Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/9cf2a72b682e28e87e44e5a1702672dbcbf27a52.roa
File:                     9cf2a72b682e28e87e44e5a1702672dbcbf27a52.roa (raw, json)
Hash identifier:          zL9m+21iZGBOH+LfxKj8iPuws/f4w6SAtqdwZ3g/flY=
Subject key identifier:   23:67:2E:9D:E8:EF:CB:A7:05:01:01:3F:33:A8:BF:30:35:99:78:AE
Certificate issuer:       /CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
Certificate serial:       135E30
Authority key identifier: 4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/9cf2a72b682e28e87e44e5a1702672dbcbf27a52.roa
Signing time:             Wed 10 Nov 2021 13:02:21 +0000
ROA not before:           Wed 10 Nov 2021 03:00:00 +0000
ROA not after:            Tue 10 Nov 2026 03:00:00 +0000
asID:                     263774
IP address blocks:        138.117.76.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1269296 (0x135e30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
        Validity
            Not Before: Nov 10 03:00:00 2021 GMT
            Not After : Nov 10 03:00:00 2026 GMT
        Subject: CN=9cf2a72b682e28e87e44e5a1702672dbcbf27a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:30:9d:a0:18:87:92:7f:fa:fd:cc:4d:6f:5a:
                    c3:96:11:61:11:08:72:7b:bb:df:94:e0:52:78:32:
                    3b:af:83:04:e1:a1:94:fe:5d:60:cd:aa:4b:61:39:
                    1d:ea:db:3f:7a:0f:34:ca:cc:99:6a:8b:1f:81:21:
                    0b:8e:74:d3:d5:f1:e5:2b:bd:fb:c1:eb:a7:37:8d:
                    a5:a8:c5:f6:b1:59:28:68:c5:b4:f6:b1:c2:5c:c1:
                    78:d1:9a:c9:90:91:9b:30:20:34:2a:15:a4:5f:50:
                    d4:48:cc:bc:f3:05:ac:27:74:3d:f1:e7:87:4f:4b:
                    ad:75:55:80:4f:f0:ba:41:47:89:4d:84:25:6a:8d:
                    6d:07:4f:a4:5e:20:73:26:25:34:3f:b8:f2:88:db:
                    c1:ea:b3:21:19:d6:67:0c:cc:cb:48:7c:2f:b8:c2:
                    08:7c:cc:d3:6a:72:dd:1b:b0:30:bc:1a:54:c4:b3:
                    8e:34:4b:c5:79:33:90:9b:f6:70:fe:f3:fd:6d:cf:
                    dd:42:ba:c1:91:09:06:cf:c6:91:45:b7:41:f0:3b:
                    ad:d4:9e:3e:23:4e:37:d1:e6:84:b7:c7:fd:cd:0c:
                    e9:a9:2f:38:ce:a0:9d:79:6a:a7:8b:33:b4:f7:a2:
                    99:af:c3:bc:4e:6c:b9:5b:d7:01:e0:c6:9e:14:39:
                    eb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:67:2E:9D:E8:EF:CB:A7:05:01:01:3F:33:A8:BF:30:35:99:78:AE
            X509v3 Authority Key Identifier:
                keyid:4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/9cf2a72b682e28e87e44e5a1702672dbcbf27a52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/0306af81c270a60bd7a6b440bc97d420322ebcb5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:b0:7b:8f:99:83:10:85:ee:1f:e0:68:4d:7c:94:fd:59:ce:
         71:ef:e4:de:59:1a:89:dd:e2:54:7f:39:44:61:6b:80:cc:74:
         c0:6e:04:f1:6f:2d:40:00:af:fd:8f:50:4c:8a:82:a4:cb:66:
         b1:ce:01:72:5a:59:62:b1:c0:70:9b:e3:44:57:1a:95:a4:51:
         cf:fb:08:91:5c:55:0f:e7:f3:ff:d5:79:09:a6:1b:73:ec:c7:
         34:49:e9:5e:70:83:fc:76:d9:c8:50:a7:23:e7:8f:24:64:ec:
         4a:9e:8f:d1:a3:78:80:a5:e9:cb:74:3f:c4:a8:5d:44:27:00:
         b2:f7:6a:6a:d2:c5:36:82:90:04:77:2d:3d:fa:e9:5a:04:e9:
         e2:6d:41:5a:18:60:ea:38:7a:29:69:b4:58:0d:fa:7e:a6:f1:
         dc:e0:d3:f7:6a:df:95:a7:f6:a6:9c:a5:9e:8c:79:53:76:18:
         fb:5b:da:fe:7f:63:b9:52:b3:3a:f7:9a:f3:8d:ae:a9:03:6a:
         07:13:2b:77:84:46:e7:ea:68:e0:3b:5f:b3:c2:b1:d7:78:ed:
         2b:c5:46:dc:eb:d3:c7:bb:6d:9c:4a:2c:6b:9c:54:13:b6:06:
         b5:93:46:f1:a0:ee:88:1d:da:76:8f:7b:90:fc:44:ea:65:85:
         5f:0e:e5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----