Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df2324ef-0144-4645-ad85-5b24c433d9f5/af1f861c8e0f633f4e9075fc7d39ab559baf1f7c.roa
File:                     af1f861c8e0f633f4e9075fc7d39ab559baf1f7c.roa (raw, json)
Hash identifier:          BwyyUp5xh4Y21vc7AB8RvnVsW4PxHWoDRmMI/T6VODs=
Subject key identifier:   9F:A1:D3:F2:67:47:A1:0F:C7:F2:E9:9F:58:1D:BB:E0:C9:80:4B:11
Certificate issuer:       /CN=7aa2f4a764758cd626c2bdda9f67fa86e9e452c7
Certificate serial:       1245A3
Authority key identifier: D4:EB:9D:95:20:33:4D:14:6C:B3:79:7D:2C:0F:B0:EA:72:F9:22:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa2f4a764758cd626c2bdda9f67fa86e9e452c7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/df2324ef-0144-4645-ad85-5b24c433d9f5/af1f861c8e0f633f4e9075fc7d39ab559baf1f7c.roa
Signing time:             Fri 28 Jul 2023 17:00:18 +0000
ROA not before:           Thu 27 Jul 2023 17:00:18 +0000
ROA not after:            Mon 28 Jul 2025 17:00:18 +0000
asID:                     265634
IP address blocks:        170.245.232.0/22 maxlen: 24
                          2803:dac0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1197475 (0x1245a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa2f4a764758cd626c2bdda9f67fa86e9e452c7
        Validity
            Not Before: Jul 27 17:00:18 2023 GMT
            Not After : Jul 28 17:00:18 2025 GMT
        Subject: CN=af1f861c8e0f633f4e9075fc7d39ab559baf1f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:15:94:e4:fc:b0:6b:ef:01:33:ee:cb:8c:7d:
                    76:9e:40:fc:1e:e8:8d:39:be:4a:f2:84:c0:68:4e:
                    0f:5f:6c:90:7e:d1:85:b6:34:05:38:26:6f:23:25:
                    1b:0b:d6:87:04:05:cb:2c:83:24:c4:7d:a4:47:d5:
                    ba:4f:e2:09:9c:93:bc:0c:0a:da:43:f9:ee:b4:1f:
                    c4:b2:60:e9:01:94:24:1a:a5:c5:a4:9c:23:da:33:
                    38:df:a1:96:37:02:05:80:dd:c1:db:5d:6e:a4:1b:
                    82:93:3d:90:a9:58:01:da:ef:28:07:20:05:03:b6:
                    89:8e:10:bb:8d:68:1e:d5:a9:62:ea:9f:84:62:20:
                    4b:ba:66:36:6c:40:58:12:61:3c:9d:1e:99:2f:3e:
                    83:c0:1c:7b:73:0e:47:be:52:6c:33:02:4a:54:2e:
                    ed:64:60:dc:1d:62:a8:53:23:ab:30:79:3f:75:b2:
                    00:d1:45:4b:bb:63:58:c9:22:bb:bf:1d:ee:43:bc:
                    03:8f:69:a9:72:90:8e:78:fb:af:5f:01:5b:fb:a9:
                    ef:6f:49:de:8b:5c:1f:92:2d:ac:2e:4e:17:38:20:
                    d2:3a:ba:1d:86:39:01:71:91:75:19:eb:52:43:b9:
                    de:cc:1b:13:67:47:db:e0:26:5e:01:52:cb:ac:c7:
                    64:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A1:D3:F2:67:47:A1:0F:C7:F2:E9:9F:58:1D:BB:E0:C9:80:4B:11
            X509v3 Authority Key Identifier:
                keyid:D4:EB:9D:95:20:33:4D:14:6C:B3:79:7D:2C:0F:B0:EA:72:F9:22:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa2f4a764758cd626c2bdda9f67fa86e9e452c7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df2324ef-0144-4645-ad85-5b24c433d9f5/af1f861c8e0f633f4e9075fc7d39ab559baf1f7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/df2324ef-0144-4645-ad85-5b24c433d9f5/7aa2f4a764758cd626c2bdda9f67fa86e9e452c7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.232.0/22
                IPv6:
                  2803:dac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:89:3e:10:d5:6c:c4:96:92:78:84:8b:54:3d:d6:53:4f:28:
         eb:b0:23:ba:44:30:a8:cf:2f:aa:30:7d:ef:5a:27:bf:e1:dc:
         8f:6e:a6:9b:e3:53:f7:29:16:88:e8:2e:93:bd:6f:35:ad:cf:
         dd:14:c9:24:d5:9b:e1:29:b2:81:25:5e:66:eb:f1:e0:79:e6:
         27:9e:be:0d:de:d2:cf:a5:6f:b1:fe:d1:5e:08:75:fd:fe:89:
         54:5b:2e:f6:88:f4:78:16:d0:c3:a2:4d:70:a5:7f:50:1f:89:
         c2:b5:fe:76:c7:46:70:af:a9:a3:21:3d:36:1e:b8:0f:ec:6b:
         8b:dd:c2:8c:bd:84:de:4a:b3:d0:e6:63:71:fe:b4:6a:15:fd:
         15:98:67:44:83:ac:bd:e8:35:16:d7:b3:71:6a:30:74:32:df:
         fc:55:af:d6:d6:ad:c0:e2:23:e2:b8:d3:5e:91:eb:f6:8b:04:
         82:2f:35:1a:60:9e:d7:75:8d:31:4e:ef:94:38:e3:ac:56:d7:
         87:0d:db:90:8e:1f:8f:9b:fb:70:31:58:a4:d7:c5:c8:e4:ab:
         9e:24:65:17:70:dd:2e:4a:3a:08:51:64:69:b1:82:54:89:35:
         d7:a5:64:71:96:c3:72:ec:4b:fe:3a:fb:a9:35:ac:88:59:74:
         5b:57:3b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----