Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/f214214c0402ab36349d80c0a091ee9219a7417f.roa
File:                     f214214c0402ab36349d80c0a091ee9219a7417f.roa (raw, json)
Hash identifier:          mh+JioDKl1aDxwfAURTdXIIUenyOocIQthgHX/+dsf8=
Subject key identifier:   78:4A:A6:0C:92:9C:16:D9:4A:D3:57:60:EA:CE:04:2C:78:C3:4D:C6
Certificate issuer:       /CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Certificate serial:       057F52
Authority key identifier: F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/f214214c0402ab36349d80c0a091ee9219a7417f.roa
Signing time:             Wed 05 Jul 2023 19:35:25 +0000
ROA not before:           Tue 04 Jul 2023 19:35:24 +0000
ROA not after:            Sat 05 Jul 2025 19:35:24 +0000
asID:                     7418
IP address blocks:        181.172.0.0/15 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360274 (0x57f52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
        Validity
            Not Before: Jul  4 19:35:24 2023 GMT
            Not After : Jul  5 19:35:24 2025 GMT
        Subject: CN=f214214c0402ab36349d80c0a091ee9219a7417f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:99:ed:3b:eb:62:cd:26:e0:c9:50:06:f4:47:
                    34:dd:97:36:c7:d8:2b:0e:8c:70:0c:b1:8d:c6:e1:
                    cc:ad:90:5d:4d:a5:bf:d7:46:b8:a1:de:66:48:52:
                    88:6a:4f:43:5e:c6:5a:bb:7d:f9:42:18:85:5b:12:
                    c4:54:0e:bc:41:3b:12:1b:8e:19:06:8a:55:69:71:
                    0f:4e:f8:4d:7b:0c:fe:b8:9a:c5:d6:1f:c7:70:c3:
                    23:6d:30:70:3d:99:4d:ed:65:31:91:49:64:4b:a5:
                    82:1f:d7:7b:cd:fe:9a:e7:3d:2b:fa:e8:91:91:fa:
                    3a:f6:8d:8e:47:04:4e:95:cc:12:7a:cb:93:6a:fd:
                    a1:da:a0:99:1d:64:f8:ea:c6:80:59:5f:1f:e7:a2:
                    ae:71:fe:33:91:d0:dc:a9:86:99:e9:0e:b2:b8:98:
                    53:0c:f0:19:ea:82:cc:ba:24:d2:7b:42:b7:88:6d:
                    2d:f2:34:0e:b8:12:08:92:cc:c2:db:34:13:9d:66:
                    d1:c6:bc:39:2d:56:0d:ef:c9:a9:43:17:0f:b3:b6:
                    d9:82:4a:31:74:c2:c5:69:82:d9:35:33:87:25:0b:
                    8b:93:4b:33:cf:c6:34:3e:a6:59:8f:83:49:5e:46:
                    94:43:4c:35:56:8b:3b:e9:45:30:15:98:00:47:3c:
                    3b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4A:A6:0C:92:9C:16:D9:4A:D3:57:60:EA:CE:04:2C:78:C3:4D:C6
            X509v3 Authority Key Identifier:
                keyid:F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/f214214c0402ab36349d80c0a091ee9219a7417f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/bca241a84c27bfe35e84dea65f4a7db00fab553c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.172.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         3f:fd:6e:b1:19:21:76:c7:9b:0f:da:81:bb:f3:c7:6a:26:b5:
         76:ec:71:3a:c6:02:56:17:af:32:ba:eb:8e:f6:67:a8:8c:53:
         f4:a9:f2:34:7e:12:50:54:7e:ce:b0:5a:da:04:8f:71:e2:70:
         2c:09:ba:2f:f2:1c:59:36:a3:2a:3b:09:d7:40:9d:2d:14:81:
         b7:cf:56:ef:79:40:3d:4c:8b:14:ec:27:81:d4:15:43:70:61:
         97:4c:56:91:d5:d9:58:54:dd:ba:b4:78:cc:2a:d5:e4:a9:95:
         b1:1e:9c:40:06:47:87:b2:48:2d:00:49:85:d3:bb:03:5c:b1:
         64:89:4b:de:c9:85:3e:13:87:35:fd:b8:37:6e:3a:31:10:7e:
         79:dc:63:d7:b5:3e:e9:08:90:5d:b1:0a:49:fc:9e:80:75:c9:
         2c:92:21:72:75:ce:5b:e5:60:f8:22:ab:5c:c4:e7:f3:64:df:
         51:20:de:c9:f8:dd:0b:a0:9a:c7:b1:4e:70:4f:16:3f:3c:a5:
         3e:9c:6a:b3:c6:55:12:b9:cf:e3:06:c4:c8:e6:df:ac:56:65:
         ae:dd:9b:f0:c6:d9:8f:4e:27:35:07:b5:ff:e2:b2:f4:45:88:
         1d:4f:cd:ad:18:a7:06:69:41:74:bf:e0:84:ff:ee:d5:16:75:
         87:de:1a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----