Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/3b6a00a468bc10ed56d9f305a061f9b0782bf76b.roa
File:                     3b6a00a468bc10ed56d9f305a061f9b0782bf76b.roa (raw, json)
Hash identifier:          V8N7enT9Nbu8ogsjlX7FmqkT+XrPVyR4hf8uWma+2AU=
Subject key identifier:   B2:FC:8A:C6:AC:31:DE:F8:15:62:F0:A4:F9:FB:0B:36:79:31:9F:F2
Certificate issuer:       /CN=2ea1715958333398146179fdbf2e485fe6525742
Certificate serial:       1C37C3
Authority key identifier: 60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/3b6a00a468bc10ed56d9f305a061f9b0782bf76b.roa
Signing time:             Wed 29 Nov 2023 16:54:56 +0000
ROA not before:           Wed 29 Nov 2023 16:54:56 +0000
ROA not after:            Sat 29 Nov 2025 16:54:56 +0000
asID:                     264845
IP address blocks:        201.219.252.0/23 maxlen: 23
                          2800:700::/32 maxlen: 34

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1849283 (0x1c37c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ea1715958333398146179fdbf2e485fe6525742
        Validity
            Not Before: Nov 29 16:54:56 2023 GMT
            Not After : Nov 29 16:54:56 2025 GMT
        Subject: CN=3b6a00a468bc10ed56d9f305a061f9b0782bf76b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a9:37:a1:cb:82:41:64:48:1b:92:cf:9f:83:
                    26:25:25:75:43:73:a4:dc:48:74:31:a8:79:8c:9d:
                    5d:2e:bd:a9:0d:69:87:8a:ed:f9:1a:bf:e1:e6:cb:
                    30:50:d2:41:0e:43:99:51:f3:20:97:c3:72:56:35:
                    e7:3b:ca:f4:0d:f2:12:b9:24:c1:09:fb:dd:bb:6b:
                    4a:64:e1:d0:8d:29:4c:c2:3d:ea:ad:0c:6e:95:f7:
                    ac:aa:db:b7:36:5e:0f:2d:34:e0:da:d7:bb:f0:d3:
                    4e:b3:32:d0:8c:76:23:38:5b:ad:e9:82:99:c9:35:
                    f8:0d:a2:64:f1:a8:f0:92:51:c0:cc:54:66:8c:ef:
                    4b:f6:07:87:f6:14:33:9a:e6:23:af:4e:b0:b2:4f:
                    df:7c:33:7b:75:8d:b7:d7:6e:81:e4:21:12:8f:62:
                    c5:4d:fb:0b:c5:a8:83:b1:e9:f5:0b:d2:8e:55:10:
                    7b:2b:52:aa:9b:5a:bd:ab:1e:dc:c1:57:45:4f:f1:
                    92:48:c1:d6:8f:83:bb:cd:62:97:c6:a3:b5:99:ba:
                    53:d2:11:e9:b2:39:69:35:ae:30:d3:6f:50:93:de:
                    69:08:85:16:c7:b5:73:36:ce:51:4b:c1:2f:51:3e:
                    42:35:6b:44:45:d4:29:62:05:e2:c6:04:2e:57:75:
                    07:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FC:8A:C6:AC:31:DE:F8:15:62:F0:A4:F9:FB:0B:36:79:31:9F:F2
            X509v3 Authority Key Identifier:
                keyid:60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/3b6a00a468bc10ed56d9f305a061f9b0782bf76b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/2ea1715958333398146179fdbf2e485fe6525742.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.0/23
                IPv6:
                  2800:700::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:52:c5:86:34:1b:13:84:04:9a:f8:3e:46:43:36:32:f2:22:
         22:f6:c7:db:40:2b:34:b2:ae:51:fc:88:17:29:b8:3d:af:e7:
         45:d6:76:16:97:71:36:7c:73:98:59:a2:2f:2c:45:c5:b3:a6:
         4a:41:3a:c9:14:1b:a9:7c:e8:f8:69:1c:6d:7c:c2:00:d6:58:
         bc:25:d6:47:dc:34:f5:97:74:80:3a:f7:f1:4c:75:43:c7:fd:
         90:55:9a:b6:c3:8c:9b:d7:97:89:00:9c:0c:08:8d:2b:cc:e6:
         39:4b:21:de:6d:fc:13:be:70:72:12:35:b1:a6:bc:44:4b:99:
         c4:cf:0d:1b:48:99:29:89:df:91:fd:97:c8:ff:ad:a4:8a:6d:
         10:82:df:23:0c:56:17:ad:be:b8:26:32:ee:54:d7:5b:52:07:
         20:f2:71:27:b0:14:eb:df:89:84:2f:32:f6:8f:98:9a:ba:bd:
         78:e8:db:d7:b0:df:35:d9:f6:18:dd:e3:a3:e3:42:8b:39:1e:
         34:70:99:28:a9:40:1e:d3:e1:96:2a:26:43:10:b6:17:77:25:
         9d:9c:6a:b8:d9:0f:e7:ec:e6:11:a8:7e:1a:99:59:fa:41:9a:
         c2:e2:ae:5b:24:b4:ec:b3:84:c0:54:79:da:c9:8a:14:0c:cf:
         a9:8e:fc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----