Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/bd45c897a50103a16950ec3338ec415874974008.roa
File:                     bd45c897a50103a16950ec3338ec415874974008.roa (raw, json)
Hash identifier:          e4vtHRnaS1WCu+ZqWseDWUe3NOVXHcGCes5a+1058Sw=
Subject key identifier:   CF:F0:34:89:01:F4:48:A0:DF:0A:34:F2:72:EF:DD:2E:35:C0:F7:0F
Certificate issuer:       /CN=5f073dc50d388f5e4b8416173329e5c9fb55bacc
Certificate serial:       102911
Authority key identifier: EF:AB:01:33:53:10:96:46:AD:AC:A4:AD:C5:98:DC:A7:44:43:45:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f073dc50d388f5e4b8416173329e5c9fb55bacc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/bd45c897a50103a16950ec3338ec415874974008.roa
Signing time:             Fri 04 Nov 2022 13:50:50 +0000
ROA not before:           Sat 26 Jun 2021 03:00:00 +0000
ROA not after:            Thu 29 Jun 2023 03:00:00 +0000
asID:                     27775
IP address blocks:        186.179.128.0/17 maxlen: 24
                          190.98.0.0/19 maxlen: 24
                          190.98.32.0/19 maxlen: 24
                          190.98.64.0/19 maxlen: 24
                          190.98.64.0/22 maxlen: 24
                          190.98.96.0/19 maxlen: 24
                          200.1.156.0/22 maxlen: 24
                          200.2.160.0/20 maxlen: 24
                          200.2.176.0/20 maxlen: 24
                          2803:a200::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1059089 (0x102911)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f073dc50d388f5e4b8416173329e5c9fb55bacc
        Validity
            Not Before: Jun 26 03:00:00 2021 GMT
            Not After : Jun 29 03:00:00 2023 GMT
        Subject: CN=bd45c897a50103a16950ec3338ec415874974008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:66:61:0e:1e:5c:e8:f2:5e:15:7c:29:25:57:
                    c1:2e:8e:41:33:88:4c:ad:00:e7:f2:e6:3c:d6:0f:
                    09:2f:51:d7:20:ca:c8:14:7f:ff:eb:ea:a5:aa:d0:
                    7d:0d:9f:6b:4e:5e:9d:80:75:d8:86:bc:33:c1:65:
                    34:5b:ba:2e:99:ef:fc:82:46:2f:06:14:f7:75:a8:
                    bc:4a:51:6a:5d:e6:45:4d:fe:df:2f:11:19:1c:27:
                    7f:47:08:56:c5:b5:3c:82:54:7a:ff:ae:63:97:74:
                    d3:a3:08:ca:6d:da:16:bc:ed:db:27:fd:0f:04:ac:
                    e7:73:da:98:81:b4:e2:8e:6e:e0:34:a5:a2:a1:af:
                    11:c0:6b:0e:8c:a1:6e:06:60:c0:9a:8c:bc:72:d9:
                    9d:a7:fe:49:b1:ac:97:aa:7e:d3:70:56:5e:99:3d:
                    0c:80:5e:3f:68:77:02:9a:f2:31:f5:11:7b:e0:2b:
                    ba:c6:d2:fe:cd:b8:03:f6:6c:bb:10:d9:e4:ca:fc:
                    13:08:54:b0:dc:79:14:af:2c:19:e5:b5:14:66:2e:
                    dd:95:38:5a:54:eb:73:7f:30:66:2f:7f:cf:ed:b5:
                    f5:9a:01:22:57:c7:4c:3f:b0:06:89:a3:d3:41:53:
                    c0:9b:c0:81:7e:df:1d:03:48:1f:f4:b1:ed:98:c5:
                    dc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F0:34:89:01:F4:48:A0:DF:0A:34:F2:72:EF:DD:2E:35:C0:F7:0F
            X509v3 Authority Key Identifier:
                keyid:EF:AB:01:33:53:10:96:46:AD:AC:A4:AD:C5:98:DC:A7:44:43:45:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f073dc50d388f5e4b8416173329e5c9fb55bacc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/bd45c897a50103a16950ec3338ec415874974008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/5f073dc50d388f5e4b8416173329e5c9fb55bacc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.179.128.0/17
                  190.98.0.0/17
                  200.1.156.0/22
                  200.2.160.0/19
                IPv6:
                  2803:a200::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:f6:a4:3e:23:7f:49:35:6c:65:4c:f2:79:a5:ae:2f:12:8d:
         4c:0c:7c:88:1a:a2:9a:16:58:8b:71:9e:35:83:52:ab:94:27:
         2b:d6:7c:ab:2b:29:fb:fb:40:6e:e0:0b:91:b1:c2:1e:ef:26:
         f6:bd:8c:1d:83:81:d8:a2:15:64:d4:95:86:fd:69:64:a2:8a:
         10:e5:3f:81:74:8b:77:b9:e8:d5:ac:bb:8b:6b:6f:00:7d:93:
         d2:cf:ca:8c:aa:21:bd:a8:48:33:d4:83:ad:7f:36:54:9a:54:
         1d:bf:de:5f:70:3b:09:5b:b1:a2:95:a1:67:18:83:e1:5d:37:
         72:d6:92:a0:d0:55:a3:8c:49:76:5f:fa:c9:9f:c2:1b:9f:64:
         27:5e:21:ed:73:9c:9a:82:ff:63:6d:b7:99:2d:9c:5c:ac:06:
         7b:34:03:fe:1c:4c:d9:96:70:11:51:35:1c:3a:f5:ac:7b:04:
         f0:55:16:ba:3b:b9:6b:73:1c:bf:90:7a:47:fd:cb:d0:6f:b2:
         0c:18:3b:84:e8:d4:47:6d:d0:a9:f0:b2:44:e7:9c:1a:0b:cb:
         fa:79:e9:a2:fa:0c:87:3d:ce:d2:57:29:0c:5f:53:d7:21:47:
         fb:89:f2:1a:1c:58:41:91:bb:b1:1d:1f:93:a6:ca:d7:02:06:
         92:b5:3b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----