Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/9d98b174c21c2580e2028a3bdd063cd2375ba5cf.roa
File:                     9d98b174c21c2580e2028a3bdd063cd2375ba5cf.roa (raw, json)
Hash identifier:          Q3K/otdgCDl5JNfUUhNpdYhVTKNfQO11zvsb4mHUAag=
Subject key identifier:   6A:ED:16:8D:95:DB:D7:68:36:95:3F:49:D3:66:78:34:C2:0B:1E:0C
Certificate issuer:       /CN=2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa
Certificate serial:       1C4FE4
Authority key identifier: 9A:F1:12:EB:F0:F3:46:BA:1E:F5:B2:E8:11:86:CA:DE:8B:F0:BE:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/9d98b174c21c2580e2028a3bdd063cd2375ba5cf.roa
Signing time:             Wed 02 Nov 2022 16:57:49 +0000
ROA not before:           Sun 11 Jul 2021 03:00:00 +0000
ROA not after:            Fri 14 Jul 2023 03:00:00 +0000
asID:                     265629
IP address blocks:        170.239.207.0/24 maxlen: 24
                          170.239.205.0/24 maxlen: 24
                          2803:9cc0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1855460 (0x1c4fe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa
        Validity
            Not Before: Jul 11 03:00:00 2021 GMT
            Not After : Jul 14 03:00:00 2023 GMT
        Subject: CN=9d98b174c21c2580e2028a3bdd063cd2375ba5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4b:78:b5:94:02:a5:db:31:32:3d:8c:71:df:
                    ab:2d:42:46:f3:d6:0c:d7:08:35:e4:68:76:34:26:
                    e9:80:38:56:e8:f2:4d:44:f8:62:ff:8e:4e:5b:f0:
                    9a:25:d9:96:81:a7:3f:74:02:9f:d5:69:00:ed:1e:
                    61:0c:8e:c7:e6:f6:05:35:8f:02:49:07:7a:b6:57:
                    f8:a8:6d:e9:20:1a:69:86:d1:41:72:8c:79:d5:a5:
                    86:37:78:2e:35:21:0b:2b:04:3f:b2:4b:7d:94:9d:
                    57:69:51:68:8a:14:4c:53:24:71:9d:c2:aa:41:ae:
                    d6:6c:43:da:70:b2:cd:22:8e:0d:f1:0b:3a:fd:f4:
                    4a:97:5d:70:b0:3b:a8:c8:2f:10:44:45:30:d5:20:
                    70:cb:f2:45:fb:c4:8a:0a:f7:30:83:5e:49:c8:22:
                    b4:cb:a1:7d:6c:81:19:82:51:52:52:c2:79:84:84:
                    63:cc:b7:52:99:e2:4f:3e:fa:e2:e8:63:e6:91:b6:
                    04:32:00:7f:7c:3e:98:d8:b5:c9:54:2b:b4:98:ca:
                    a4:2d:79:57:39:41:e1:ea:6e:a7:26:1e:8a:4f:18:
                    8d:24:a4:c8:81:9c:bf:59:fd:19:a1:b1:f8:64:43:
                    a7:7d:00:23:66:50:8f:30:b2:b2:41:52:fb:d7:43:
                    89:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:ED:16:8D:95:DB:D7:68:36:95:3F:49:D3:66:78:34:C2:0B:1E:0C
            X509v3 Authority Key Identifier:
                keyid:9A:F1:12:EB:F0:F3:46:BA:1E:F5:B2:E8:11:86:CA:DE:8B:F0:BE:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/9d98b174c21c2580e2028a3bdd063cd2375ba5cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.205.0/24
                  170.239.207.0/24
                IPv6:
                  2803:9cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:d5:02:30:7f:9b:0a:ec:fe:26:4f:a2:7a:f6:8f:61:da:f8:
         fb:c1:bb:96:c1:79:bb:f8:14:cf:6f:98:44:59:13:95:d6:43:
         0a:cd:d3:44:da:63:26:6c:ba:c1:36:27:99:fc:bc:57:2f:66:
         79:06:9a:92:00:61:05:1c:7c:54:08:fc:27:47:f6:31:aa:94:
         10:3a:4b:0d:e4:f6:82:db:70:5b:d5:c8:a0:c4:22:ee:d7:57:
         86:3d:e0:c4:77:80:4c:b6:3b:8f:cb:0a:a0:49:f7:3c:16:c7:
         ed:20:6b:f2:64:2d:bd:f6:f6:9f:f2:61:01:b6:c8:48:d4:a8:
         13:ee:f9:a9:09:bc:8a:24:bb:9c:ae:ef:7f:9b:99:b9:3b:7f:
         a8:32:19:c9:10:54:13:f0:6e:f5:11:0d:bc:dc:23:11:b9:e0:
         ad:a3:43:b7:e2:c6:fd:25:05:07:56:32:5a:2e:0c:9c:5b:12:
         d6:81:20:a1:5f:5f:55:26:bf:d0:24:da:2f:6f:a5:e5:b2:4c:
         ca:f3:d8:4e:1d:8d:e6:6e:49:7c:fe:18:3c:60:d9:54:45:82:
         48:b9:84:dc:78:8e:7f:11:c7:87:ba:4e:84:96:69:df:b9:67:
         09:c5:aa:68:90:fd:8c:41:6d:ae:b5:33:60:89:7f:06:91:9b:
         42:6a:6f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----