Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3cc6f6b0-7820-4530-be19-85e625586c58/3f29df44b284d190f2189269c9505701a15b8192.roa
File:                     3f29df44b284d190f2189269c9505701a15b8192.roa (raw, json)
Hash identifier:          CqL7q2B3T5ZBdEhE5ULnSIiIl0Cb/qewFbeCfa9HFxw=
Subject key identifier:   9A:67:A9:66:A5:C7:10:55:65:D7:3D:E5:76:0F:08:16:1B:C9:CC:09
Certificate issuer:       /CN=f172ca4093ff4ce47d20beb1ff07624aff070b40
Certificate serial:       1A985D
Authority key identifier: F5:4B:B6:F3:7D:92:91:07:1D:76:5A:6F:B9:AF:84:6B:EE:61:58:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f172ca4093ff4ce47d20beb1ff07624aff070b40.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3cc6f6b0-7820-4530-be19-85e625586c58/3f29df44b284d190f2189269c9505701a15b8192.roa
Signing time:             Fri 02 Sep 2022 23:39:31 +0000
ROA not before:           Fri 02 Sep 2022 23:39:31 +0000
ROA not after:            Thu 02 Sep 2027 23:39:31 +0000
asID:                     263716
IP address blocks:        132.255.224.0/22 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1742941 (0x1a985d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f172ca4093ff4ce47d20beb1ff07624aff070b40
        Validity
            Not Before: Sep  2 23:39:31 2022 GMT
            Not After : Sep  2 23:39:31 2027 GMT
        Subject: CN=3f29df44b284d190f2189269c9505701a15b8192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e9:ed:65:c8:2e:e8:4a:b7:f9:3f:00:1e:c4:
                    c1:1f:cf:c3:98:40:16:34:97:c5:64:d7:38:b4:c5:
                    7f:2b:b9:86:0e:1c:15:77:cb:cd:14:8a:9d:04:8d:
                    c3:ae:dc:68:d6:c2:42:ff:cc:50:9c:e1:ce:7b:b4:
                    59:48:7e:50:43:e3:73:01:26:6d:4e:da:c6:ef:31:
                    4e:af:42:0e:ec:77:8a:7b:ee:34:95:ae:cd:dd:54:
                    9b:cf:7b:8d:0b:83:fd:72:ac:1f:f9:52:84:c5:f3:
                    d6:10:d7:b0:1e:5e:9d:d1:cd:40:56:d5:29:2d:49:
                    4a:bf:15:f4:e0:49:51:16:4f:d3:15:e0:82:55:49:
                    5b:76:e9:ef:41:f0:f0:93:64:90:82:83:72:87:ac:
                    0b:06:1e:b4:90:af:01:ab:31:71:77:19:76:db:fc:
                    e7:a0:9f:4c:a6:82:cd:dc:48:a8:87:a1:ab:78:9b:
                    a6:e5:73:93:e8:83:38:6b:b8:8a:42:ab:f6:12:5f:
                    7d:9d:53:71:53:e0:44:e9:b9:1d:f6:5a:97:6f:2c:
                    f0:4b:4a:f8:d0:48:82:e1:c0:34:e8:e0:22:c8:19:
                    41:a0:3c:e4:be:bb:96:47:0b:d2:46:7e:e6:90:e9:
                    4e:38:0e:5c:cd:10:ca:6c:97:e5:c9:4e:3c:88:45:
                    a5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:67:A9:66:A5:C7:10:55:65:D7:3D:E5:76:0F:08:16:1B:C9:CC:09
            X509v3 Authority Key Identifier:
                keyid:F5:4B:B6:F3:7D:92:91:07:1D:76:5A:6F:B9:AF:84:6B:EE:61:58:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f172ca4093ff4ce47d20beb1ff07624aff070b40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3cc6f6b0-7820-4530-be19-85e625586c58/3f29df44b284d190f2189269c9505701a15b8192.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3cc6f6b0-7820-4530-be19-85e625586c58/f172ca4093ff4ce47d20beb1ff07624aff070b40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:fc:4a:42:ef:d8:b7:a5:f2:65:2f:87:4d:e5:62:2f:b7:9c:
         05:db:51:5c:5c:e5:21:56:eb:2d:04:12:55:fe:c8:7e:6c:e1:
         c4:ba:9f:4c:0a:63:e4:4a:d5:0d:8d:1f:bb:69:c9:61:48:8e:
         f8:ab:76:5c:68:23:3a:af:10:43:55:b5:57:cc:7c:45:fc:c7:
         e0:c7:35:eb:58:17:38:fe:4a:9a:a4:08:d0:9d:6d:b0:d7:ad:
         78:9b:de:ce:b4:ca:02:a1:76:f4:29:96:5a:ba:59:fc:80:80:
         6e:59:38:78:c9:1d:91:cf:74:1b:ed:0e:d0:fd:b5:49:f5:2b:
         db:a7:e6:17:e6:f8:d3:ab:6c:b9:09:ec:6c:90:0b:82:4b:df:
         e4:7c:7f:33:4c:c0:e0:d0:98:5c:2e:52:f7:9c:79:1e:68:ab:
         3f:f5:c4:9a:3a:58:28:c5:c1:ec:d8:c3:b5:94:b3:94:46:24:
         14:9e:af:26:33:72:5f:af:45:b6:9a:48:34:02:af:9c:f9:c4:
         15:ac:84:1d:1b:df:75:67:e3:49:f4:9f:2d:ac:eb:6c:8a:bd:
         4c:08:2e:44:d7:aa:ef:c2:c9:26:21:c8:16:ba:a6:77:c9:8b:
         a0:53:7c:ff:c0:29:3f:0c:22:3c:6b:bf:86:a9:3e:7c:6a:fd:
         eb:9a:2f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----