Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/42b6f72a3c306fe95d6264432ca1bae1e487fc2e.roa
File:                     42b6f72a3c306fe95d6264432ca1bae1e487fc2e.roa (raw, json)
Hash identifier:          +CRWYZ8yJ/ZZv5RepmWczVdr7cRUPckuFB2DbGSrec0=
Subject key identifier:   46:6C:D2:50:E7:D5:C5:38:52:EF:97:19:17:7E:83:15:2A:4E:DE:C9
Certificate issuer:       /CN=14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5
Certificate serial:       1B15B1
Authority key identifier: 53:1C:51:AE:25:9D:A0:1F:BC:F6:89:DE:D5:B7:C2:9A:63:34:16:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/42b6f72a3c306fe95d6264432ca1bae1e487fc2e.roa
Signing time:             Tue 11 Jul 2023 19:00:29 +0000
ROA not before:           Mon 10 Jul 2023 19:00:29 +0000
ROA not after:            Fri 11 Jul 2025 19:00:29 +0000
asID:                     271888
IP address blocks:        177.74.200.0/23 maxlen: 24
                          2803:9e0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1775025 (0x1b15b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5
        Validity
            Not Before: Jul 10 19:00:29 2023 GMT
            Not After : Jul 11 19:00:29 2025 GMT
        Subject: CN=42b6f72a3c306fe95d6264432ca1bae1e487fc2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2b:67:84:a4:17:f3:49:5c:a1:c5:3e:1d:f2:
                    7f:8b:b7:6f:a5:c4:dd:20:b8:cb:cf:f7:84:9b:c0:
                    86:cc:cb:44:3a:64:81:25:d1:18:ff:98:31:79:58:
                    03:db:09:a0:e9:a3:af:85:c5:85:d4:9b:1a:00:b7:
                    bc:4c:77:46:dc:34:2e:00:cb:de:ea:ea:fe:40:c8:
                    cd:9a:4e:ee:42:78:dd:26:4f:df:bb:44:76:d9:3a:
                    87:8e:5c:1f:e4:85:8d:5b:16:61:0b:a3:a5:c3:7b:
                    74:11:9b:f4:3a:ed:bd:6d:71:dc:d7:4e:3f:b6:bb:
                    64:dc:a5:f0:d9:74:dc:82:bf:ec:42:d9:53:1e:df:
                    5a:79:a7:ba:9b:c7:7c:df:b9:3e:dd:a3:20:64:88:
                    d6:60:ff:b7:ac:10:9c:ac:c2:6d:6f:f5:e6:34:7c:
                    7e:c5:bb:fa:18:be:bf:6b:7f:c4:e4:18:cb:d9:d3:
                    e3:96:48:89:80:94:f0:e2:1f:ca:3e:04:b5:d0:81:
                    4b:4d:2b:b6:7e:48:cc:fb:ea:79:8c:18:95:7e:95:
                    84:09:97:4d:02:aa:bf:c0:ee:77:bb:fb:38:d0:1a:
                    3b:e3:23:7d:30:7d:66:9b:23:d5:e9:74:e9:f5:7f:
                    f7:da:5e:20:1b:e4:88:5b:55:98:d2:58:b9:e6:8c:
                    55:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6C:D2:50:E7:D5:C5:38:52:EF:97:19:17:7E:83:15:2A:4E:DE:C9
            X509v3 Authority Key Identifier:
                keyid:53:1C:51:AE:25:9D:A0:1F:BC:F6:89:DE:D5:B7:C2:9A:63:34:16:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/42b6f72a3c306fe95d6264432ca1bae1e487fc2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.200.0/23
                IPv6:
                  2803:9e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:4d:ed:38:53:fa:0c:8d:8c:e6:1a:15:2b:72:cf:90:63:e1:
         99:85:04:a3:3c:a5:b5:12:f5:35:c6:65:e2:22:cf:dc:55:2e:
         16:94:24:56:30:bf:8a:3c:64:04:41:52:36:4c:dd:ec:af:a7:
         6b:84:12:53:62:57:71:7c:61:86:bb:07:fd:a6:64:ca:27:89:
         dc:fe:50:dd:12:2c:01:a3:84:da:17:2f:cc:c6:5d:bb:fa:3e:
         a0:ff:f6:0d:6a:fd:5e:7b:7e:3c:12:b5:cb:39:f7:d8:c0:90:
         5a:0b:cb:ca:9b:04:01:68:8e:1e:f3:ea:4f:a8:c5:1e:7f:ea:
         99:32:7d:7b:89:3d:0a:f4:b4:c0:eb:49:24:3f:08:bc:d4:d5:
         d7:5e:55:a3:b1:ea:f8:1e:ff:ac:bc:1c:6e:06:e1:0c:d0:93:
         83:3c:65:97:a9:6e:fb:62:31:ea:80:09:5b:84:d4:18:93:0d:
         35:6c:49:6d:6c:ff:6b:36:3c:d3:e7:cb:c5:89:a8:60:e9:d2:
         a6:5b:50:95:23:e6:7c:06:e7:3a:7d:b4:b6:3b:0d:35:39:e0:
         06:ec:a1:53:2a:ca:cc:23:46:9d:7e:b0:a4:f1:7a:7f:b4:ac:
         73:46:7e:68:a4:20:c1:5c:9b:7a:b0:a0:6e:13:24:1f:29:35:
         8d:cc:12:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----