Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/9940f9650e8d29adfa40104c2658dd32dae6e633.roa
File:                     9940f9650e8d29adfa40104c2658dd32dae6e633.roa (raw, json)
Hash identifier:          xCfcvpB7fasppCaXYjP6zgBB6g37DSMO51wuGEhXLT4=
Subject key identifier:   C3:FC:A8:4F:66:50:F7:C7:D8:AA:6F:C1:CD:0B:AC:31:5C:86:E2:43
Certificate issuer:       /CN=39cac9b8258cbecd7f49618f9f9179bb699f6cfe
Certificate serial:       18668F
Authority key identifier: 9E:C7:8A:28:C0:2E:E6:96:77:B3:45:42:8A:E0:95:FD:92:99:FA:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39cac9b8258cbecd7f49618f9f9179bb699f6cfe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/9940f9650e8d29adfa40104c2658dd32dae6e633.roa
Signing time:             Thu 07 Jul 2022 14:27:05 +0000
ROA not before:           Fri 01 Jul 2022 03:00:00 +0000
ROA not after:            Sun 07 Jul 2024 03:00:00 +0000
asID:                     263795
IP address blocks:        138.204.108.0/24 maxlen: 24
                          138.204.109.0/24 maxlen: 24
                          138.204.110.0/24 maxlen: 24
                          190.105.168.0/24 maxlen: 24
                          190.105.169.0/24 maxlen: 24
                          190.105.170.0/24 maxlen: 24
                          190.105.171.0/24 maxlen: 24
                          190.105.168.0/22 maxlen: 22
                          2803:ac40::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1599119 (0x18668f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39cac9b8258cbecd7f49618f9f9179bb699f6cfe
        Validity
            Not Before: Jul  1 03:00:00 2022 GMT
            Not After : Jul  7 03:00:00 2024 GMT
        Subject: CN=9940f9650e8d29adfa40104c2658dd32dae6e633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:68:6e:6c:ee:97:4b:ec:85:6a:51:b6:bc:78:
                    e7:9a:43:a8:65:b3:bf:9c:a4:c1:e7:14:b2:56:f4:
                    07:41:9a:5d:41:b2:14:01:0f:c6:57:6f:d7:ff:60:
                    78:0b:62:f7:d3:2d:8a:93:50:ca:ed:88:d1:52:22:
                    76:bb:fe:84:60:24:fd:2d:05:49:83:c6:d9:41:3e:
                    5d:6b:61:3c:0d:40:2f:9c:19:71:74:fe:29:1b:9f:
                    9f:a5:97:f8:c6:a3:e4:97:c2:f4:86:5d:a9:74:a2:
                    3a:82:93:e3:9f:49:69:39:4b:11:e5:0e:64:ac:25:
                    65:48:87:cf:9b:7a:fa:ed:e5:b7:aa:17:af:db:18:
                    6e:76:c3:cb:dd:9a:e0:31:f2:83:54:56:ab:34:e7:
                    80:a0:47:e6:9c:b7:ba:c2:df:da:43:96:e2:40:cb:
                    19:60:d4:ef:32:59:c4:d7:8e:b2:e4:02:0d:ee:0f:
                    e0:7a:f9:76:88:a5:a0:ae:fa:2d:a3:f5:6b:ba:40:
                    24:9a:05:99:1b:94:1d:3a:ae:cb:5e:e0:87:f1:b5:
                    fa:db:15:8f:7c:0f:77:59:21:5c:d2:85:8a:16:3d:
                    e9:c1:0f:b7:68:a6:9a:68:4b:2f:84:8e:09:40:e3:
                    aa:ce:7e:03:52:af:68:b9:2c:a2:b2:7a:2e:48:9c:
                    87:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FC:A8:4F:66:50:F7:C7:D8:AA:6F:C1:CD:0B:AC:31:5C:86:E2:43
            X509v3 Authority Key Identifier:
                keyid:9E:C7:8A:28:C0:2E:E6:96:77:B3:45:42:8A:E0:95:FD:92:99:FA:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39cac9b8258cbecd7f49618f9f9179bb699f6cfe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/9940f9650e8d29adfa40104c2658dd32dae6e633.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/39cac9b8258cbecd7f49618f9f9179bb699f6cfe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.108.0-138.204.110.255
                  190.105.168.0/22
                IPv6:
                  2803:ac40::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:d5:44:52:a5:b2:f9:27:ae:60:7c:ff:b3:fe:bb:39:b6:41:
         b0:59:26:17:de:d9:9d:8e:b1:53:a9:b8:a6:3a:36:c6:f8:cb:
         99:9a:ad:14:ed:a6:53:34:4e:b7:b8:b7:58:98:b4:76:4e:aa:
         29:ec:b7:47:4c:29:39:f9:02:6a:de:2d:c7:69:ed:2d:a6:29:
         37:01:63:74:12:b1:37:88:e0:e3:01:b3:62:12:0d:8f:06:a5:
         5e:32:39:dd:83:ab:db:56:86:3f:79:c3:c2:d2:df:79:fc:fa:
         9a:fc:0b:47:ff:02:6a:6b:55:f5:2d:fe:1e:73:6c:13:46:c0:
         b4:73:fc:54:a5:f3:fe:41:18:81:27:b7:02:8a:b5:b1:f8:87:
         8a:2f:37:2f:2c:65:08:4a:f3:b5:14:23:19:a7:a9:18:7d:e6:
         54:12:0d:05:a2:d1:c5:53:f2:d9:17:cb:21:f3:3d:27:87:6e:
         2a:86:ec:b0:ab:1f:33:ef:bf:6c:0b:da:24:b8:db:7f:38:2d:
         b5:f5:cf:1b:9b:a7:51:51:31:c0:fe:57:3b:ad:f9:59:ca:a3:
         a7:d5:3a:15:2b:17:57:45:0c:37:62:f5:be:14:40:76:cd:36:
         ff:85:e6:d6:6c:64:20:21:bb:e7:e2:87:8b:84:9d:17:e6:8a:
         97:6b:69:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----