:40:98:61:7d:a3:ad:
         68:32:5e:f0:78:92:aa:b3:51:fb:78:c5:ea:e3:db:ee:b3:41:
         16:c0:ca:4f:c5:6c:93:f4:a0:40:9b:f8:17:26:36:67:b8:47:
         21:9a:de:16:36:f7:3f:7d:2d:3f:e6:79:de:2e:8a:3e:8a:c1:
         f4:7a:ca:1e:74:ff:59:8b:a1:91:c7:6b:78:78:b1:6d:fc:7d:
         83:72:88:a6:51:89:97:6e:a3:db:bb:52:f4:b6:2b:c3:a5:e8:
         6a:f6:5c:12:00:5f:43:37:9e:f4:9e:e5:13:7c:05:c5:7a:e6:
         c9:d9:71:87:ac:6e:c9:31:a9:3b:ce:82:aa:9f:10:1d:e5:c4:
         4f:72:34:91:46:a5:cc:f1:0c:82:53:e8:cd:97:c7:f6:3c:13:
         27:e3:11:9c:37:ee:2e:2a:ac:7f:13:83:66:8a:94:3f:85:8f:
         1f:b5:77:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----