Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9f5646e-3303-4eb1-80a2-dbecc5d9359b/b20539027b16ad989e83c2bb0e81a8b4d3f2b93c.roa
File:                     b20539027b16ad989e83c2bb0e81a8b4d3f2b93c.roa (raw, json)
Hash identifier:          ikn0S6/2z/xrEycgVvxKnbNP9ZMR8gFz+3+VnYngGOU=
Subject key identifier:   5B:FF:EC:E0:69:1A:45:20:1A:3B:4D:88:E3:96:88:B9:77:54:EE:94
Certificate issuer:       /CN=a8e12cca2129bde3aeb4d1487df86eba9960d067
Certificate serial:       20457A
Authority key identifier: E9:2B:09:39:E8:2A:A8:A4:6C:8E:8F:E1:58:E9:0D:A2:33:D7:97:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a8e12cca2129bde3aeb4d1487df86eba9960d067.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f9f5646e-3303-4eb1-80a2-dbecc5d9359b/b20539027b16ad989e83c2bb0e81a8b4d3f2b93c.roa
Signing time:             Wed 05 Jul 2023 16:46:33 +0000
ROA not before:           Tue 04 Jul 2023 16:46:32 +0000
ROA not after:            Sat 05 Jul 2025 16:46:32 +0000
asID:                     265771
IP address blocks:        128.201.108.0/22 maxlen: 24
                          2803:d7c0::/32 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2114938 (0x20457a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8e12cca2129bde3aeb4d1487df86eba9960d067
        Validity
            Not Before: Jul  4 16:46:32 2023 GMT
            Not After : Jul  5 16:46:32 2025 GMT
        Subject: CN=b20539027b16ad989e83c2bb0e81a8b4d3f2b93c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4e:e9:62:da:57:63:b4:16:ed:f5:d1:ac:2d:
                    c4:97:31:d8:0d:1d:9c:ea:06:40:b4:0b:f8:b0:ca:
                    34:a4:e2:30:81:42:f5:70:01:4c:53:9b:91:e0:83:
                    48:4e:41:db:38:05:60:86:fe:a3:7e:f7:af:e9:41:
                    2b:39:f6:16:ab:53:a4:ed:51:5f:2b:7d:fa:19:86:
                    92:6c:45:ce:22:df:8f:61:c7:16:24:63:ad:21:85:
                    df:ae:e8:1d:e9:22:6a:eb:f6:a2:d9:ed:37:a4:ce:
                    7f:38:b9:6b:3b:7d:b6:aa:f2:3c:a3:0d:4d:dd:42:
                    1a:3a:70:d9:1b:df:78:6a:7b:c2:5a:15:26:ca:3c:
                    75:57:d8:76:6c:6b:79:bf:a4:b8:a3:22:01:2d:40:
                    84:cb:c6:2d:af:8c:1f:94:ab:b9:5c:d1:44:bc:1e:
                    d0:6a:66:d6:38:59:4b:52:3a:0e:22:0e:fd:14:be:
                    4c:b7:34:3c:bd:e2:d6:0f:15:7c:59:6c:d9:5b:68:
                    e2:3c:be:a0:e7:95:0b:7d:ea:75:4c:1e:cb:8c:63:
                    e6:64:64:cd:4b:06:f1:61:9f:fd:b5:09:51:d2:d5:
                    68:28:a0:9c:11:21:5a:52:78:14:2d:65:1c:e5:f5:
                    3b:f1:6b:12:e9:b6:de:d8:ce:a2:2b:be:a8:af:07:
                    65:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FF:EC:E0:69:1A:45:20:1A:3B:4D:88:E3:96:88:B9:77:54:EE:94
            X509v3 Authority Key Identifier:
                keyid:E9:2B:09:39:E8:2A:A8:A4:6C:8E:8F:E1:58:E9:0D:A2:33:D7:97:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a8e12cca2129bde3aeb4d1487df86eba9960d067.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9f5646e-3303-4eb1-80a2-dbecc5d9359b/b20539027b16ad989e83c2bb0e81a8b4d3f2b93c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f9f5646e-3303-4eb1-80a2-dbecc5d9359b/a8e12cca2129bde3aeb4d1487df86eba9960d067.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.108.0/22
                IPv6:
                  2803:d7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:ee:cf:47:57:5e:f4:7d:e4:67:90:35:bb:a8:0d:fa:0a:ed:
         0e:0c:c1:d9:7c:33:e0:c6:02:00:e4:b9:4d:b0:01:43:0e:e1:
         81:4d:98:20:b9:ac:4f:3b:39:46:45:c2:ea:10:3b:b4:95:4b:
         b6:40:36:65:90:c3:4c:86:da:28:46:33:a8:d9:bc:e3:02:33:
         98:20:65:d0:0b:eb:fd:bd:7a:e2:92:b1:e9:17:eb:00:94:f5:
         25:f6:f3:f7:91:30:29:00:9d:57:4a:db:3c:de:91:43:4f:6d:
         21:39:82:89:80:17:37:19:89:1e:80:05:80:20:e2:b1:21:98:
         f9:aa:b1:96:2b:ad:f5:8b:0e:8c:20:43:98:2b:94:73:a2:c1:
         77:c6:91:f7:af:03:be:a1:b0:58:43:61:e8:44:03:f8:f0:77:
         5d:e4:5a:5f:3e:9d:35:ef:f2:ba:1c:db:d3:9b:00:a9:76:91:
         8d:4b:5e:92:00:45:e6:13:9f:9d:af:6a:09:d7:a7:67:cf:ae:
         a1:5a:e6:cf:4b:36:ee:e0:f1:b0:e8:33:90:1d:41:9c:05:f4:
         7e:55:8e:5a:85:80:37:71:f4:30:b5:1d:52:91:63:3b:11:2f:
         48:26:4a:cb:eb:d1:ca:4a:5f:9d:99:03:b1:70:a8:07:f8:bd:
         c2:be:e0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----