Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/d6ecf05a42dafff989c48aa87a7cc4d199a483e5.roa
File:                     d6ecf05a42dafff989c48aa87a7cc4d199a483e5.roa (raw, json)
Hash identifier:          6a+EeqkYrddKP761oXy1aDvk0QnQCuyyp+Wy6F//ZC8=
Subject key identifier:   F9:77:89:41:F4:B5:5B:7E:BB:61:D6:32:83:D5:2D:0D:07:E7:96:0D
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       1D46C6
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/d6ecf05a42dafff989c48aa87a7cc4d199a483e5.roa
Signing time:             Mon 03 Oct 2022 13:40:02 +0000
ROA not before:           Mon 26 Sep 2022 20:33:30 +0000
ROA not after:            Thu 26 Sep 2024 20:33:30 +0000
asID:                     3816
IP address blocks:        152.204.0.0/17 maxlen: 17
                          152.204.128.0/22 maxlen: 22
                          152.204.128.0/24 maxlen: 24
                          152.204.129.0/24 maxlen: 24
                          152.204.130.0/24 maxlen: 24
                          152.204.131.0/24 maxlen: 24
                          152.204.132.0/24 maxlen: 24
                          152.204.134.0/24 maxlen: 24
                          152.204.160.0/20 maxlen: 20
                          152.205.0.0/18 maxlen: 18
                          152.205.192.0/18 maxlen: 18

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1918662 (0x1d46c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Sep 26 20:33:30 2022 GMT
            Not After : Sep 26 20:33:30 2024 GMT
        Subject: CN=d6ecf05a42dafff989c48aa87a7cc4d199a483e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0b:17:99:17:da:58:98:c1:fa:e8:de:ce:52:
                    01:6a:f4:2d:30:ed:3c:3c:17:00:db:23:a7:2e:d5:
                    77:8b:99:cd:14:76:82:2b:90:4f:0d:85:1c:f6:8e:
                    97:14:d8:e3:a4:c7:ec:24:f8:5c:18:2d:06:49:54:
                    7b:e0:48:88:b2:81:89:c8:81:95:79:59:9d:34:83:
                    a2:c9:f9:76:e0:f0:3c:cc:e7:0d:f1:a2:46:86:bb:
                    b5:97:eb:a9:eb:6c:d5:47:6d:e8:c5:01:ed:ec:2b:
                    89:51:69:91:86:24:39:48:d8:f1:f6:d4:86:d6:72:
                    ac:52:3e:54:1a:4e:9f:87:9d:44:14:6f:40:9b:50:
                    c9:85:a2:aa:53:7d:ee:48:0b:9d:16:8e:33:8f:ba:
                    5e:91:6a:b8:f2:51:44:ec:df:ef:c0:2a:3c:69:3c:
                    4b:be:04:6d:2a:ef:86:9f:ec:29:cb:0f:56:21:65:
                    3a:94:07:f9:1b:29:8a:60:ef:61:b2:6d:32:b3:9a:
                    af:92:19:d2:2d:f4:8c:f4:d2:9c:b6:fa:e7:e9:60:
                    9f:76:a1:a0:5d:85:e6:45:72:d6:b8:ad:03:d5:2d:
                    0c:4f:10:b4:ce:df:e0:b0:1e:86:7d:fd:48:e5:fc:
                    50:2d:18:a1:27:35:7d:42:dc:a7:ca:57:73:41:16:
                    f5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:77:89:41:F4:B5:5B:7E:BB:61:D6:32:83:D5:2D:0D:07:E7:96:0D
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/d6ecf05a42dafff989c48aa87a7cc4d199a483e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.204.0.0-152.204.132.255
                  152.204.134.0/24
                  152.204.160.0/20
                  152.205.0.0/18
                  152.205.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1d:04:ba:b5:52:0e:9c:41:07:5a:97:b2:ca:5d:00:5b:89:8b:
         2b:5c:25:15:fb:65:f8:bb:91:07:9e:68:81:81:f3:19:c3:1b:
         1f:0c:3a:2c:88:98:67:30:40:20:a8:0e:f0:90:2c:45:1a:db:
         e1:c2:a3:0a:3e:3e:d4:5a:d1:c0:36:45:b9:d7:45:37:07:25:
         27:4e:16:31:0c:96:1e:2c:d1:18:ef:15:a5:c5:8e:fb:ba:a3:
         b8:71:b5:9f:b7:8e:2c:66:ab:47:c2:e7:fb:3a:00:f7:f7:a0:
         20:b3:08:8a:5c:13:e7:c8:87:71:df:e6:f6:80:49:a8:17:72:
         87:22:5f:2f:c2:19:dc:61:63:92:57:da:b3:01:06:55:b8:14:
         ef:a5:6f:a5:e6:24:7e:f5:b6:18:25:3e:a2:ef:0e:88:b9:9d:
         93:13:ec:71:39:8a:97:9e:94:c2:7d:29:18:a5:52:c2:06:12:
         b3:49:ab:67:11:fc:bd:7d:34:c9:95:e6:9f:1c:c8:c0:09:53:
         d9:15:45:dc:52:5e:c5:11:47:62:1d:96:18:30:4d:19:94:69:
         7f:42:2b:f4:18:80:30:5f:1b:91:5b:72:76:8a:3a:21:f4:4a:
         0a:61:ee:b0:9c:88:47:9b:bb:93:09:c9:2b:0d:5d:19:09:fd:
         6e:27:cc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----