Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0168514e-e31c-4ad0-9b99-c21e6b58e983/930b09fcd202ccb4f342b9486a63df3eec4d9724.roa
File:                     930b09fcd202ccb4f342b9486a63df3eec4d9724.roa (raw, json)
Hash identifier:          cK1C9HGae+n27vcdaC71DnaEZuhdJItFwaBv2PasBbY=
Subject key identifier:   5F:F2:BC:44:3C:75:43:B1:15:CA:EA:75:EE:5B:76:96:A6:EB:9B:AA
Certificate issuer:       /CN=e08b233ae5fff785bf227739cbb036acc7d18ab2
Certificate serial:       1A297E
Authority key identifier: 5A:7C:F6:2C:9C:87:74:87:37:17:D9:E0:54:CF:89:3E:E9:B2:B5:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e08b233ae5fff785bf227739cbb036acc7d18ab2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0168514e-e31c-4ad0-9b99-c21e6b58e983/930b09fcd202ccb4f342b9486a63df3eec4d9724.roa
Signing time:             Fri 02 Sep 2022 19:56:20 +0000
ROA not before:           Fri 02 Sep 2022 19:51:49 +0000
ROA not after:            Mon 02 Sep 2024 19:51:49 +0000
asID:                     263749
IP address blocks:        138.94.56.0/22 maxlen: 24
                          2803:8040::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1714558 (0x1a297e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08b233ae5fff785bf227739cbb036acc7d18ab2
        Validity
            Not Before: Sep  2 19:51:49 2022 GMT
            Not After : Sep  2 19:51:49 2024 GMT
        Subject: CN=930b09fcd202ccb4f342b9486a63df3eec4d9724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:41:e7:e9:78:f5:d7:e0:a3:84:c8:74:2d:af:
                    77:ba:f9:25:f6:a8:53:66:2a:a1:40:d4:59:fa:95:
                    27:7a:f6:5d:b1:8a:b3:4f:d9:a0:13:a0:79:81:20:
                    bf:12:8f:93:74:93:6a:04:2a:7f:7c:bf:f6:cc:85:
                    a2:91:74:ad:67:39:3d:54:53:e7:54:3a:84:0a:ea:
                    84:f3:f9:af:6d:ed:a3:77:ef:0d:bd:0f:7a:5a:84:
                    a3:66:07:4f:97:9d:42:f9:4d:e8:99:ef:ea:60:bb:
                    33:2c:b5:35:05:09:25:58:9d:87:e4:c6:e4:9d:8c:
                    12:c4:9f:bf:d9:5b:c9:8f:58:16:04:f1:da:89:70:
                    90:1f:f6:ba:36:76:1a:c1:83:97:7b:db:b8:b7:33:
                    e1:d3:97:f0:09:55:bd:fb:56:f1:36:a0:48:c1:62:
                    69:dc:96:c9:27:f5:fd:d5:1a:7c:2d:4c:b8:f2:7e:
                    89:68:e0:6c:c0:d1:1c:8d:39:5a:9b:57:08:d4:e9:
                    3c:11:15:da:6d:49:90:dc:61:14:04:a5:7a:de:3d:
                    21:bf:1a:7d:17:3d:b5:94:27:e3:f5:4c:a1:9d:e7:
                    14:8c:07:f0:9a:77:de:8c:7b:a0:4f:3e:d3:6c:af:
                    4e:76:66:db:bf:d0:80:f9:19:a5:d6:de:8d:c7:2d:
                    40:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F2:BC:44:3C:75:43:B1:15:CA:EA:75:EE:5B:76:96:A6:EB:9B:AA
            X509v3 Authority Key Identifier:
                keyid:5A:7C:F6:2C:9C:87:74:87:37:17:D9:E0:54:CF:89:3E:E9:B2:B5:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e08b233ae5fff785bf227739cbb036acc7d18ab2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0168514e-e31c-4ad0-9b99-c21e6b58e983/930b09fcd202ccb4f342b9486a63df3eec4d9724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0168514e-e31c-4ad0-9b99-c21e6b58e983/e08b233ae5fff785bf227739cbb036acc7d18ab2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.56.0/22
                IPv6:
                  2803:8040::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:c4:17:63:72:87:d9:2a:f7:19:db:b4:4a:30:53:58:d6:ab:
         32:91:8a:48:44:22:19:2f:57:67:90:b2:68:28:6d:a1:59:1d:
         7a:de:74:6c:02:be:53:bb:d5:65:52:01:54:8c:dc:a5:c6:82:
         15:b2:04:06:ac:4f:ca:a5:fb:42:8b:bd:b2:82:8f:65:ab:64:
         9d:46:6b:4f:27:a6:ec:0a:55:25:0c:d6:5e:64:4f:fd:f6:fe:
         6a:3e:f8:77:42:ae:06:01:63:06:7e:87:fb:9b:4c:73:78:d8:
         4e:ea:37:04:63:bd:a8:5f:90:ca:e7:5e:b7:09:d2:cb:1f:78:
         4c:0c:39:fe:16:28:3b:fb:4a:4c:48:68:f1:76:1b:87:37:ef:
         32:cf:1a:40:0a:22:cd:65:a5:e8:b6:7b:cb:46:4a:c9:b5:41:
         3d:05:c4:13:1a:ea:e5:1d:5e:19:c4:58:8a:de:70:b9:bd:de:
         6d:19:a1:bb:63:ab:f8:11:5f:b1:72:be:0b:70:82:2b:4a:d2:
         78:b4:a8:65:e6:05:f3:ba:99:de:69:40:d4:8d:bb:96:fa:e3:
         0a:80:13:b8:93:ac:88:57:16:96:fe:3f:b6:d5:78:cf:5f:50:
         15:2e:56:48:93:f6:d5:8c:e2:d3:15:0c:0e:08:6a:72:15:29:
         7c:29:74:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----