Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/0627b984890e0ed954270a08efd213644edba520.roa
File:                     0627b984890e0ed954270a08efd213644edba520.roa (raw, json)
Hash identifier:          77wOQBg1zIoIv/dH60op+pDCID0U9Vtuq1A681MdhoY=
Subject key identifier:   54:92:0D:59:91:CA:AC:98:A3:2D:9D:10:B2:3A:E2:F4:B7:B6:D9:AC
Certificate issuer:       /CN=15ab7504ada349e4ed5816cfb2531293bf4331b7
Certificate serial:       12F6D4
Authority key identifier: 64:86:0D:4F:6C:C0:F9:A1:DB:0B:C9:45:B4:99:E6:01:F2:13:27:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ab7504ada349e4ed5816cfb2531293bf4331b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/0627b984890e0ed954270a08efd213644edba520.roa
Signing time:             Fri 16 Dec 2022 11:49:25 +0000
ROA not before:           Thu 15 Dec 2022 11:48:56 +0000
ROA not after:            Mon 16 Dec 2024 11:48:56 +0000
asID:                     28000
IP address blocks:        201.219.252.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1242836 (0x12f6d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ab7504ada349e4ed5816cfb2531293bf4331b7
        Validity
            Not Before: Dec 15 11:48:56 2022 GMT
            Not After : Dec 16 11:48:56 2024 GMT
        Subject: CN=0627b984890e0ed954270a08efd213644edba520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:d9:3f:da:95:c6:1d:25:d2:3d:b7:4a:0f:
                    03:d0:94:c0:b8:e1:47:bf:08:5b:d7:59:8a:c4:d6:
                    78:05:06:9a:3b:07:1c:ee:07:99:8a:46:cd:ff:26:
                    9c:2e:f3:73:e2:bc:66:ed:67:71:c1:ba:af:6c:d2:
                    87:62:32:47:60:c9:17:60:2b:8c:64:43:f7:96:15:
                    45:03:d9:a8:b0:6b:c6:08:0c:4f:95:20:95:fb:5c:
                    f7:32:12:c8:1c:99:e3:a3:f5:82:d3:4e:2f:a9:07:
                    6e:53:fc:73:40:70:c6:69:60:27:2e:e4:03:83:c6:
                    fe:d7:c0:b5:ab:45:a2:7c:7b:45:b0:19:4a:d2:7e:
                    13:11:df:ed:33:ed:0b:56:9d:98:fb:9e:57:44:49:
                    5d:f4:9c:ab:be:f7:5d:75:ad:51:9c:e1:95:85:09:
                    c5:3b:62:4c:98:a5:3b:d8:3e:80:c8:9c:c2:e9:f4:
                    dd:01:d6:0d:b8:bd:1e:72:48:e5:e4:0f:cd:cd:c5:
                    56:3a:e8:03:82:05:04:94:79:8f:33:a6:7e:83:f6:
                    53:45:57:8a:8e:13:0b:b8:62:67:dd:06:9a:28:6c:
                    4f:ba:c6:4e:49:4d:f2:1a:81:97:f9:19:76:90:0c:
                    c2:c4:7e:3d:a7:1b:38:46:db:82:dd:e9:b8:b5:62:
                    55:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:92:0D:59:91:CA:AC:98:A3:2D:9D:10:B2:3A:E2:F4:B7:B6:D9:AC
            X509v3 Authority Key Identifier:
                keyid:64:86:0D:4F:6C:C0:F9:A1:DB:0B:C9:45:B4:99:E6:01:F2:13:27:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ab7504ada349e4ed5816cfb2531293bf4331b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/0627b984890e0ed954270a08efd213644edba520.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/15ab7504ada349e4ed5816cfb2531293bf4331b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:f2:65:61:e2:34:6f:61:f2:50:a0:d9:77:91:27:20:c8:de:
         98:5d:5a:65:0f:16:45:fe:5a:60:0d:5f:e2:ad:77:00:6d:d8:
         e6:fa:9e:02:2b:6a:ef:5a:91:7d:8d:38:ea:c8:84:91:a0:6f:
         e8:1a:9d:e3:dc:a9:fc:54:46:04:61:3c:e7:14:2d:61:c2:09:
         09:5a:cc:6a:86:2a:de:c7:49:72:15:b5:20:35:47:e8:92:13:
         c0:4b:d8:79:bd:23:d7:17:34:3c:ee:11:e1:46:d4:cb:e6:05:
         1b:28:bb:84:a5:3e:49:19:6e:f9:36:40:00:6f:85:a2:4e:c1:
         75:4d:2e:7b:48:ba:3a:9c:44:e5:38:45:73:db:82:87:0e:c3:
         6c:b5:8f:04:6e:43:5c:8f:1c:92:c9:7d:05:4e:eb:f5:92:a3:
         c5:36:e8:d9:f7:79:77:e8:5a:77:8e:8d:b6:3c:68:22:d9:57:
         34:33:dd:01:91:63:12:87:6a:17:2c:3d:f0:78:ea:bc:46:27:
         0e:24:09:a9:17:c6:4c:a8:84:b7:b6:e6:74:b3:2d:95:00:61:
         c0:d0:8f:a2:48:60:ee:e8:57:3e:c7:b9:0d:67:fd:52:ff:9c:
         bd:9b:ad:a6:8f:e1:c8:59:a2:5d:82:b2:29:0f:7c:65:83:75:
         a7:5d:9c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----