Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/88e88f97d2295420cf8e310d18ea21b3965578ca.roa
File:                     88e88f97d2295420cf8e310d18ea21b3965578ca.roa (raw, json)
Hash identifier:          fAI+pfj2k7bWhgRq4UzZuynLTCWL7MQqAQ0zTGNFS+4=
Subject key identifier:   CA:EF:A5:ED:31:BC:5C:F3:1B:67:CA:F1:21:22:B9:E7:FD:9D:97:E6
Certificate issuer:       /CN=f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4
Certificate serial:       0E6539
Authority key identifier: 88:B4:BB:31:C9:8C:34:E2:6A:D4:B8:91:AD:BA:B8:0E:22:6E:2C:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/88e88f97d2295420cf8e310d18ea21b3965578ca.roa
Signing time:             Mon 19 Jun 2023 17:22:40 +0000
ROA not before:           Sun 18 Jun 2023 17:22:40 +0000
ROA not after:            Thu 19 Jun 2025 17:22:40 +0000
asID:                     263824
IP address blocks:        131.255.42.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 943417 (0xe6539)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4
        Validity
            Not Before: Jun 18 17:22:40 2023 GMT
            Not After : Jun 19 17:22:40 2025 GMT
        Subject: CN=88e88f97d2295420cf8e310d18ea21b3965578ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0d:1f:54:3a:d1:47:19:dc:5f:28:e5:69:49:
                    d0:9a:1f:9b:78:e6:22:d7:52:e1:da:f3:45:2a:40:
                    54:3a:0f:46:95:df:bd:f5:10:f8:01:85:0e:30:00:
                    82:af:88:80:fc:65:ca:6e:9a:76:7a:d1:59:51:3b:
                    ab:cc:e9:68:34:1b:ab:ab:5a:60:ad:34:41:40:81:
                    d3:7b:5d:e5:cf:c5:6d:df:9b:00:b4:df:82:72:84:
                    a0:17:8e:6e:e2:bc:75:3c:f7:7b:c6:b3:68:e4:d3:
                    95:30:ab:00:5e:5c:89:df:5f:46:d3:df:e9:ae:1a:
                    ff:60:bf:c4:48:60:44:31:4f:0c:d1:80:07:37:ec:
                    5d:7c:09:c1:72:6c:bd:72:01:c5:86:a1:85:48:6d:
                    17:53:18:d5:5f:05:00:d0:29:f9:8a:52:44:53:08:
                    f4:5b:52:29:fd:ae:d8:6e:5a:09:1d:e0:5d:ae:fe:
                    46:68:7d:dc:ad:b0:5d:f9:fa:70:54:d4:93:63:e7:
                    51:3a:2d:d9:8c:1d:29:0d:ce:7d:b2:59:ca:24:9d:
                    31:72:27:28:a1:24:71:f0:3c:6e:4d:a7:c6:6d:9b:
                    d4:f9:fe:95:0f:63:fc:5f:be:1b:ec:da:e1:5f:77:
                    3c:25:43:d8:97:92:32:29:be:27:72:fc:49:f9:d9:
                    0a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EF:A5:ED:31:BC:5C:F3:1B:67:CA:F1:21:22:B9:E7:FD:9D:97:E6
            X509v3 Authority Key Identifier:
                keyid:88:B4:BB:31:C9:8C:34:E2:6A:D4:B8:91:AD:BA:B8:0E:22:6E:2C:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/88e88f97d2295420cf8e310d18ea21b3965578ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:82:13:ac:cf:79:a7:bf:4a:17:ae:65:a2:f4:39:d4:8f:23:
         f4:01:aa:2e:6a:f3:8a:e5:d9:29:72:56:cb:dc:bf:f7:7e:34:
         55:6c:55:d9:41:41:94:68:b0:73:f1:c4:13:34:b1:15:22:96:
         0a:ff:88:2e:82:85:31:9c:18:1a:9a:04:eb:7a:a2:4e:8f:d0:
         ca:c2:d3:62:a8:14:58:7b:90:22:20:18:14:00:28:65:31:50:
         de:58:b7:64:b7:df:e2:13:d0:b3:75:b2:b1:d3:bd:c2:b8:60:
         75:7b:ce:0e:d8:8a:1b:ba:ae:94:d0:8c:71:e2:09:7d:49:5c:
         30:cb:c1:3e:83:d1:57:71:ff:16:c3:85:16:93:00:9f:64:ed:
         f8:36:8d:b1:2c:50:3e:d9:22:b8:bb:00:e2:73:01:69:a3:d8:
         3a:96:88:47:04:5e:f1:ee:ab:b6:87:2e:f9:23:a2:9d:01:34:
         14:10:10:1f:c2:61:b8:f4:da:9e:90:32:2a:57:11:e9:45:51:
         67:56:a5:19:d1:d9:00:b5:8b:03:13:e1:28:28:31:09:02:b2:
         5e:cb:a1:39:24:4b:c1:eb:d8:96:a6:43:f3:82:79:c7:b1:f1:
         73:25:d8:00:02:c7:eb:81:fb:6b:6e:a8:af:bf:b8:c1:af:db:
         e8:ff:a2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----