Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3cc6f6b0-7820-4530-be19-85e625586c58/4910f655d3f4fe855cc80e4189054a064d2541ab.roa
File:                     4910f655d3f4fe855cc80e4189054a064d2541ab.roa (raw, json)
Hash identifier:          I3A1fOOEIuNqSZwO5NAvkETizWr8SXnrs4BoDvwgbZE=
Subject key identifier:   C6:56:EF:11:44:FF:12:C5:E4:50:C3:64:3C:92:8D:A8:8B:C2:CD:A3
Certificate issuer:       /CN=f172ca4093ff4ce47d20beb1ff07624aff070b40
Certificate serial:       1A42DB
Authority key identifier: F5:4B:B6:F3:7D:92:91:07:1D:76:5A:6F:B9:AF:84:6B:EE:61:58:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f172ca4093ff4ce47d20beb1ff07624aff070b40.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3cc6f6b0-7820-4530-be19-85e625586c58/4910f655d3f4fe855cc80e4189054a064d2541ab.roa
Signing time:             Mon 22 Aug 2022 16:47:15 +0000
ROA not before:           Mon 22 Aug 2022 16:46:42 +0000
ROA not after:            Thu 22 Aug 2024 16:46:42 +0000
asID:                     263716
IP address blocks:        132.255.224.0/22 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1721051 (0x1a42db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f172ca4093ff4ce47d20beb1ff07624aff070b40
        Validity
            Not Before: Aug 22 16:46:42 2022 GMT
            Not After : Aug 22 16:46:42 2024 GMT
        Subject: CN=4910f655d3f4fe855cc80e4189054a064d2541ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4e:85:47:2d:69:e4:fb:f7:df:ba:84:28:0d:
                    e0:0a:4f:5b:d7:76:90:a0:cc:6e:1d:79:0d:9a:98:
                    4f:ad:d7:8f:bc:6f:92:88:6b:75:e7:c8:81:eb:88:
                    af:d5:66:b9:30:4b:d9:fd:7a:65:fb:f9:12:48:1f:
                    4e:83:86:0a:02:8e:95:aa:f2:ff:fd:fc:b0:bb:78:
                    bb:41:28:00:4b:78:9d:91:96:e6:c9:69:95:85:b6:
                    03:9b:69:ab:93:19:65:23:bf:ae:d5:f9:f7:b9:58:
                    42:68:39:86:09:b6:ee:2b:94:e2:0b:98:65:b6:7f:
                    2a:89:7a:71:cd:36:fa:a5:06:20:d3:23:6c:c9:9d:
                    99:94:f8:96:41:51:33:cb:57:c2:05:aa:31:e4:c5:
                    72:45:6c:98:f0:1b:c1:15:26:ad:bf:2f:3c:97:30:
                    3e:13:52:7b:83:23:58:1b:46:80:ce:08:66:4c:7b:
                    a4:0c:f4:80:27:dd:2e:ca:cd:e7:f2:51:97:5e:77:
                    ed:d5:5b:58:a4:dd:c3:7f:68:8b:86:90:f5:41:76:
                    f1:7f:ef:0e:af:9c:1e:eb:0e:33:a3:bf:12:5a:12:
                    a7:d8:3a:37:3c:3a:34:75:c6:e5:94:54:3c:47:6a:
                    0e:07:d3:0e:6a:84:5a:23:50:04:b6:34:03:6a:c1:
                    04:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:56:EF:11:44:FF:12:C5:E4:50:C3:64:3C:92:8D:A8:8B:C2:CD:A3
            X509v3 Authority Key Identifier:
                keyid:F5:4B:B6:F3:7D:92:91:07:1D:76:5A:6F:B9:AF:84:6B:EE:61:58:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f172ca4093ff4ce47d20beb1ff07624aff070b40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3cc6f6b0-7820-4530-be19-85e625586c58/4910f655d3f4fe855cc80e4189054a064d2541ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3cc6f6b0-7820-4530-be19-85e625586c58/f172ca4093ff4ce47d20beb1ff07624aff070b40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:74:11:f7:b7:36:78:b9:31:35:22:fe:28:19:ad:0b:6b:32:
         f3:56:67:48:9e:6a:9e:3d:bd:c9:d4:52:8b:ab:43:a1:2f:4a:
         f1:f4:ce:16:39:f7:de:cf:d7:34:a4:04:3b:b6:3d:23:c4:29:
         3a:8f:00:51:5d:fc:8c:4d:76:62:d3:42:cd:f9:f8:e8:b7:3d:
         9e:1d:a0:66:82:e8:51:0b:f6:74:bb:bc:6f:25:ad:4c:e7:e7:
         d8:ac:f3:f5:8d:ee:2f:fc:ba:ff:2a:60:90:73:2e:79:84:95:
         26:25:f3:58:92:a8:35:f3:53:35:27:9e:03:61:5a:74:1b:ec:
         89:10:21:56:9b:c9:8a:93:8b:ed:45:1d:ad:bf:a5:a3:3e:53:
         99:9c:57:4e:ed:ac:2f:2e:90:9e:c0:e5:68:72:8d:0d:85:cb:
         66:92:f2:36:33:14:53:69:16:c0:6a:37:2c:0c:20:b0:ec:ef:
         50:51:59:4f:2e:52:80:95:15:e4:b6:9d:86:78:82:a4:17:97:
         89:e6:9d:fa:d6:2a:5e:5b:0f:eb:22:f6:1d:13:f5:56:f2:c1:
         5a:f6:91:22:48:c5:c3:18:a4:56:7d:54:13:2c:76:a6:fd:5d:
         52:18:1e:56:0d:88:88:87:00:40:9a:e8:c0:30:c3:7e:ba:5d:
         54:bd:13:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----