Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/6561c99c279cf9f1c3aa9406ef23edfc035b2132.roa
File:                     6561c99c279cf9f1c3aa9406ef23edfc035b2132.roa (raw, json)
Hash identifier:          eBKOLenbJ2WFE/kVxGlGlD7NINri+NROy6ygSlE2HnA=
Subject key identifier:   88:D9:7D:59:A3:7D:38:82:73:25:33:48:AC:24:29:28:71:B8:A1:95
Certificate issuer:       /CN=d62baf1d43712ef5f3860b21d04e8534536fa164
Certificate serial:       1F8A8A
Authority key identifier: 87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/6561c99c279cf9f1c3aa9406ef23edfc035b2132.roa
Signing time:             Fri 24 Mar 2023 08:30:58 +0000
ROA not before:           Thu 23 Mar 2023 08:30:58 +0000
ROA not after:            Sat 22 Mar 2025 08:30:58 +0000
asID:                     27995
IP address blocks:        191.117.0.0/16 maxlen: 16
                          191.118.0.0/16 maxlen: 16
                          191.119.0.0/16 maxlen: 18

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2067082 (0x1f8a8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62baf1d43712ef5f3860b21d04e8534536fa164
        Validity
            Not Before: Mar 23 08:30:58 2023 GMT
            Not After : Mar 22 08:30:58 2025 GMT
        Subject: CN=6561c99c279cf9f1c3aa9406ef23edfc035b2132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b8:fa:ac:f1:55:30:80:26:d8:1c:c1:77:26:
                    6c:4e:78:46:3e:1c:b3:5d:60:80:53:e6:0d:3f:ba:
                    f7:88:a9:2f:5d:41:a6:64:2c:b2:cf:31:c5:71:54:
                    9d:fa:e7:d3:b1:94:d9:e7:7c:94:e9:6c:1c:0e:5a:
                    22:4b:46:f7:df:51:43:6c:e7:88:80:08:f1:21:93:
                    97:c5:b6:57:06:db:ec:15:a4:7d:d9:34:fd:5c:64:
                    3b:04:ba:d3:a5:98:9f:69:cf:ed:07:f0:ee:a7:94:
                    5c:a1:de:fb:18:b5:55:46:02:7a:ac:b0:96:08:46:
                    7a:8c:9f:34:ad:8a:0d:5c:be:98:9d:89:19:1a:7f:
                    30:12:7b:e4:55:ad:df:0f:7c:94:4e:35:a4:fd:92:
                    d2:fe:66:d8:57:c6:e7:de:bd:f6:94:77:14:fd:01:
                    72:4d:4c:94:d8:ca:9b:e9:b6:81:4a:04:1a:03:9c:
                    cf:9b:cc:60:2c:36:1b:68:f2:1b:93:97:ae:1f:8c:
                    3a:20:43:3a:92:e6:e9:7f:34:9b:3c:0a:47:dd:ac:
                    56:aa:3b:fb:87:35:49:7f:d2:23:b5:dd:0c:a7:cd:
                    fe:c5:a4:93:1e:2c:0e:39:f7:77:80:f4:63:04:52:
                    f0:9b:75:ea:aa:d5:ad:a8:cc:c0:4a:6d:e6:6d:e8:
                    ac:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D9:7D:59:A3:7D:38:82:73:25:33:48:AC:24:29:28:71:B8:A1:95
            X509v3 Authority Key Identifier:
                keyid:87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/6561c99c279cf9f1c3aa9406ef23edfc035b2132.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.117.0.0-191.119.255.255

    Signature Algorithm: sha256WithRSAEncryption
         af:a0:6b:59:10:5d:71:3b:45:8e:ab:59:ed:96:20:c5:e3:ef:
         55:89:5d:ee:c9:8b:1f:fc:5b:b2:8c:b9:b9:85:fc:db:f1:9c:
         38:3b:fe:ac:6c:59:07:74:76:f0:73:fb:18:e3:c8:3a:f4:a1:
         01:e1:f0:06:5a:bb:7d:48:3b:f3:88:2d:55:a6:20:46:55:6f:
         05:10:df:c3:5e:d6:47:6d:36:c4:16:80:c9:ab:6e:db:fd:35:
         47:ab:cd:34:be:f1:17:3b:4e:95:60:98:65:88:44:a4:d0:c9:
         e0:07:94:cd:f6:f5:a8:47:a4:bf:77:44:0c:a2:68:48:79:fd:
         51:32:d4:d7:d3:00:d2:db:bf:8b:35:90:fa:f7:cf:fa:f8:43:
         05:01:00:91:f8:3d:e8:32:ba:d3:06:1b:36:9a:f7:6c:92:96:
         2a:82:d9:de:4c:22:26:0c:7c:48:fc:ba:fc:2a:15:b5:79:7f:
         ea:c2:59:6c:6c:8e:81:d0:52:e2:4e:53:62:fa:52:29:c9:78:
         5e:17:c7:82:90:88:33:21:32:0d:bd:42:3a:e8:13:11:c3:c6:
         4b:91:c8:49:eb:20:5c:7c:3c:ce:9c:0a:03:93:49:fa:0f:bb:
         e2:e8:b1:45:24:69:0b:7e:e3:3e:9b:5b:6a:74:48:6b:18:37:
         fa:a6:16:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----