Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29996bb8-79fb-4261-bd5b-6f94c283a58c/fa6a84c0cd02767be4b4bf2380d81100a7371103.roa
File:                     fa6a84c0cd02767be4b4bf2380d81100a7371103.roa (raw, json)
Hash identifier:          LvUE2/AcRN4Xxpm3H5EB0HFCmgEOTMLG6IhJhFxKJaI=
Subject key identifier:   1A:E3:5E:4D:9F:2A:CF:0A:1C:5E:EF:9A:F4:E6:3B:92:6C:A3:C1:72
Certificate issuer:       /CN=021081310b983679c1c39476508572541f96603f
Certificate serial:       1F9A58
Authority key identifier: A3:74:80:FB:FB:A7:C8:7E:4D:A3:B8:D4:D2:D9:5D:03:9F:92:61:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/021081310b983679c1c39476508572541f96603f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29996bb8-79fb-4261-bd5b-6f94c283a58c/fa6a84c0cd02767be4b4bf2380d81100a7371103.roa
Signing time:             Tue 06 Jun 2023 01:42:47 +0000
ROA not before:           Mon 05 Jun 2023 01:42:47 +0000
ROA not after:            Fri 06 Jun 2025 01:42:47 +0000
asID:                     23470
IP address blocks:        131.196.252.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2071128 (0x1f9a58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021081310b983679c1c39476508572541f96603f
        Validity
            Not Before: Jun  5 01:42:47 2023 GMT
            Not After : Jun  6 01:42:47 2025 GMT
        Subject: CN=fa6a84c0cd02767be4b4bf2380d81100a7371103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:10:d0:6a:ff:17:37:30:95:49:0e:8e:8f:1a:
                    16:37:6f:b6:e7:31:7e:e3:cd:b9:62:28:6a:d8:50:
                    60:c1:2c:64:38:04:7e:c9:62:f7:5f:d0:21:2a:25:
                    42:91:20:87:71:70:ee:dd:db:5f:3d:9e:65:05:c9:
                    8c:a3:01:e1:5d:88:3c:bd:77:05:ef:f9:f7:a7:b6:
                    55:bd:18:d5:1a:2c:a2:66:3b:05:ff:4f:f8:92:fe:
                    dd:39:7c:78:cd:89:4b:46:bf:68:c5:ce:51:e5:cd:
                    9a:5b:20:50:00:ee:55:0f:a0:cc:0c:0d:46:ed:2f:
                    c7:49:e2:f6:bb:7f:f1:98:7d:5c:08:3a:85:b1:22:
                    d4:90:6b:15:50:2e:66:2e:04:69:a7:13:03:0a:78:
                    ba:bf:b9:9e:d1:93:b4:5b:33:36:20:47:e0:75:bb:
                    a8:75:f5:9d:b1:91:1a:94:cb:e2:c8:ee:b7:75:a3:
                    c1:71:0d:c4:06:1f:8b:ac:03:03:ec:78:cd:a6:e3:
                    cf:20:bf:d3:dd:7d:63:f6:89:9f:d1:6d:5d:cf:ff:
                    ec:39:e1:d1:6b:ec:08:b7:88:7b:56:6e:47:2b:30:
                    16:f9:a8:db:2a:3c:74:77:bb:e3:de:16:f0:17:67:
                    f1:88:19:98:31:90:c0:2c:d3:77:e7:57:c9:43:ed:
                    00:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E3:5E:4D:9F:2A:CF:0A:1C:5E:EF:9A:F4:E6:3B:92:6C:A3:C1:72
            X509v3 Authority Key Identifier:
                keyid:A3:74:80:FB:FB:A7:C8:7E:4D:A3:B8:D4:D2:D9:5D:03:9F:92:61:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/021081310b983679c1c39476508572541f96603f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29996bb8-79fb-4261-bd5b-6f94c283a58c/fa6a84c0cd02767be4b4bf2380d81100a7371103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29996bb8-79fb-4261-bd5b-6f94c283a58c/021081310b983679c1c39476508572541f96603f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:f6:16:90:8e:44:45:5b:ad:1d:b1:ec:d3:8f:b5:6e:fd:ed:
         af:d3:9a:6d:21:d9:bc:15:ff:9b:71:a6:94:4e:6b:fb:bc:8a:
         a8:5d:c7:47:7e:8f:2f:2c:3a:6f:c5:6a:ec:e4:11:97:5b:c1:
         74:80:00:e2:79:4d:b8:1b:36:80:68:76:61:b8:17:ff:68:94:
         a1:52:3d:46:a7:af:ea:59:39:14:19:12:88:18:34:59:36:a1:
         46:64:e5:39:33:a4:99:b5:1f:59:16:00:4c:32:3b:4e:3e:af:
         8b:58:87:f4:19:49:c6:1f:8d:9f:b4:7c:7e:6c:7c:69:68:b4:
         58:c2:54:3e:80:55:42:c3:8e:f8:cd:c8:ff:7d:d9:56:a1:1a:
         1e:ba:14:ae:ed:54:55:62:32:de:58:b7:04:e2:b5:76:43:a9:
         cb:13:9d:da:34:fa:17:d8:27:a0:10:ea:4c:2d:b6:73:c0:16:
         2f:a8:92:1e:4b:a1:03:75:ab:2b:a7:fa:9d:88:cf:6c:01:9b:
         25:67:b7:e7:80:fe:49:f1:d9:b4:41:4f:0e:52:9e:3b:74:3f:
         f9:0f:70:32:35:90:bd:71:84:cc:27:ff:f1:cf:cc:06:4b:b8:
         10:cd:b6:a8:61:b1:be:c9:bc:5d:17:7a:86:2a:5f:04:d4:0c:
         a6:c2:fd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----