Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40098c8c-7223-4618-b04d-d565dc89dbec/b7cb2f0d991a63bc3640cc834ba8471d908e9d78.roa
File:                     b7cb2f0d991a63bc3640cc834ba8471d908e9d78.roa (raw, json)
Hash identifier:          fUHRSuKMWXemwN2uorDgDAiRDicTPixLNIUZqkQDel4=
Subject key identifier:   81:F3:75:BE:7C:87:5B:D3:A2:B5:45:E3:31:0F:33:B7:C9:2E:78:BE
Certificate issuer:       /CN=cbe8f92c5fc5ec893c322ea903d8bd06212c236f
Certificate serial:       02C7
Authority key identifier: FA:1A:F5:12:35:C7:1B:E3:D3:65:03:77:26:E4:FF:07:ED:8E:03:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe8f92c5fc5ec893c322ea903d8bd06212c236f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40098c8c-7223-4618-b04d-d565dc89dbec/b7cb2f0d991a63bc3640cc834ba8471d908e9d78.roa
Signing time:             Thu 07 Oct 2021 19:29:11 +0000
ROA not before:           Thu 07 Oct 2021 03:00:00 +0000
ROA not after:            Sat 07 Oct 2023 03:00:00 +0000
asID:                     264697
IP address blocks:        168.232.88.0/22 maxlen: 24
                          2803:5340::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 711 (0x2c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe8f92c5fc5ec893c322ea903d8bd06212c236f
        Validity
            Not Before: Oct  7 03:00:00 2021 GMT
            Not After : Oct  7 03:00:00 2023 GMT
        Subject: CN=b7cb2f0d991a63bc3640cc834ba8471d908e9d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:04:81:89:a3:ef:31:75:74:ba:f2:64:9a:d7:
                    12:b4:ab:f9:25:55:d9:46:e3:63:9b:43:95:42:79:
                    1b:f2:a1:c9:1f:e2:df:11:87:ca:f6:36:9e:5e:d9:
                    bf:71:1d:81:48:f7:87:c9:f9:e0:e6:aa:57:ae:a1:
                    81:24:9d:78:33:62:d1:67:6a:97:a7:34:18:ed:65:
                    da:e5:9b:ab:b7:9f:10:24:f7:18:18:9e:b1:29:dc:
                    af:23:d4:72:ce:53:82:c0:2e:fb:28:bd:2a:bf:69:
                    02:08:c1:0f:8c:06:4b:67:8f:a5:c2:f7:dc:b1:77:
                    f5:99:65:09:a0:d6:dd:27:2b:78:96:28:0e:7f:9d:
                    d6:d9:36:b7:7f:77:b9:db:d0:b6:32:ac:bc:c3:b6:
                    99:3b:e5:5e:e7:27:8f:19:c5:6e:6e:14:07:2a:66:
                    cd:31:1e:40:b3:52:10:d7:17:6f:3f:de:77:3b:d1:
                    ba:8f:b4:5c:01:dc:b2:28:57:d7:13:d0:5e:b7:d4:
                    94:37:d5:69:7d:d7:00:50:bc:4e:ce:57:0e:1e:76:
                    a1:59:dc:e2:f9:d3:06:c4:86:ed:ec:1a:cc:79:3c:
                    01:2e:50:ab:a9:82:9c:05:53:f2:ac:80:95:24:c5:
                    5c:f2:d7:5a:41:cb:3e:d2:27:5f:77:cd:ab:aa:2d:
                    b4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F3:75:BE:7C:87:5B:D3:A2:B5:45:E3:31:0F:33:B7:C9:2E:78:BE
            X509v3 Authority Key Identifier:
                keyid:FA:1A:F5:12:35:C7:1B:E3:D3:65:03:77:26:E4:FF:07:ED:8E:03:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe8f92c5fc5ec893c322ea903d8bd06212c236f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40098c8c-7223-4618-b04d-d565dc89dbec/b7cb2f0d991a63bc3640cc834ba8471d908e9d78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40098c8c-7223-4618-b04d-d565dc89dbec/cbe8f92c5fc5ec893c322ea903d8bd06212c236f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.88.0/22
                IPv6:
                  2803:5340::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:3f:ec:8f:bf:ea:1e:50:0e:29:37:43:11:96:dc:03:6f:57:
         b7:b4:93:cf:33:cf:19:cb:81:04:07:72:e0:4d:7c:51:cc:74:
         2c:da:58:73:5a:d9:d1:9e:32:07:4d:db:e1:08:c0:e9:83:94:
         e0:ff:a8:7b:ee:97:ae:e2:1d:da:5c:50:d0:2f:4c:d2:79:14:
         22:ef:35:aa:fb:79:9c:27:c3:14:c0:28:41:ea:af:cb:2a:0b:
         7d:9b:a1:b3:7e:03:d2:cb:ab:e2:0a:64:5a:95:fa:a3:57:e2:
         04:45:52:5f:c9:b6:cc:42:4b:c7:16:12:4f:d0:d9:14:f8:2d:
         68:23:34:a0:c1:d3:b9:2c:72:03:46:b8:f0:2e:91:ac:7e:38:
         57:a6:e4:d8:b5:a7:2e:de:86:b7:f2:6e:5a:d5:c3:66:27:f3:
         3d:ee:98:4b:f6:c5:cb:10:2b:63:4d:ee:cf:d0:47:b8:c1:fb:
         ba:5d:67:db:b3:73:8a:58:b2:b7:22:41:90:b4:72:24:92:69:
         0f:55:af:9b:c3:c4:2c:2f:51:be:db:fb:f3:87:f9:95:ed:f1:
         18:c1:3b:d1:a2:e6:05:75:94:3a:01:7b:a0:ce:df:94:89:b0:
         f1:25:f8:dd:75:58:f3:da:1f:e3:c0:cc:2b:c0:1e:32:0a:8e:
         1a:31:4a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----