Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/e766b4151e204f827e3b3d2003248e8693278bcb.roa
File:                     e766b4151e204f827e3b3d2003248e8693278bcb.roa (raw, json)
Hash identifier:          U/wLBDfDFAxvzesoqXrZyvl3fUxEagIh6vEIgyDpVho=
Subject key identifier:   DE:7E:B7:E8:77:75:C4:06:D1:3F:BB:DA:C2:9C:B0:D1:D5:3A:3A:5D
Certificate issuer:       /CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Certificate serial:       05790F
Authority key identifier: F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/e766b4151e204f827e3b3d2003248e8693278bcb.roa
Signing time:             Wed 05 Jul 2023 19:35:24 +0000
ROA not before:           Tue 04 Jul 2023 19:35:24 +0000
ROA not after:            Sat 05 Jul 2025 19:35:24 +0000
asID:                     16629
IP address blocks:        181.172.0.0/15 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358671 (0x5790f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
        Validity
            Not Before: Jul  4 19:35:24 2023 GMT
            Not After : Jul  5 19:35:24 2025 GMT
        Subject: CN=e766b4151e204f827e3b3d2003248e8693278bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7c:c6:0a:3e:e6:d1:d4:27:5c:f1:52:b5:98:
                    1b:8d:a9:2e:24:9b:03:24:31:0f:80:b2:8d:82:5f:
                    53:22:5f:6d:89:67:23:3c:b6:8f:d6:71:33:9d:35:
                    40:ef:32:73:ad:00:2a:7b:6a:d8:e3:be:3c:92:a9:
                    f9:79:f9:c2:88:57:a3:59:82:28:4a:fd:e2:0f:71:
                    78:8b:6a:41:f6:69:5b:2c:ca:c6:90:52:a9:b0:2b:
                    f5:a0:95:e4:6d:97:39:68:90:c1:bb:32:36:ff:67:
                    8c:a9:b0:e0:be:00:8e:ae:46:ef:d7:9f:f1:04:33:
                    2d:05:94:db:f6:a2:54:c6:cb:b9:20:4c:3e:31:94:
                    b0:a5:f5:f2:98:01:22:99:4e:24:48:a9:cb:31:5d:
                    19:74:aa:c0:92:3a:fb:3b:8c:32:0e:f7:3b:f3:e9:
                    44:57:ee:4a:d3:17:f8:27:8f:d0:2c:57:4e:6a:63:
                    5c:8c:d0:fe:b8:db:77:8f:e2:1a:f2:96:00:e9:5a:
                    89:66:28:1a:cc:c8:78:1b:fb:45:98:83:7b:4e:55:
                    18:2c:cb:27:72:4f:dc:d7:65:c6:b6:94:60:26:6b:
                    33:43:49:f4:05:21:56:fa:c7:98:8c:57:87:e7:c1:
                    57:6e:a2:46:47:9d:f3:fc:a3:4a:4f:6f:60:37:43:
                    73:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7E:B7:E8:77:75:C4:06:D1:3F:BB:DA:C2:9C:B0:D1:D5:3A:3A:5D
            X509v3 Authority Key Identifier:
                keyid:F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/e766b4151e204f827e3b3d2003248e8693278bcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/bca241a84c27bfe35e84dea65f4a7db00fab553c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.172.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         52:95:7b:76:93:3c:3f:f3:18:ff:f7:2c:f0:de:f8:e6:41:3c:
         6b:41:95:96:44:5b:f9:3a:a7:a2:0b:1f:3e:35:ca:77:8a:44:
         6a:5c:d9:b9:86:4b:e6:69:32:3c:e9:b5:c1:1e:c0:19:6f:a1:
         fc:89:92:ab:e3:54:59:14:64:35:96:cb:0b:eb:e2:b4:17:82:
         2b:50:d7:c6:59:99:55:05:c0:76:1d:69:ad:23:76:80:d1:fc:
         62:6c:8c:d9:18:e3:a9:28:5e:ca:1f:b0:5c:e4:5c:2c:73:ff:
         a2:36:5f:a0:00:92:ea:a0:16:0b:c3:e4:15:5e:58:60:0a:6b:
         34:e7:d9:03:90:38:f0:df:a8:9e:ff:39:f5:b8:cd:29:d8:7c:
         37:e8:5a:9b:43:62:5b:ac:02:4b:4e:3e:c1:96:99:73:5d:19:
         d5:8b:e4:dd:11:8c:c2:44:43:ae:a0:9f:ca:f1:cc:c7:5d:c4:
         e8:d5:16:ae:33:e8:7d:ad:a6:0c:e0:9d:ee:3b:f4:c7:45:02:
         49:9d:08:1c:fa:af:af:55:b3:f1:f3:e3:5c:59:4c:5a:d0:38:
         00:d8:01:6b:19:80:0b:d1:d1:f3:e8:9e:11:db:d7:56:04:14:
         7f:c1:a8:55:4d:63:8d:34:bf:eb:1f:e3:f1:7a:96:84:03:46:
         aa:da:6a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----