Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/25b242dd9b6a2055c64f14cd8c672e227d2b8ee2.roa
File:                     25b242dd9b6a2055c64f14cd8c672e227d2b8ee2.roa (raw, json)
Hash identifier:          V2dhY8gmzxrfqtN6rpkiDQS8uxQYfGJ6YxdMMm4OFBs=
Subject key identifier:   65:5B:C8:4F:16:60:66:A6:2F:74:49:A2:C8:B9:E4:D7:F6:6E:A9:30
Certificate issuer:       /CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Certificate serial:       057571
Authority key identifier: F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/25b242dd9b6a2055c64f14cd8c672e227d2b8ee2.roa
Signing time:             Wed 05 Jul 2023 19:35:24 +0000
ROA not before:           Tue 04 Jul 2023 19:35:24 +0000
ROA not after:            Sat 05 Jul 2025 19:35:24 +0000
asID:                     16629
IP address blocks:        181.172.0.0/15 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357745 (0x57571)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
        Validity
            Not Before: Jul  4 19:35:24 2023 GMT
            Not After : Jul  5 19:35:24 2025 GMT
        Subject: CN=25b242dd9b6a2055c64f14cd8c672e227d2b8ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ed:24:e4:46:4e:a7:98:d7:a7:5c:54:39:14:
                    21:87:28:c8:93:2f:23:c6:8d:a8:65:fb:db:5d:93:
                    98:c6:43:95:45:f6:58:e0:e9:1b:8d:fe:50:98:d0:
                    25:53:26:5c:6b:4e:e5:5d:5c:58:ae:95:8b:32:fe:
                    39:7d:1d:95:cf:7f:8d:a8:86:5a:c7:23:09:54:c2:
                    d7:e2:e4:91:0f:65:87:0b:09:89:31:a1:1a:1b:5d:
                    94:63:66:f6:d1:ef:e1:6f:61:dc:63:2e:25:68:6f:
                    16:d0:e9:58:5e:7f:c3:21:5a:72:95:d0:bd:64:86:
                    bc:16:30:fc:d5:de:59:c4:41:e9:5b:82:f0:02:40:
                    29:7b:15:7f:2d:ea:7a:ac:47:eb:68:ab:06:86:b6:
                    13:f8:dd:8b:39:32:4d:9e:b9:6d:e9:29:0a:84:17:
                    cd:d0:f4:1f:cd:f9:b1:91:aa:3b:5e:33:99:83:4b:
                    a3:7f:d3:fd:30:8a:fb:fe:ac:3d:2c:1a:c6:99:57:
                    3b:e7:97:5f:40:14:14:2d:31:6d:d3:eb:47:31:44:
                    3e:db:3c:52:9e:5f:b4:bc:e1:97:24:0e:ae:f7:6a:
                    fc:66:e8:0b:e8:f5:54:76:d0:da:fe:bd:6d:d2:8a:
                    8f:d0:ab:03:e3:88:1c:a8:d0:6c:cc:a4:10:1e:7e:
                    89:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5B:C8:4F:16:60:66:A6:2F:74:49:A2:C8:B9:E4:D7:F6:6E:A9:30
            X509v3 Authority Key Identifier:
                keyid:F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/25b242dd9b6a2055c64f14cd8c672e227d2b8ee2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/bca241a84c27bfe35e84dea65f4a7db00fab553c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.172.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         4f:78:ab:ed:34:d5:dd:57:f8:3f:19:9b:05:fe:cc:31:ef:73:
         f7:cb:99:d1:23:15:91:3f:08:c0:6f:df:66:e4:23:82:14:c2:
         41:ab:ae:c4:9a:7a:8a:29:97:20:40:bd:0c:de:ac:d0:ce:cb:
         74:aa:63:dd:4a:6f:ab:d0:ca:5a:d1:c5:a9:2e:97:71:a6:5d:
         f7:03:46:39:9c:cb:b9:d2:87:e1:91:7f:00:e5:03:fd:a7:a5:
         28:c7:66:d4:d0:0e:0f:8d:14:58:9b:46:9d:b6:71:f2:e8:cc:
         86:30:28:49:de:81:c4:de:d0:06:2d:da:21:fc:8a:6a:a3:cc:
         5c:9b:cb:4a:16:6e:26:85:01:76:cb:90:6c:1a:2d:d1:48:d2:
         93:11:5a:d4:55:5c:1e:82:05:fa:bd:2f:ef:ca:6e:b0:1a:93:
         0f:c6:5b:41:17:d8:de:a4:3f:dd:b0:a0:e4:ed:56:e8:7e:80:
         4b:da:cc:55:53:2b:35:67:86:a4:df:49:d7:10:f2:cb:14:5d:
         b4:4c:3e:c6:41:06:37:a5:07:da:f3:b9:e4:d7:d7:46:2b:3b:
         49:24:0c:8f:4b:47:ec:39:f7:85:57:e7:b5:e4:ef:f6:ee:5d:
         00:d5:1e:a7:8c:c5:f4:99:c3:d2:a5:5c:e7:10:96:36:12:e3:
         80:3a:04:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----