Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c9dd7231-a8d6-4c51-949e-30d2bc58f091/5f5cc938c3dcfc6354259a3224a3a47671a37e25.roa
File:                     5f5cc938c3dcfc6354259a3224a3a47671a37e25.roa (raw, json)
Hash identifier:          tY57qXszZIlBbHcPK0UcNXHYV/defM9FaFF1P/HN5ss=
Subject key identifier:   EF:0D:C5:3E:87:BD:E4:F8:2A:17:74:9C:E2:2E:08:D5:92:03:75:3D
Certificate issuer:       /CN=0317b9d1456b48aa14ec8d784f305e45943a6533
Certificate serial:       08BC8B
Authority key identifier: F4:47:05:7F:65:3B:51:F1:25:37:4B:6E:18:CD:11:CA:E3:4C:38:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0317b9d1456b48aa14ec8d784f305e45943a6533.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c9dd7231-a8d6-4c51-949e-30d2bc58f091/5f5cc938c3dcfc6354259a3224a3a47671a37e25.roa
Signing time:             Wed 26 Apr 2023 16:47:33 +0000
ROA not before:           Tue 25 Apr 2023 16:47:33 +0000
ROA not after:            Sat 26 Apr 2025 16:47:33 +0000
asID:                     265622
IP address blocks:        200.110.104.0/23 maxlen: 24
                          2806:3a3::/34 maxlen: 35

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 572555 (0x8bc8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0317b9d1456b48aa14ec8d784f305e45943a6533
        Validity
            Not Before: Apr 25 16:47:33 2023 GMT
            Not After : Apr 26 16:47:33 2025 GMT
        Subject: CN=5f5cc938c3dcfc6354259a3224a3a47671a37e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ec:5b:cd:d1:2c:dc:04:39:ff:55:52:d0:7e:
                    a1:0b:c4:67:bd:37:49:e6:56:26:79:18:b9:07:fe:
                    ff:71:7c:56:04:c5:c9:02:aa:9c:3d:a7:63:f4:d2:
                    79:1a:1f:87:f4:67:41:79:e4:55:4f:01:38:de:8b:
                    71:f6:a5:b5:0b:53:10:58:f0:2e:63:f8:4b:40:79:
                    87:a3:0b:34:79:a0:d9:f5:3d:b5:ab:39:65:0c:88:
                    2c:37:20:07:e8:bb:cc:48:df:e0:cd:9b:a4:fe:0a:
                    9b:84:21:56:ac:f6:b9:58:d5:41:e8:57:b3:09:da:
                    85:2b:e8:ba:23:36:d5:14:4d:63:c5:86:28:62:ac:
                    4a:2a:5c:e4:24:49:0d:88:fc:52:51:ac:c0:73:3a:
                    21:fe:6f:d4:31:02:a6:07:bf:20:3d:69:5a:1d:13:
                    41:e5:26:78:d8:7f:5a:df:28:41:6e:09:56:8c:6f:
                    eb:0e:95:10:cf:7b:53:d7:62:ae:45:53:08:86:98:
                    15:d1:88:e9:c1:00:81:e9:5c:78:24:62:92:d7:97:
                    b6:0f:c1:7b:5e:be:27:7b:c8:7a:1f:55:51:64:7d:
                    87:e3:71:bb:4f:ef:30:d7:85:9b:c5:c7:23:97:4e:
                    88:68:7f:5e:5e:32:80:8e:3d:2a:b1:79:f6:ed:5d:
                    53:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0D:C5:3E:87:BD:E4:F8:2A:17:74:9C:E2:2E:08:D5:92:03:75:3D
            X509v3 Authority Key Identifier:
                keyid:F4:47:05:7F:65:3B:51:F1:25:37:4B:6E:18:CD:11:CA:E3:4C:38:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0317b9d1456b48aa14ec8d784f305e45943a6533.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c9dd7231-a8d6-4c51-949e-30d2bc58f091/5f5cc938c3dcfc6354259a3224a3a47671a37e25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c9dd7231-a8d6-4c51-949e-30d2bc58f091/0317b9d1456b48aa14ec8d784f305e45943a6533.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.104.0/23
                IPv6:
                  2806:3a3::/34

    Signature Algorithm: sha256WithRSAEncryption
         80:06:15:13:59:4a:07:5a:15:05:79:cc:37:a3:48:fd:b4:3e:
         5f:7f:7a:65:c5:29:e8:e4:59:fc:32:72:66:c3:de:7b:c0:e1:
         e8:b0:35:bb:87:4e:64:73:53:3f:79:84:6b:67:53:e2:e0:89:
         1c:9f:18:c9:5b:f7:7f:43:39:6d:d1:04:3e:91:19:20:60:43:
         56:0e:99:5d:f8:2f:fe:81:6c:af:7c:a8:eb:68:57:d6:f6:14:
         66:27:2e:17:8f:80:20:17:21:98:08:9d:0e:79:0e:77:3c:45:
         20:94:4b:c5:5b:74:53:78:ab:d1:aa:7f:1b:5d:e1:35:c7:14:
         ef:e3:89:b9:83:d3:b6:98:39:6e:dc:07:f8:f7:e8:a3:9c:66:
         5e:98:f9:97:f9:89:3e:1c:b9:c5:69:dd:d1:3f:cf:e5:a0:74:
         33:6f:e3:45:39:a4:0c:42:18:fb:c3:13:24:fe:23:35:21:de:
         eb:ee:d2:81:b3:3b:67:25:6b:c1:1e:fe:4b:ea:64:6b:c9:bb:
         a6:0d:74:fc:fc:b8:92:05:d0:86:05:60:e3:6c:4b:b8:f9:e8:
         04:81:61:14:9c:10:75:53:5a:14:e0:62:50:e9:89:a7:2d:e0:
         79:e6:d8:f2:62:2c:e0:97:2d:10:d2:74:3f:89:9d:77:ba:f0:
         4e:bc:46:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----