Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/db5a445fb0bead6d7a20f75e8412237eda59a499.roa
File:                     db5a445fb0bead6d7a20f75e8412237eda59a499.roa (raw, json)
Hash identifier:          xwXRZ8K0anXUFWAKwltTQJ801lt/Tl7klYE2PeyOWSo=
Subject key identifier:   AF:90:5A:CC:CF:86:79:5C:6F:80:40:A4:E6:8B:40:04:A0:36:10:0E
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       267B19
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/db5a445fb0bead6d7a20f75e8412237eda59a499.roa
Signing time:             Wed 30 Aug 2023 17:36:25 +0000
ROA not before:           Tue 29 Aug 2023 17:36:22 +0000
ROA not after:            Sat 30 Aug 2025 17:36:22 +0000
asID:                     262182
IP address blocks:        186.118.186.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2521881 (0x267b19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Aug 29 17:36:22 2023 GMT
            Not After : Aug 30 17:36:22 2025 GMT
        Subject: CN=db5a445fb0bead6d7a20f75e8412237eda59a499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:12:97:9a:0a:47:11:b2:ae:12:b3:f5:50:41:
                    06:46:95:2b:50:4d:42:8d:74:90:e5:8b:ff:f2:15:
                    42:a6:14:88:c9:8a:92:17:a6:34:eb:82:9a:a4:3d:
                    3d:3c:f8:db:c1:82:95:39:25:74:07:78:fe:58:a3:
                    5d:9a:d1:f3:80:93:e0:0e:33:50:ac:4e:99:06:61:
                    c4:33:fa:fc:8e:87:9a:8c:65:f1:8d:00:4e:64:5f:
                    7f:aa:ee:18:73:1b:1a:1b:40:53:39:da:15:49:fa:
                    fe:74:6c:01:24:ab:86:c5:b7:f2:e0:d8:4d:ad:3e:
                    66:81:0a:b6:28:5e:ca:23:b4:96:6c:e1:1e:03:6a:
                    be:7c:df:45:c6:62:d7:07:93:bf:fe:f3:b3:13:6f:
                    bb:a3:48:0e:f9:bf:64:71:d0:b8:51:e7:06:44:1a:
                    49:14:fc:a9:14:40:77:d2:9f:70:6d:2b:e4:98:d7:
                    77:38:86:b7:45:33:09:4d:4b:39:d6:4b:27:0a:64:
                    7f:54:fa:62:b2:43:2e:d4:ff:7d:04:8b:bc:f7:56:
                    dc:f3:17:82:78:9b:b9:1a:62:dd:0e:43:a4:c9:89:
                    0e:6c:18:0c:e3:53:dd:08:3b:c4:1f:86:db:02:5c:
                    31:08:29:d7:41:4b:1c:7b:bf:3f:41:48:03:8f:d6:
                    66:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:90:5A:CC:CF:86:79:5C:6F:80:40:A4:E6:8B:40:04:A0:36:10:0E
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/db5a445fb0bead6d7a20f75e8412237eda59a499.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.118.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:00:1a:c4:b7:52:fc:db:a0:e5:0b:11:74:4e:b2:02:61:97:
         d0:68:6d:37:9c:06:14:c2:50:15:37:bf:b5:30:50:d8:66:52:
         99:81:6b:df:58:2b:fb:cf:51:18:93:de:9f:a0:ae:1f:87:fd:
         b9:9e:de:36:3f:6b:de:6a:da:c1:ea:27:6a:ce:a1:c9:0b:ff:
         c1:d6:32:67:9b:78:0d:6f:f2:21:0a:d7:21:4e:8a:27:3b:b2:
         d1:79:f9:3a:b2:e2:b4:83:48:ea:25:61:85:cf:66:a3:e3:84:
         06:ec:bd:7d:9e:57:41:1b:ae:43:41:8c:3a:84:ea:32:6c:4b:
         b4:ea:c1:f9:44:fb:d0:d3:01:17:14:7d:e5:bf:bc:02:be:41:
         87:6a:30:8d:0a:a7:11:ed:e9:7e:60:6d:86:8f:3d:95:52:c6:
         bb:d9:ad:af:b3:2e:a0:b7:85:00:6f:bd:41:12:a3:26:63:9b:
         52:a4:f2:54:0b:3f:c5:8c:a7:72:4d:74:d5:41:23:2f:b1:b6:
         bb:1c:45:e1:52:5e:2e:7e:30:ac:65:c2:60:22:ae:63:d1:79:
         26:3d:69:f5:a8:a1:e7:97:e4:3e:9d:2f:c3:10:e1:bf:31:cd:
         d2:a5:56:41:db:0d:f6:aa:53:e2:2a:40:d0:39:6b:26:a7:33:
         74:13:c0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----