Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/16a111a395a4124fcdb357cdfb5975638622b6cb.roa
File:                     16a111a395a4124fcdb357cdfb5975638622b6cb.roa (raw, json)
Hash identifier:          JT63AhunXCCl3KQK2TB8Y69PqGHl+1t2NBX9SiEPIz0=
Subject key identifier:   62:08:DA:FA:09:DA:C9:CD:1F:84:6A:73:7E:5D:36:C4:7E:9A:0C:05
Certificate issuer:       /CN=2ea1715958333398146179fdbf2e485fe6525742
Certificate serial:       1A2B8B
Authority key identifier: 60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/16a111a395a4124fcdb357cdfb5975638622b6cb.roa
Signing time:             Fri 15 Sep 2023 21:29:01 +0000
ROA not before:           Thu 14 Sep 2023 21:29:00 +0000
ROA not after:            Fri 15 Sep 2028 21:29:00 +0000
asID:                     52266
IP address blocks:        201.219.252.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1715083 (0x1a2b8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ea1715958333398146179fdbf2e485fe6525742
        Validity
            Not Before: Sep 14 21:29:00 2023 GMT
            Not After : Sep 15 21:29:00 2028 GMT
        Subject: CN=16a111a395a4124fcdb357cdfb5975638622b6cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:65:9a:b5:18:65:fc:9a:38:38:db:5c:ca:06:
                    8f:22:94:76:3f:03:43:67:f6:ed:6d:78:e5:63:55:
                    1d:06:10:2a:eb:98:cc:85:45:0a:ba:e1:fe:48:cc:
                    a2:f6:7d:8f:a8:34:5e:45:c0:5d:e6:cd:1e:16:ac:
                    2d:84:0f:e9:09:78:0d:7e:8b:04:4c:7c:a2:07:5a:
                    02:5a:7a:a7:2f:0c:7e:f5:c2:61:24:4b:b4:70:b0:
                    09:4f:dc:e9:c4:02:1a:46:06:05:66:ac:c0:3e:7d:
                    51:31:1a:56:15:e3:2e:a3:4b:ef:d8:5d:5e:7e:12:
                    4c:2e:b1:e3:2b:4f:0c:f9:79:14:68:d3:0d:9d:7c:
                    87:63:11:8e:85:74:f8:66:ae:c4:0b:c8:bb:a9:f3:
                    bf:c0:1d:c2:36:89:09:79:5e:61:25:75:8d:0d:cd:
                    34:f7:73:40:8d:46:3c:6c:8f:16:e3:a3:5d:27:1b:
                    3c:81:4a:d4:4a:fd:37:3d:96:ce:ae:17:a4:8a:85:
                    c3:01:b8:01:75:ec:f9:6f:44:37:3a:3d:51:47:e2:
                    8c:06:a4:22:1d:63:6c:65:d2:e2:d3:69:bd:b0:cb:
                    7c:0b:e0:27:be:1d:53:fc:55:47:12:83:e8:5a:5e:
                    33:e6:2f:f3:4e:25:05:c7:9d:f2:26:8a:00:83:cb:
                    e9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:08:DA:FA:09:DA:C9:CD:1F:84:6A:73:7E:5D:36:C4:7E:9A:0C:05
            X509v3 Authority Key Identifier:
                keyid:60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/16a111a395a4124fcdb357cdfb5975638622b6cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/2ea1715958333398146179fdbf2e485fe6525742.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:2e:93:3a:0e:bb:da:53:f3:f3:bd:6d:9d:e6:52:c0:6a:2c:
         90:eb:ce:9d:6e:65:1b:5f:91:da:a6:c4:2a:3c:b7:6b:64:6c:
         47:ae:06:7e:0f:26:16:01:e6:3f:6b:d1:cb:1e:45:28:a2:28:
         31:8f:51:71:0d:cd:5d:6c:e5:1f:b8:e4:6f:2f:ce:af:57:7b:
         da:a4:8a:db:6e:32:ff:e0:33:93:bf:c1:57:18:e0:c5:28:ba:
         4a:e2:8c:c0:3a:ad:7f:ba:64:b9:3d:cb:5e:8c:1a:e4:71:04:
         b3:ff:99:5b:75:70:fc:76:b7:d9:e4:16:4f:94:40:c4:c8:09:
         d8:72:6e:91:4a:1f:c1:73:16:e3:e3:16:6f:03:07:9b:85:ef:
         e6:c5:d8:45:a5:85:ab:13:ec:5e:23:42:d5:bd:99:1e:f5:39:
         3e:ce:bf:8d:f0:43:d9:82:50:27:ba:e6:e0:ab:8c:f0:98:7e:
         a7:ab:7c:93:f6:ff:c7:b6:f7:50:f0:a1:c6:90:08:9d:40:0c:
         9d:4d:76:43:c0:d7:4a:76:7c:60:df:d0:14:62:db:d0:93:59:
         29:32:29:0b:be:6e:1d:1c:b3:0d:07:d0:6e:26:c2:d6:6f:7b:
         84:99:b6:46:c2:e8:55:ca:ff:36:0b:f7:aa:9e:96:99:ac:d6:
         56:51:0b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----