Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/501ca71d-9f99-4ec8-bdf3-2af0195e5031/db08ad94f24020839ecb2d8916a4c80a9ee5983e.roa
File:                     db08ad94f24020839ecb2d8916a4c80a9ee5983e.roa (raw, json)
Hash identifier:          EOa0tfbl3ufOl90wfeWF56Geidj/xcx1TWhJaLmNwec=
Subject key identifier:   31:FB:89:F0:2A:E8:A5:95:29:5F:12:A2:9F:47:D8:63:08:88:E7:68
Certificate issuer:       /CN=551ee44031263fb7ea75afe75460eef74dd1f0a1
Certificate serial:       027F
Authority key identifier: 82:94:DF:54:9D:3E:AE:0B:3F:B8:48:AE:A9:5C:07:B5:4C:33:21:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/551ee44031263fb7ea75afe75460eef74dd1f0a1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/501ca71d-9f99-4ec8-bdf3-2af0195e5031/db08ad94f24020839ecb2d8916a4c80a9ee5983e.roa
Signing time:             Sun 28 Nov 2021 14:30:18 +0000
ROA not before:           Sun 28 Nov 2021 03:00:00 +0000
ROA not after:            Tue 28 Nov 2023 03:00:00 +0000
asID:                     264634
IP address blocks:        138.219.248.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 639 (0x27f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551ee44031263fb7ea75afe75460eef74dd1f0a1
        Validity
            Not Before: Nov 28 03:00:00 2021 GMT
            Not After : Nov 28 03:00:00 2023 GMT
        Subject: CN=db08ad94f24020839ecb2d8916a4c80a9ee5983e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c7:eb:70:0d:06:7e:ec:60:42:23:5e:ba:a2:
                    50:0e:be:a9:ce:b0:ac:7a:c6:4c:b4:5e:78:90:30:
                    0c:cc:d8:24:8b:25:61:0f:7d:43:96:fc:51:23:70:
                    00:92:d2:85:b3:b8:5c:19:8a:65:af:9d:bf:df:7f:
                    35:8e:37:f5:bd:db:a8:77:d4:9a:a5:9c:9c:1f:e6:
                    e0:9a:cd:d7:ce:28:e7:05:32:0b:67:2f:17:8f:c6:
                    e4:b2:f8:47:b2:e7:d4:89:80:5b:92:bc:7a:23:e5:
                    2e:c2:d8:9f:1c:42:c6:52:65:f6:41:cf:7c:d6:5b:
                    8a:7d:9d:67:06:b7:8b:4e:db:14:21:28:92:a9:8b:
                    76:a2:a1:7f:63:e2:6d:c1:21:ca:cf:53:91:60:bd:
                    36:09:0c:54:c0:ad:3e:20:df:da:cd:27:f6:17:53:
                    8f:4b:51:4e:a5:56:3a:45:7f:80:c8:02:ab:2c:2c:
                    e7:83:93:2b:c8:4b:9b:a2:f5:0e:5f:78:32:86:a3:
                    35:87:bd:bd:9f:83:8a:6b:37:55:70:22:22:3b:25:
                    77:c5:bc:3a:49:82:fd:e8:54:f5:b5:9f:96:00:a4:
                    0a:76:38:e9:68:f8:f8:d3:ae:da:81:49:d0:03:54:
                    bf:22:40:b6:07:bb:f1:2c:62:d5:a5:13:58:42:47:
                    e1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FB:89:F0:2A:E8:A5:95:29:5F:12:A2:9F:47:D8:63:08:88:E7:68
            X509v3 Authority Key Identifier:
                keyid:82:94:DF:54:9D:3E:AE:0B:3F:B8:48:AE:A9:5C:07:B5:4C:33:21:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/551ee44031263fb7ea75afe75460eef74dd1f0a1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/501ca71d-9f99-4ec8-bdf3-2af0195e5031/db08ad94f24020839ecb2d8916a4c80a9ee5983e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/501ca71d-9f99-4ec8-bdf3-2af0195e5031/551ee44031263fb7ea75afe75460eef74dd1f0a1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:93:80:3a:cc:ac:c7:9b:a1:76:94:d6:22:47:f0:fc:07:58:
         74:28:59:1e:da:03:da:79:58:01:32:b7:e0:80:46:56:d5:fe:
         25:8e:6d:8b:58:24:f5:42:fe:25:ff:7c:68:84:4d:e1:6c:ab:
         02:01:8e:0b:5e:ad:dd:f7:28:30:52:0d:bf:57:08:cb:52:e4:
         56:eb:ca:f2:37:b0:a9:f5:28:ee:f2:81:8b:24:4c:5f:c3:e3:
         fc:b1:fe:3e:37:7d:8b:1b:53:e5:d7:5c:f1:4e:11:90:37:f5:
         93:13:38:63:6c:22:b8:ea:1e:c4:13:c0:02:7e:b3:5f:ea:fc:
         db:17:71:13:d1:1d:12:a2:c4:89:4c:6d:a3:19:8a:e9:72:23:
         af:1b:77:b1:7c:f3:1e:a5:33:06:b7:77:de:cc:ac:20:d2:ad:
         b8:74:4a:51:1d:52:7e:fc:a8:64:53:5a:3a:0c:92:2a:06:09:
         af:1b:7d:73:84:1e:1b:83:6f:3e:19:8d:ad:eb:0f:f7:60:f1:
         3e:d4:4a:06:b4:60:68:97:32:78:97:68:ea:28:0f:0f:59:95:
         b7:27:74:86:df:fc:1e:a5:e7:45:09:43:ab:0a:77:1f:85:f1:
         a8:58:01:b8:03:50:25:82:35:97:a2:fb:d8:25:c3:75:19:08:
         a8:67:78:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----