Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51b96a5e-fdb2-41ae-8b57-734346664fe1/35f0238d49b99f02fbabcd8e15b380b7e94505af.roa
File:                     35f0238d49b99f02fbabcd8e15b380b7e94505af.roa (raw, json)
Hash identifier:          k9lDTsBFH2xnueSN2d3kDuT88l9IhwGBHpAJqEUaixI=
Subject key identifier:   A5:6A:76:50:97:57:21:8E:34:EB:36:82:CE:13:93:73:8F:32:13:01
Certificate issuer:       /CN=14cccbd44c277091b395ba21d80e9bd47281ef92
Certificate serial:       037715
Authority key identifier: 51:B2:F5:93:38:6A:58:8F:34:71:D5:BC:2A:BF:AF:54:76:11:13:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14cccbd44c277091b395ba21d80e9bd47281ef92.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51b96a5e-fdb2-41ae-8b57-734346664fe1/35f0238d49b99f02fbabcd8e15b380b7e94505af.roa
Signing time:             Thu 20 Oct 2022 08:21:28 +0000
ROA not before:           Wed 19 Oct 2022 08:20:08 +0000
ROA not after:            Sun 20 Oct 2024 08:20:08 +0000
asID:                     201341
IP address blocks:        138.99.120.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227093 (0x37715)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14cccbd44c277091b395ba21d80e9bd47281ef92
        Validity
            Not Before: Oct 19 08:20:08 2022 GMT
            Not After : Oct 20 08:20:08 2024 GMT
        Subject: CN=35f0238d49b99f02fbabcd8e15b380b7e94505af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bb:03:77:a8:cf:39:64:c4:2c:ba:2f:29:c9:
                    22:17:20:10:b9:1b:3f:92:e2:c6:da:ad:01:42:74:
                    3e:8c:ac:67:1f:d7:dd:75:8c:2f:00:50:50:39:99:
                    f2:16:84:cb:e7:62:02:99:fb:ed:49:f4:d7:8d:7f:
                    fe:d3:b8:c4:39:01:37:f5:d2:9c:89:3e:6e:62:ef:
                    5b:2d:eb:9e:94:ec:b7:38:ae:b8:08:4d:2a:55:bb:
                    dd:5d:eb:d7:42:e1:c2:34:cc:20:de:30:6a:a6:82:
                    ad:cd:1b:43:0f:e0:11:ff:d7:7f:7a:52:b2:25:67:
                    cc:4d:d9:e9:9f:b6:ea:3e:2d:44:03:d2:c6:85:e5:
                    fc:38:14:80:a8:2d:09:d4:92:6b:60:52:c6:92:5c:
                    86:4d:61:d1:96:d4:22:dc:ed:71:9f:87:0f:33:4d:
                    6d:36:8f:14:55:bb:78:07:07:84:4d:71:02:76:7f:
                    94:03:3d:82:7a:bc:5f:ca:5d:92:9c:73:f1:e8:0b:
                    56:e1:a7:e2:1c:4e:56:7b:a5:cf:0d:c9:af:9f:d4:
                    32:cc:ed:7c:8b:b5:5b:bd:ec:18:0a:5c:0a:8e:be:
                    24:e3:42:6e:a4:b4:f1:9e:6c:58:ca:d9:3c:88:6f:
                    b7:54:a0:78:40:e5:d6:8e:6e:7c:62:33:e4:d7:42:
                    74:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6A:76:50:97:57:21:8E:34:EB:36:82:CE:13:93:73:8F:32:13:01
            X509v3 Authority Key Identifier:
                keyid:51:B2:F5:93:38:6A:58:8F:34:71:D5:BC:2A:BF:AF:54:76:11:13:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14cccbd44c277091b395ba21d80e9bd47281ef92.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51b96a5e-fdb2-41ae-8b57-734346664fe1/35f0238d49b99f02fbabcd8e15b380b7e94505af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51b96a5e-fdb2-41ae-8b57-734346664fe1/14cccbd44c277091b395ba21d80e9bd47281ef92.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:da:ed:b7:22:cf:34:b7:98:b3:67:82:94:c1:db:f6:b1:eb:
         ba:99:75:41:8e:6e:42:bf:9e:79:76:bb:62:4e:c3:ef:ff:7d:
         1d:58:19:7a:d5:8b:eb:b4:2f:7f:c5:a5:9e:2b:ed:7f:f5:fa:
         9c:45:5b:61:aa:82:75:e9:0c:25:58:53:ad:a1:fd:a3:47:f6:
         f1:ed:4b:2e:13:31:60:84:18:63:d8:f0:c6:c4:9f:8c:7f:40:
         67:bc:a9:28:40:6a:4f:a6:96:df:b7:c6:3d:65:47:4c:29:19:
         48:c0:3d:fd:3e:db:0a:d8:38:73:b2:40:59:82:7a:87:8d:43:
         94:be:cd:f0:9c:34:61:3b:71:64:97:87:97:09:ed:fb:92:f8:
         8c:17:4e:02:b8:3c:67:03:da:84:42:c7:fe:b9:3e:d2:20:6e:
         aa:a5:1d:a3:f1:87:be:83:25:4e:24:81:ef:a4:9f:3d:91:a4:
         7b:76:79:9a:36:42:11:79:3e:d1:fb:91:4c:96:85:ca:b9:22:
         5c:b3:6a:4f:aa:95:b2:f2:d6:38:92:b3:a5:da:d6:5f:7b:f5:
         15:d2:38:e5:d5:13:7d:46:2f:59:d1:f0:87:e4:1b:3a:5f:1f:
         49:5e:27:7b:9a:95:24:42:0e:02:71:6a:f0:ea:aa:88:4d:b0:
         c1:06:af:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----