Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e76f41e3-fe70-4af6-9f3d-768d47cb2504/3189bcbe3fbc1ff4e53f53b6b7562e821aa34c68.roa
File:                     3189bcbe3fbc1ff4e53f53b6b7562e821aa34c68.roa (raw, json)
Hash identifier:          VcXXt14BOa54kxkGgTNe/Q3zzlt69QupJ0aASEspKIk=
Subject key identifier:   8B:65:4A:5A:9C:5D:AB:56:8C:DB:95:FA:3F:7B:AB:73:CE:23:8E:03
Certificate issuer:       /CN=7be338779993b5a43526ba10761aa524da070d7d
Certificate serial:       205C00
Authority key identifier: 49:6C:BD:64:40:D7:D4:BF:CD:B6:0B:A4:FC:3B:D1:07:8A:1F:1B:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7be338779993b5a43526ba10761aa524da070d7d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e76f41e3-fe70-4af6-9f3d-768d47cb2504/3189bcbe3fbc1ff4e53f53b6b7562e821aa34c68.roa
Signing time:             Mon 24 Apr 2023 15:03:49 +0000
ROA not before:           Sun 23 Apr 2023 15:03:49 +0000
ROA not after:            Thu 24 Apr 2025 15:03:49 +0000
asID:                     52336
IP address blocks:        167.250.112.0/22 maxlen: 22
                          2801:158::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2120704 (0x205c00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7be338779993b5a43526ba10761aa524da070d7d
        Validity
            Not Before: Apr 23 15:03:49 2023 GMT
            Not After : Apr 24 15:03:49 2025 GMT
        Subject: CN=3189bcbe3fbc1ff4e53f53b6b7562e821aa34c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f7:44:6d:3e:c7:29:7a:90:cf:45:00:c2:88:
                    71:40:42:04:84:90:13:58:22:cc:62:27:c6:51:5b:
                    3a:2f:7f:68:fe:ea:b1:f1:13:fa:d8:cb:9f:f6:03:
                    2e:37:d0:fd:fc:de:fc:eb:06:af:02:d1:2f:ef:2c:
                    80:45:bb:ea:e4:ce:45:8f:d3:fa:c1:f2:4e:f4:31:
                    f7:f6:b9:9d:32:c2:c2:09:01:3d:db:d4:87:68:25:
                    f1:59:05:d2:6d:d5:6a:3f:62:6d:fd:64:13:c6:6e:
                    6e:9d:f5:08:4d:5a:1b:17:ff:56:05:5e:90:62:10:
                    d8:31:f8:c8:b1:fa:f7:5c:6d:08:c8:87:6a:27:10:
                    ee:2a:a7:85:eb:92:86:b0:f8:47:62:f4:74:f7:48:
                    22:03:6d:3e:4e:84:b0:2d:2a:9b:a9:1c:70:8a:21:
                    89:bc:bb:72:33:78:6d:5d:e5:fb:1c:56:91:33:4c:
                    54:24:9a:8d:f6:b6:b1:f5:7d:12:ff:10:39:aa:72:
                    fa:97:b6:c6:39:1b:03:b2:98:b3:ea:df:d0:13:45:
                    e7:19:02:d1:7e:e5:10:a9:9e:5e:71:be:16:20:56:
                    f7:ad:60:f2:50:e6:f1:28:aa:26:08:6c:45:79:0c:
                    32:b3:2b:9f:31:89:09:83:06:f0:f7:08:33:c1:94:
                    c3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:65:4A:5A:9C:5D:AB:56:8C:DB:95:FA:3F:7B:AB:73:CE:23:8E:03
            X509v3 Authority Key Identifier:
                keyid:49:6C:BD:64:40:D7:D4:BF:CD:B6:0B:A4:FC:3B:D1:07:8A:1F:1B:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7be338779993b5a43526ba10761aa524da070d7d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e76f41e3-fe70-4af6-9f3d-768d47cb2504/3189bcbe3fbc1ff4e53f53b6b7562e821aa34c68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e76f41e3-fe70-4af6-9f3d-768d47cb2504/7be338779993b5a43526ba10761aa524da070d7d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.112.0/22
                IPv6:
                  2801:158::/36

    Signature Algorithm: sha256WithRSAEncryption
         13:e5:a9:81:8b:99:10:e0:17:09:fe:e5:ee:4f:ca:fb:b8:37:
         e0:38:e4:23:8f:4d:04:06:bd:f9:ae:c4:12:e9:ef:8d:22:96:
         39:b3:5b:7a:41:8d:21:5a:f9:da:92:86:19:9a:2e:6a:50:eb:
         95:7e:c7:e9:91:1f:0f:4d:27:4a:38:88:59:05:e6:e6:bb:4d:
         ad:5c:52:4a:ea:01:f5:a7:70:e4:34:f7:de:eb:d9:48:4d:23:
         dd:68:60:3e:0d:a5:d7:7f:48:51:77:3b:b8:1e:6a:82:92:d1:
         2a:37:22:30:88:5f:d4:f3:64:59:07:4a:08:f1:ac:2c:89:de:
         a8:6c:ec:b4:2b:dd:7c:c3:ea:50:92:b4:d8:70:fa:f6:1f:ce:
         ce:c0:ae:8e:98:f2:a2:45:a1:e3:19:4a:5a:96:74:bb:20:fa:
         00:fd:d4:2f:0f:e1:12:62:9c:00:32:5c:4c:0a:52:3a:61:ae:
         af:80:0f:d5:b5:ca:c5:e1:97:02:08:b8:70:c9:8b:af:a4:6c:
         7f:7f:16:75:2f:84:46:58:8b:3a:3b:21:2b:9a:26:bf:c2:cf:
         58:04:83:a4:77:cb:72:0b:3d:6a:82:86:c9:84:c4:85:72:0c:
         71:5c:f9:78:12:56:ec:5e:24:b5:0b:78:79:a0:a3:64:fc:1c:
         0d:83:8b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----