Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/418f55f8-ab57-44fb-ab06-623928fa1045/8d22b229295c30ef1552e025526a121956659b82.roa
File:                     8d22b229295c30ef1552e025526a121956659b82.roa (raw, json)
Hash identifier:          cBAuc5ndM+aT71YEOlxKs1vHewveAYvimjL3w7UYZKI=
Subject key identifier:   0F:FF:93:A6:64:C7:94:54:EF:D3:BF:90:CB:C9:A8:CF:E2:30:DA:2F
Certificate issuer:       /CN=d802d1f4519aab3e5793a16a3c9971a640951720
Certificate serial:       12ED96
Authority key identifier: 07:D9:8A:D9:50:01:E8:23:10:71:BF:BD:6B:25:1E:14:9A:A4:DD:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d802d1f4519aab3e5793a16a3c9971a640951720.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/418f55f8-ab57-44fb-ab06-623928fa1045/8d22b229295c30ef1552e025526a121956659b82.roa
Signing time:             Wed 20 Oct 2021 16:43:50 +0000
ROA not before:           Wed 20 Oct 2021 03:00:00 +0000
ROA not after:            Fri 20 Oct 2023 03:00:00 +0000
asID:                     263693
IP address blocks:        138.121.160.0/22 maxlen: 24
                          179.60.232.0/22 maxlen: 24
                          2803:3880::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1240470 (0x12ed96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d802d1f4519aab3e5793a16a3c9971a640951720
        Validity
            Not Before: Oct 20 03:00:00 2021 GMT
            Not After : Oct 20 03:00:00 2023 GMT
        Subject: CN=8d22b229295c30ef1552e025526a121956659b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:e5:93:4a:ef:9d:a6:f9:5d:7f:8d:da:0d:
                    ed:08:2e:18:8a:74:33:34:09:de:2a:77:13:d5:f8:
                    06:9a:cc:5a:91:8e:6d:6b:17:69:8c:96:f4:bb:5c:
                    f5:76:fe:a4:6f:25:2b:43:1a:df:76:37:2a:a0:aa:
                    d6:fb:93:77:5e:c5:c9:f9:41:51:85:13:81:04:db:
                    7f:8f:02:27:c6:e3:5b:d2:68:a8:09:0b:d7:e8:c0:
                    09:44:84:66:03:2a:77:6a:82:83:e5:0c:c4:12:2f:
                    41:60:cd:43:c5:7f:9c:a4:a1:b5:bf:40:1b:3b:86:
                    a8:07:48:75:61:ef:cb:20:00:df:21:dc:1b:ab:6d:
                    b9:76:f5:43:ac:23:0c:36:df:0d:62:9c:71:2d:15:
                    68:e8:c0:aa:22:3c:f4:63:06:47:bb:82:4c:6f:1f:
                    79:f1:9e:34:45:a8:b3:95:d9:d7:b6:b6:49:d0:00:
                    ea:8d:be:04:18:fc:d3:79:d4:a0:d5:ae:08:3f:a6:
                    0e:8c:1c:b3:e3:6b:74:2b:1b:70:f6:3d:28:9a:30:
                    d5:d9:e8:ed:89:4d:e2:d3:0d:69:cb:eb:23:02:90:
                    ef:c0:82:3a:0b:37:a2:ea:cb:81:6a:d9:fb:10:2c:
                    33:64:40:9e:44:d0:62:1d:70:c2:04:5d:57:f6:df:
                    52:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FF:93:A6:64:C7:94:54:EF:D3:BF:90:CB:C9:A8:CF:E2:30:DA:2F
            X509v3 Authority Key Identifier:
                keyid:07:D9:8A:D9:50:01:E8:23:10:71:BF:BD:6B:25:1E:14:9A:A4:DD:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d802d1f4519aab3e5793a16a3c9971a640951720.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/418f55f8-ab57-44fb-ab06-623928fa1045/8d22b229295c30ef1552e025526a121956659b82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/418f55f8-ab57-44fb-ab06-623928fa1045/d802d1f4519aab3e5793a16a3c9971a640951720.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.160.0/22
                  179.60.232.0/22
                IPv6:
                  2803:3880::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:e5:77:4d:d4:d8:de:b5:fe:b0:fc:28:dd:ab:dc:01:00:0d:
         0b:bd:9f:d6:a5:3c:aa:0e:1e:ee:3a:03:49:73:d3:ae:df:45:
         8c:99:2e:02:8f:28:4d:b9:cb:01:50:2f:8b:d0:35:e7:14:e1:
         65:8d:33:97:c4:ae:09:27:dd:54:3e:c7:43:e3:e4:60:c0:4e:
         f0:1f:a8:e0:0c:e2:6d:23:79:4c:10:77:d1:0f:ba:99:72:7a:
         2b:22:4f:59:e1:d3:62:f7:d3:5a:cd:20:45:43:04:59:c3:17:
         55:9b:4d:4c:44:86:42:0e:bb:46:59:42:b5:61:9a:72:09:77:
         5c:49:a4:72:51:8e:b0:44:77:c7:b8:77:3f:53:1b:e9:0d:35:
         24:24:31:f1:36:66:a2:70:a7:d7:9c:a1:ce:89:cb:90:88:f1:
         b6:b6:0f:23:11:af:dd:40:35:12:1b:83:8b:2c:25:b7:be:80:
         76:71:35:c0:1b:ef:be:55:ad:1a:86:36:e2:10:3d:13:b3:3c:
         5e:94:40:e5:ca:c5:6c:c9:8d:a2:10:64:6b:df:9d:4b:ef:96:
         98:14:7f:13:97:44:27:43:90:79:c2:f7:88:5b:92:9e:af:85:
         3b:63:72:01:33:0c:82:64:5c:9e:fb:ed:01:ed:44:1c:f9:5e:
         4d:7c:1d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----