Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/00b846cf734ea7a4b916c5d6aa0d25a342a39233.roa
File:                     00b846cf734ea7a4b916c5d6aa0d25a342a39233.roa (raw, json)
Hash identifier:          aQMAs+sqnpu4c2/uuQIFwP4GE1WzPO06dhtwZvf5CLQ=
Subject key identifier:   45:A8:8B:D5:C7:31:EF:E8:9C:CA:FE:58:DB:88:85:99:B3:60:DF:D5
Certificate issuer:       /CN=0932ed7fc7587a11240901c76c1f6f64f3020149
Certificate serial:       11C83B
Authority key identifier: 63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/00b846cf734ea7a4b916c5d6aa0d25a342a39233.roa
Signing time:             Fri 26 Nov 2021 00:35:30 +0000
ROA not before:           Thu 25 Nov 2021 02:00:00 +0000
ROA not after:            Wed 25 Nov 2026 02:00:00 +0000
asID:                     15107
IP address blocks:        148.244.0.0/18 maxlen: 18
                          148.244.42.0/24 maxlen: 24
                          148.244.45.0/24 maxlen: 24
                          148.244.47.0/24 maxlen: 24
                          148.244.48.0/22 maxlen: 24
                          148.244.53.0/24 maxlen: 24
                          148.244.54.0/23 maxlen: 24
                          148.244.57.0/24 maxlen: 24
                          148.244.52.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1165371 (0x11c83b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0932ed7fc7587a11240901c76c1f6f64f3020149
        Validity
            Not Before: Nov 25 02:00:00 2021 GMT
            Not After : Nov 25 02:00:00 2026 GMT
        Subject: CN=00b846cf734ea7a4b916c5d6aa0d25a342a39233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1e:bd:25:f3:a1:b0:d8:df:19:9e:1a:87:1c:
                    78:a1:6e:32:99:1b:2d:5e:6d:3b:ce:8e:80:67:4a:
                    09:8e:ac:a8:ea:7e:c6:05:4a:16:73:32:ab:89:4c:
                    63:e1:8e:6c:fb:ab:60:d6:3e:9e:c1:bf:2d:57:8f:
                    09:7d:6a:7b:d4:b7:ce:71:3e:49:03:2b:2c:13:ae:
                    f0:3d:a7:9e:e3:62:95:62:e2:20:9d:de:53:5a:43:
                    a9:e7:ed:f7:b6:2d:a5:81:36:94:d3:04:26:36:3c:
                    a6:9e:b7:ba:54:96:e5:c2:6f:67:6e:66:f4:79:c3:
                    b0:c2:6f:7c:82:1a:ab:21:17:94:52:35:4a:65:0a:
                    36:e6:89:f1:d6:37:77:b7:32:ab:57:50:c9:c6:33:
                    0c:09:d0:0b:80:03:0c:d9:b0:78:5c:0d:d5:ba:67:
                    87:a0:a1:b6:92:f9:d8:92:2a:9c:e4:ac:94:77:5f:
                    11:32:b1:91:17:08:6d:7e:09:c2:8a:c0:2c:c0:91:
                    0d:ec:86:a7:17:ea:b3:af:5b:13:cb:ac:cf:00:da:
                    64:0b:48:f0:39:0e:0f:2e:5a:20:5a:16:0e:b2:8f:
                    32:11:26:96:02:1c:8e:3f:e7:7f:a9:1f:25:85:70:
                    f1:2d:06:22:b2:3d:14:d9:60:18:1d:66:b7:0b:73:
                    ce:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A8:8B:D5:C7:31:EF:E8:9C:CA:FE:58:DB:88:85:99:B3:60:DF:D5
            X509v3 Authority Key Identifier:
                keyid:63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/00b846cf734ea7a4b916c5d6aa0d25a342a39233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/0932ed7fc7587a11240901c76c1f6f64f3020149.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.244.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9e:18:d7:ee:84:ef:58:9b:27:bc:e7:57:b8:73:04:5e:cd:74:
         21:de:38:ef:d8:3a:27:23:47:27:f6:3a:5f:9a:08:75:e6:44:
         8e:a7:84:a7:ba:ae:98:6b:2e:e8:60:49:7b:b3:60:d5:98:38:
         ac:14:8d:d5:71:a7:b9:f1:0d:3d:7d:c2:06:c5:ac:34:e5:39:
         66:32:90:68:28:f8:90:9f:4a:70:cb:cf:95:f4:a6:31:b2:f7:
         1a:80:d8:20:3b:bc:68:1c:0e:cf:2d:d6:c3:d8:b5:ff:e5:29:
         40:27:bf:18:74:27:00:e6:59:1e:62:ca:95:a0:1c:9f:7b:cc:
         ba:85:02:77:52:33:41:13:dc:85:da:5b:75:6c:9e:21:cf:90:
         16:e6:2e:cf:fc:c3:4c:c0:e6:3a:28:ab:72:a9:66:84:ac:ce:
         fa:1e:13:16:27:f9:3c:b7:d9:02:84:a9:25:33:b4:45:1d:0f:
         62:db:09:ca:85:3c:b0:ca:fc:52:c8:48:df:8a:59:3e:ae:1c:
         a0:e9:b4:38:c5:32:95:ac:71:52:bd:df:00:d8:9f:f4:e2:58:
         f8:56:f5:3f:b8:e6:c0:ee:0d:85:e3:a3:76:c9:ad:ba:d4:2d:
         d8:e8:3c:47:8a:1a:31:f4:5a:09:cd:b2:c1:aa:89:1d:4c:03:
         a3:f8:d6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----