Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/38e3adf441444e776963e7cf53d3de76ef73bfbb.roa
File:                     38e3adf441444e776963e7cf53d3de76ef73bfbb.roa (raw, json)
Hash identifier:          /UYUn7Ftao4zp5p0l8fcG32mgHAwbX5R8QprhvMsKJM=
Subject key identifier:   16:91:83:63:81:56:56:99:1C:EC:6D:BC:27:EC:DD:3B:35:56:D8:B6
Certificate issuer:       /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial:       0AF833
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/38e3adf441444e776963e7cf53d3de76ef73bfbb.roa
Signing time:             Fri 18 Nov 2022 18:47:20 +0000
ROA not before:           Thu 17 Nov 2022 18:46:41 +0000
ROA not after:            Mon 18 Nov 2024 18:46:41 +0000
asID:                     27768
IP address blocks:        201.217.18.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 718899 (0xaf833)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
        Validity
            Not Before: Nov 17 18:46:41 2022 GMT
            Not After : Nov 18 18:46:41 2024 GMT
        Subject: CN=38e3adf441444e776963e7cf53d3de76ef73bfbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:68:bd:3a:77:ef:21:07:5a:db:59:00:24:d9:
                    ae:1d:56:4b:b3:31:50:6a:02:f8:17:ca:36:cb:42:
                    db:90:56:c9:6a:1f:91:49:07:2f:54:e5:e6:7b:8e:
                    e1:85:98:e7:5e:e9:1b:06:5d:f8:26:cc:f9:73:e1:
                    61:e8:c0:16:eb:84:56:23:04:9d:6c:a0:75:fb:74:
                    c1:0c:ea:ed:af:d2:a4:26:ff:7b:e8:fd:bb:f9:9e:
                    04:f4:f0:22:34:71:c1:ba:13:db:c0:a4:71:a3:e7:
                    0d:d0:fe:fc:75:76:ba:47:31:10:26:f0:8a:17:cf:
                    ff:6c:bd:40:85:34:f4:3e:ae:b9:f3:97:73:d6:5a:
                    3a:e8:13:37:0c:19:cf:f3:11:15:f6:91:20:bf:a3:
                    f6:c7:95:81:7a:42:fc:49:1b:21:95:2c:2e:ca:fe:
                    4b:5d:5b:01:62:1f:3c:71:f9:8c:68:78:80:99:65:
                    61:74:8d:d5:9a:77:78:56:82:64:72:f2:0b:36:26:
                    53:ee:c3:fd:8b:4a:63:a2:b6:0d:70:dd:4a:37:88:
                    76:1f:8f:db:cf:27:c0:e1:bb:dc:4a:6c:53:19:b6:
                    58:25:5c:21:ba:b9:ef:7d:38:cf:b0:43:07:c6:d3:
                    83:ac:f7:8e:74:91:56:3f:b1:85:58:90:e0:55:c7:
                    79:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:91:83:63:81:56:56:99:1C:EC:6D:BC:27:EC:DD:3B:35:56:D8:B6
            X509v3 Authority Key Identifier:
                keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/38e3adf441444e776963e7cf53d3de76ef73bfbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:37:fc:53:83:65:f5:fe:47:b3:e3:55:7c:21:ba:fb:32:aa:
         66:50:22:f9:83:e4:48:24:19:53:15:21:7d:c5:03:11:0e:cf:
         f9:3a:26:fa:33:3d:1c:1f:41:f5:e5:46:98:2c:a4:e9:4b:e3:
         f4:df:4e:8a:7f:92:ca:00:c8:da:75:8a:97:62:ea:da:e9:66:
         d0:ec:24:25:31:71:90:3a:ab:9d:54:c6:6c:d1:33:ec:7b:fb:
         68:56:04:58:3b:2e:43:68:90:c5:0a:c3:32:84:20:b1:53:92:
         d2:40:b8:12:22:02:36:4b:ef:a1:e5:57:9d:eb:c8:cd:83:ea:
         36:84:b9:24:3a:97:92:67:c6:d8:70:5c:74:ac:bf:87:76:ca:
         49:e4:33:ab:dd:3a:37:07:85:03:17:c9:da:5f:83:6d:4d:54:
         a1:bf:95:86:3a:3f:a1:33:6e:54:34:dc:29:fa:03:cf:cf:55:
         0a:38:34:4a:54:27:d0:16:4b:fd:84:93:9e:7d:b7:29:63:c6:
         35:d0:3b:55:88:87:c0:c2:f0:18:69:be:da:56:9f:68:00:f4:
         b1:fa:69:a8:f6:ff:47:cd:78:f8:5b:97:39:c3:2c:53:ce:40:
         3d:99:49:0a:4f:f4:47:27:e7:34:ce:ec:2a:5a:96:10:35:41:
         e0:70:f1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----