Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/ec7fbf7949f848c68957e7a4fd551d6fca2388ee.roa
File:                     ec7fbf7949f848c68957e7a4fd551d6fca2388ee.roa (raw, json)
Hash identifier:          kUetU9uSONqBKce0sebbaXFgoKtoXbaI4qZpLkDY+6I=
Subject key identifier:   A6:92:22:98:93:49:0D:D6:45:1D:ED:96:C2:80:84:1D:1A:D4:3A:B5
Certificate issuer:       /CN=600a05248a907def76410027882b2f4a8085c07a
Certificate serial:       216F23
Authority key identifier: BC:3B:FF:4B:5D:A8:0B:F5:44:27:AE:25:A5:40:BB:0C:11:7C:D2:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/600a05248a907def76410027882b2f4a8085c07a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/ec7fbf7949f848c68957e7a4fd551d6fca2388ee.roa
Signing time:             Thu 13 Jul 2023 11:54:42 +0000
ROA not before:           Wed 12 Jul 2023 11:54:42 +0000
ROA not after:            Sun 13 Jul 2025 11:54:42 +0000
asID:                     27831
IP address blocks:        177.252.0.0/14 maxlen: 14
                          179.12.0.0/14 maxlen: 14
                          181.68.0.0/15 maxlen: 15
                          181.70.0.0/15 maxlen: 15
                          181.205.0.0/16 maxlen: 16
                          181.206.0.0/15 maxlen: 15
                          186.97.0.0/18 maxlen: 18
                          186.97.64.0/18 maxlen: 18
                          186.97.128.0/17 maxlen: 17
                          186.180.0.0/16 maxlen: 16
                          186.181.0.0/16 maxlen: 16
                          190.102.192.0/20 maxlen: 20
                          190.102.208.0/20 maxlen: 20
                          190.120.128.0/20 maxlen: 20
                          191.88.0.0/13 maxlen: 13
                          2803:1800::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2191139 (0x216f23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600a05248a907def76410027882b2f4a8085c07a
        Validity
            Not Before: Jul 12 11:54:42 2023 GMT
            Not After : Jul 13 11:54:42 2025 GMT
        Subject: CN=ec7fbf7949f848c68957e7a4fd551d6fca2388ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0c:1d:7d:5a:78:a7:6f:30:1b:da:c9:64:ed:
                    16:2f:90:78:39:6c:7f:d3:0e:f3:32:25:4e:ce:f6:
                    5d:b4:42:24:12:1f:13:29:27:72:4e:73:f9:d5:23:
                    c3:25:7e:56:84:1e:0e:aa:84:8e:91:e8:b8:33:87:
                    aa:62:cc:d3:c9:be:7a:1c:58:c7:19:4f:11:b1:5a:
                    cf:01:33:f7:de:b4:16:a0:94:ec:bf:ea:f7:51:76:
                    4c:08:b6:33:d3:ed:0c:46:7b:f3:dc:3d:31:12:e8:
                    1b:aa:99:42:b9:6c:51:15:ec:11:7a:aa:f5:2c:ea:
                    a8:f5:f1:3a:65:4f:54:20:83:ca:90:4e:e0:be:88:
                    1e:1b:61:22:c5:1b:fe:c6:3d:e8:53:00:2d:28:7b:
                    ea:d1:79:22:d0:00:c6:a9:26:f3:dd:8f:20:54:16:
                    de:42:60:03:63:22:1c:1c:69:9e:9c:2c:90:3d:ae:
                    ca:53:7a:68:2f:fb:0d:7c:9c:c4:bf:24:91:61:03:
                    7d:6e:a8:ae:03:72:41:02:7e:dd:9d:15:59:b8:6a:
                    7b:d3:4d:9e:f4:7c:f0:53:5a:b2:1b:6f:84:03:4e:
                    89:de:3d:58:a8:3a:83:f4:6b:8d:25:2e:6c:64:93:
                    75:57:5e:54:dc:01:ff:eb:3e:77:b5:89:5b:a6:13:
                    7c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:92:22:98:93:49:0D:D6:45:1D:ED:96:C2:80:84:1D:1A:D4:3A:B5
            X509v3 Authority Key Identifier:
                keyid:BC:3B:FF:4B:5D:A8:0B:F5:44:27:AE:25:A5:40:BB:0C:11:7C:D2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/600a05248a907def76410027882b2f4a8085c07a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/ec7fbf7949f848c68957e7a4fd551d6fca2388ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/600a05248a907def76410027882b2f4a8085c07a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.252.0.0/14
                  179.12.0.0/14
                  181.68.0.0/14
                  181.205.0.0-181.207.255.255
                  186.97.0.0/16
                  186.180.0.0/15
                  190.102.192.0/19
                  190.120.128.0/20
                  191.88.0.0/13
                IPv6:
                  2803:1800::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:19:c1:e6:25:a4:ea:9b:ce:5c:44:85:c7:da:f8:0e:3c:81:
         d2:3e:77:55:df:ee:2b:5b:15:c9:79:a2:36:ce:b3:30:9b:3b:
         76:b3:f3:93:67:05:c4:4d:a7:89:5e:bd:c7:fa:bb:1f:99:ac:
         87:7c:51:8f:17:63:e2:a1:ff:25:44:8f:86:86:79:06:50:52:
         e5:d7:db:eb:b6:b1:46:8e:88:44:c5:5e:ea:aa:3a:3f:c3:7e:
         24:03:8c:1f:46:57:2e:6a:dd:7d:50:3a:91:8d:88:df:59:14:
         4e:31:e9:84:81:aa:f2:f1:5b:e5:65:3b:75:2b:f4:d6:83:64:
         34:6f:ef:2a:8d:91:a4:06:a3:ad:e2:81:4e:0d:49:53:71:c1:
         0b:52:20:9c:78:95:01:97:32:68:f2:8a:1c:30:0e:7c:62:84:
         d7:fd:2b:29:76:e8:45:98:7c:4c:48:8b:49:f7:e6:3c:97:57:
         9c:fe:21:2b:4b:70:48:b1:31:76:33:b1:a4:aa:24:71:7e:23:
         33:4a:4e:aa:2b:78:09:01:5b:07:f0:43:09:6b:b7:3b:bf:7c:
         3d:46:b8:53:4b:38:f1:c5:ca:69:9c:33:9a:ab:8c:65:d0:5c:
         15:d3:bb:d8:e7:48:28:9b:b0:03:2d:2f:ec:be:0b:10:3b:ef:
         88:42:cd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----