Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/2c2d110c02c1af0101f1c3d9e53c3c67a4f80bf4.roa
File:                     2c2d110c02c1af0101f1c3d9e53c3c67a4f80bf4.roa (raw, json)
Hash identifier:          +4K+PnXvKrdcDYfg4ANmQqJv5odnarbPipWa3vWIl1o=
Subject key identifier:   AD:C3:53:5A:E9:1F:7C:88:A3:85:55:CE:31:CA:4D:93:9A:3C:88:7D
Certificate issuer:       /CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Certificate serial:       057F25
Authority key identifier: F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/2c2d110c02c1af0101f1c3d9e53c3c67a4f80bf4.roa
Signing time:             Wed 05 Jul 2023 19:35:25 +0000
ROA not before:           Tue 04 Jul 2023 19:35:24 +0000
ROA not after:            Sat 05 Jul 2025 19:35:24 +0000
asID:                     7418
IP address blocks:        181.172.0.0/15 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360229 (0x57f25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
        Validity
            Not Before: Jul  4 19:35:24 2023 GMT
            Not After : Jul  5 19:35:24 2025 GMT
        Subject: CN=2c2d110c02c1af0101f1c3d9e53c3c67a4f80bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9f:64:c7:6c:d6:91:03:8e:e0:d1:8e:da:63:
                    a2:90:f0:cb:08:54:56:41:ea:73:97:d7:df:a6:c5:
                    ee:51:65:ee:0f:e6:1e:9b:3a:1f:46:7d:2a:6f:70:
                    26:b5:4f:46:e7:fd:d5:0c:15:c4:ce:d2:09:b8:b8:
                    82:b7:4f:f9:cf:91:8c:37:8a:14:e0:da:e1:26:57:
                    5c:17:ce:67:36:2d:fa:91:4a:69:71:7a:58:b6:f8:
                    5f:23:ab:5d:9b:49:2f:f3:d0:53:10:79:a1:69:68:
                    a4:79:8b:44:93:5d:04:dd:7b:1f:45:18:a3:ec:49:
                    48:49:32:35:d2:f7:e8:9a:e8:4e:fd:2d:ce:e6:0f:
                    54:52:26:f4:71:61:9c:63:27:bf:c1:42:3c:d5:b8:
                    e8:2c:22:37:83:25:15:b5:7f:7f:01:b7:8f:71:53:
                    67:92:1b:5a:86:8a:1f:b8:e1:a1:87:b4:80:5a:2e:
                    18:c2:fb:d0:74:3b:42:c2:c7:a2:c9:a3:9b:4f:b7:
                    60:45:55:c8:5c:6f:99:6f:f1:0e:dc:02:20:a6:3d:
                    08:59:1a:df:f7:10:04:cb:e8:c3:9b:a3:4e:f9:e3:
                    93:7d:7b:fa:77:73:b5:f1:c8:0d:db:29:92:55:e8:
                    d5:96:e6:d5:03:36:33:ce:97:5a:1b:43:d1:54:4a:
                    0c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C3:53:5A:E9:1F:7C:88:A3:85:55:CE:31:CA:4D:93:9A:3C:88:7D
            X509v3 Authority Key Identifier:
                keyid:F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/2c2d110c02c1af0101f1c3d9e53c3c67a4f80bf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/bca241a84c27bfe35e84dea65f4a7db00fab553c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.172.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         90:d2:70:7e:6f:54:80:83:24:a7:88:e5:f5:ad:3d:cf:6b:53:
         bd:50:cf:3d:95:4d:70:e0:9a:ed:a6:06:33:09:33:2e:05:3e:
         bb:d0:b8:15:1d:42:12:44:f7:ae:8c:f9:58:61:f4:c5:86:4f:
         1d:55:45:1e:86:17:e7:89:58:ac:11:a5:b3:a9:0a:ad:a4:24:
         e9:27:1b:fb:75:47:25:64:2b:e5:fc:d4:3a:6c:64:c9:b7:b6:
         1b:db:68:26:26:01:ce:35:de:92:b6:b1:23:ea:54:ec:68:c0:
         45:1c:f5:01:20:a0:3a:d4:83:73:9c:49:be:a4:fd:a2:25:43:
         a7:e1:8f:26:9a:f8:0e:3b:f0:19:e5:92:1a:11:0d:db:79:95:
         ea:a1:9f:4a:dc:59:ca:4a:3a:fc:d6:f1:9a:17:ed:45:80:fb:
         f8:a3:dc:6b:29:9f:09:ce:1a:63:ee:cd:3b:d6:09:ad:e9:70:
         52:30:9f:6d:11:d7:0d:22:e6:e7:70:a0:05:2a:85:27:47:91:
         cc:82:94:43:19:2f:a9:4c:b2:39:19:a8:53:f6:9a:fa:9f:27:
         6b:1b:80:1b:e9:14:d2:a4:25:27:fa:3e:12:7b:f4:2c:66:1c:
         8f:21:6f:cd:c2:f4:9f:e8:1e:a2:6a:6c:5d:cd:55:7d:98:81:
         fa:a2:be:2d
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDBX8lMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJj
YTI0MWE4NGMyN2JmZTM1ZTg0ZGVhNjVmNGE3ZGIwMGZhYjU1M2MwHhcNMjMwNzA0
MTkzNTI0WhcNMjUwNzA1MTkzNTI0WjAzMTEwLwYDVQQDEygyYzJkMTEwYzAyYzFh
ZjAxMDFmMWMzZDllNTNjM2M2N2E0ZjgwYmY0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnZ9kx2zWkQOO4NGO2mOikPDLCFRWQepzl9ffpsXuUWXuD+Ye
mzofRn0qb3AmtU9G5/3VDBXEztIJuLiCt0/5z5GMN4oU4NrhJldcF85nNi36kUpp
cXpYtvhfI6tdm0kv89BTEHmhaWikeYtEk10E3XsfRRij7ElISTI10vfomuhO/S3O
5g9UUib0cWGcYye/wUI81bjoLCI3gyUVtX9/AbePcVNnkhtahoofuOGhh7SAWi4Y
wvvQdDtCwseiyaObT7dgRVXIXG+Zb/EO3AIgpj0IWRrf9xAEy+jDm6NO+eOTfXv6
d3O18cgN2ymSVejVlubVAzYzzpdaG0PRVEoMJwIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFK3DU1rpH3yIo4VVzjHKTZOaPIh9MB8GA1UdIwQYMBaAFPRYYPyM8OxmjBJA
t3XD4k5sNgOAMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmNhMjQx
YTg0YzI3YmZlMzVlODRkZWE2NWY0YTdkYjAwZmFiNTUzYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2Q3ZGEwYzMtYzBhMC00ZGJiLWEzNTYtNTA0NDhk
NzQ5MzE3LzJjMmQxMTBjMDJjMWFmMDEwMWYxYzNkOWU1M2MzYzY3YTRmODBiZjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83ZDdkYTBjMy1jMGEwLTRkYmItYTM1Ni01MDQ0
OGQ3NDkzMTcvYmNhMjQxYTg0YzI3YmZlMzVlODRkZWE2NWY0YTdkYjAwZmFiNTUz
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDAbWsMA0GCSqGSIb3DQEBCwUAA4IBAQCQ0nB+b1SAgySniOX1
rT3Pa1O9UM89lU1w4JrtpgYzCTMuBT670LgVHUISRPeujPlYYfTFhk8dVUUehhfn
iVisEaWzqQqtpCTpJxv7dUclZCvl/NQ6bGTJt7Yb22gmJgHONd6StrEj6lTsaMBF
HPUBIKA61INznEm+pP2iJUOn4Y8mmvgOO/AZ5ZIaEQ3beZXqoZ9K3FnKSjr81vGa
F+1FgPv4o9xrKZ8Jzhpj7s071gmt6XBSMJ9tEdcNIubncKAFKoUnR5HMgpRDGS+p
TLI5GahT9pr6nydrG4Ab6RTSpCUn+j4Se/QsZhyPIW/NwvSf6B6iamxdzVV9mIH6
or4t
-----END CERTIFICATE-----