Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/d4479225a278c769dbb6fb33a1fc04ac763426ca.roa
File:                     d4479225a278c769dbb6fb33a1fc04ac763426ca.roa (raw, json)
Hash identifier:          x8cRxUa33tu1Ero7fYaM/AAijn1G+DbdrzKjWPrGa8Q=
Subject key identifier:   8A:DA:E1:1B:F8:FD:8B:B4:C3:2C:18:52:55:0B:97:EE:C5:34:04:2B
Certificate issuer:       /CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
Certificate serial:       0BDB59
Authority key identifier: 40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/d4479225a278c769dbb6fb33a1fc04ac763426ca.roa
Signing time:             Fri 29 Sep 2023 14:58:52 +0000
ROA not before:           Thu 28 Sep 2023 14:58:52 +0000
ROA not after:            Mon 29 Sep 2025 14:58:52 +0000
asID:                     272150
IP address blocks:        192.141.20.0/24 maxlen: 24
                          192.141.22.0/23 maxlen: 24
                          2803:6020::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 777049 (0xbdb59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
        Validity
            Not Before: Sep 28 14:58:52 2023 GMT
            Not After : Sep 29 14:58:52 2025 GMT
        Subject: CN=d4479225a278c769dbb6fb33a1fc04ac763426ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:02:a1:80:2c:ec:13:de:f8:ba:24:0d:90:b9:
                    40:08:52:bb:63:9b:1e:79:42:db:e2:69:a5:e5:f5:
                    3e:b3:d6:c1:4d:3e:75:27:b5:fc:6b:07:99:d3:30:
                    fd:90:6d:60:e5:f4:3e:97:dc:65:44:78:6d:2d:2f:
                    7b:db:c9:96:ff:97:d3:0c:32:05:c5:f1:43:b6:42:
                    32:91:8e:30:15:46:0e:d1:1c:bd:92:4e:42:e4:91:
                    a0:35:72:fd:d7:13:be:1c:fc:92:af:cf:1b:35:01:
                    da:80:7f:5a:dd:ec:07:09:55:ec:47:51:92:ba:21:
                    f8:32:e1:03:3c:f6:9c:71:2b:f9:18:ff:02:b9:b4:
                    29:6f:03:e4:b3:43:f6:0a:23:82:ee:9d:c6:6a:31:
                    fa:8d:2f:6c:5c:d5:6a:af:c6:ab:af:c9:95:6d:a6:
                    57:3a:76:a6:ea:57:a5:09:f9:32:fe:13:36:c1:49:
                    b8:30:fd:03:cc:29:72:43:3c:20:0f:7e:82:0c:45:
                    c3:5f:a1:f9:43:1f:67:cd:d7:44:70:db:83:8b:36:
                    59:ed:f1:40:27:e4:dc:73:d2:36:99:9f:39:a8:98:
                    e1:32:a4:83:34:25:c0:5f:da:a7:e2:98:30:33:44:
                    e6:53:a2:16:cd:3d:4a:fc:ad:38:1c:12:9d:11:95:
                    86:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DA:E1:1B:F8:FD:8B:B4:C3:2C:18:52:55:0B:97:EE:C5:34:04:2B
            X509v3 Authority Key Identifier:
                keyid:40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/d4479225a278c769dbb6fb33a1fc04ac763426ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/463cab8887b80a1beafb23f455d7d8458c8c1c5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.20.0/24
                  192.141.22.0/23
                IPv6:
                  2803:6020::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:0b:b6:8e:c2:25:b4:b4:96:b8:8c:d2:48:b0:0c:f2:d1:a8:
         d1:ee:a2:43:3a:43:7f:52:e8:14:04:a8:2b:af:3e:da:db:18:
         8d:ae:cf:2b:be:67:89:0a:9a:1d:d3:f5:9a:a0:8b:96:71:f2:
         c2:c5:48:ee:42:2c:e6:d4:8c:2f:a9:eb:76:a1:70:7c:97:7c:
         84:62:ba:ff:ca:35:45:be:cf:20:12:dd:54:95:2a:8f:f3:af:
         3a:81:fd:a1:84:92:39:69:9c:1b:80:6a:ab:71:e2:79:0d:16:
         96:51:d1:66:47:1c:ed:86:64:4e:8a:b8:6c:12:6d:3e:fd:da:
         bf:9f:b0:55:08:b6:e5:b7:c4:e2:d9:25:36:da:7b:16:2a:c3:
         5a:fe:bd:1a:9d:7c:22:11:de:f3:98:a7:70:b1:54:70:e1:14:
         5f:b5:6b:30:60:85:7b:21:b5:ae:3c:b7:c7:7d:a2:b6:40:6c:
         fd:85:8a:b9:de:b0:22:f9:c7:45:61:1f:11:43:89:0b:5a:a3:
         7e:2a:94:82:8b:22:81:1b:6b:b0:6d:f3:97:41:6e:9f:51:a8:
         37:57:a1:27:b0:d5:5b:0d:73:c7:2b:62:a2:14:40:fc:e2:9f:
         06:5c:48:0e:95:cb:40:84:d6:38:92:15:6e:e8:a5:ac:eb:2b:
         13:ce:f3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----