Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/5af9bba1ebab9662394fdc88df8d8ffb20207fcc.roa
File:                     5af9bba1ebab9662394fdc88df8d8ffb20207fcc.roa (raw, json)
Hash identifier:          vuJ9u37o1o9kWAcUtZR0jx+GxNK15aG7eqMaW19Yc98=
Subject key identifier:   53:F3:1C:F6:AB:A3:BE:5B:29:DE:3A:D2:76:1A:06:85:33:0D:2D:3C
Certificate issuer:       /CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
Certificate serial:       1F248D
Authority key identifier: 4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/5af9bba1ebab9662394fdc88df8d8ffb20207fcc.roa
Signing time:             Wed 15 Feb 2023 12:37:12 +0000
ROA not before:           Tue 09 Nov 2021 03:00:00 +0000
ROA not after:            Tue 10 Nov 2026 03:00:00 +0000
asID:                     263774
IP address blocks:        170.83.126.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2040973 (0x1f248d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
        Validity
            Not Before: Nov  9 03:00:00 2021 GMT
            Not After : Nov 10 03:00:00 2026 GMT
        Subject: CN=5af9bba1ebab9662394fdc88df8d8ffb20207fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:53:24:03:5a:25:52:3c:79:9a:71:ba:79:00:
                    cc:c3:81:a0:32:8d:5e:65:75:5a:84:32:e6:06:a2:
                    53:51:8c:a1:a3:2e:98:cc:9b:dc:a1:97:09:02:a1:
                    f7:b2:2e:43:07:aa:88:d1:83:56:90:ff:6b:3d:99:
                    c8:93:98:2f:da:dd:82:cb:a2:37:8f:29:ed:db:ce:
                    0a:b2:79:03:13:2a:25:b2:6a:e7:5c:06:da:b3:43:
                    9e:24:8f:b4:d6:07:41:62:b3:3c:fb:6e:00:79:4b:
                    98:f2:2b:e1:55:ad:78:38:41:05:f3:ed:11:a4:ad:
                    f9:61:3d:65:08:70:d4:6b:fe:bd:c2:cc:32:e4:da:
                    1b:4f:1f:33:7f:fe:6c:02:ab:b7:a5:a9:54:fd:85:
                    30:96:36:8e:d8:9d:26:63:b0:f0:f6:9e:58:7e:ce:
                    63:3e:c0:08:bb:13:d6:e2:98:ee:9f:f4:ae:76:9e:
                    03:08:94:03:a6:d3:0f:3e:69:32:65:79:9d:a8:74:
                    05:ef:04:ad:d2:22:9b:44:78:ee:da:b9:9d:88:40:
                    34:ad:85:fb:20:77:92:13:7a:63:92:59:6a:9c:7d:
                    94:82:7c:af:10:9f:c8:e3:6a:fc:50:88:f4:2a:02:
                    aa:a4:7d:d1:ab:61:48:11:56:00:cb:1d:47:23:b5:
                    d4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F3:1C:F6:AB:A3:BE:5B:29:DE:3A:D2:76:1A:06:85:33:0D:2D:3C
            X509v3 Authority Key Identifier:
                keyid:4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/5af9bba1ebab9662394fdc88df8d8ffb20207fcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/0306af81c270a60bd7a6b440bc97d420322ebcb5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:25:f6:15:e3:4b:fa:e6:db:30:30:18:15:76:94:b4:14:fa:
         34:3a:10:42:74:52:4b:60:85:36:47:6d:08:2a:d0:f3:d0:db:
         bc:cb:cb:68:47:c3:1b:44:e4:13:a9:29:ac:5a:e2:f7:f7:4f:
         37:c3:ad:67:d5:53:9d:b6:f5:51:4d:75:88:97:4a:5b:55:f1:
         9f:cd:b2:fe:17:00:13:c2:a8:f2:ef:90:dd:37:87:0f:2b:f0:
         90:3e:32:23:e0:41:1c:e7:57:d9:9c:09:26:4a:d5:e8:c3:c5:
         87:f3:18:a5:da:90:d1:0d:4c:d7:25:25:54:8a:4b:a2:a8:6b:
         ac:51:52:c1:75:81:79:99:e3:67:14:4e:83:0e:97:a1:89:95:
         d1:ce:06:fe:4e:59:72:c5:e8:24:27:2b:6f:66:7c:49:bd:92:
         e2:9a:68:c2:a4:1e:f9:42:f0:c4:30:da:08:7c:e5:f2:b5:1b:
         9c:cf:cb:18:c2:75:d7:19:63:f7:be:ba:e5:a9:92:a0:05:c6:
         d7:55:63:06:b9:4c:1b:95:cd:a3:4a:2a:ab:02:e2:a0:97:9d:
         e1:7c:e4:dc:e8:bb:e2:85:e9:11:89:e4:0b:fa:d0:36:07:8f:
         48:20:95:33:7e:5e:77:80:7e:65:66:07:0f:96:f0:0d:0f:46:
         d9:26:32:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----