Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51b96a5e-fdb2-41ae-8b57-734346664fe1/3cbb1e6975e41f070f38851df885faa9bd247ee4.roa
File:                     3cbb1e6975e41f070f38851df885faa9bd247ee4.roa (raw, json)
Hash identifier:          2/I6EuDWmcAYyxJWaE4ixS1kxN0u3vU8Oxm264tcOYY=
Subject key identifier:   D6:32:57:2E:CC:51:39:26:44:AF:36:27:72:CC:17:A8:4F:43:7E:64
Certificate issuer:       /CN=14cccbd44c277091b395ba21d80e9bd47281ef92
Certificate serial:       0995
Authority key identifier: 51:B2:F5:93:38:6A:58:8F:34:71:D5:BC:2A:BF:AF:54:76:11:13:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14cccbd44c277091b395ba21d80e9bd47281ef92.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51b96a5e-fdb2-41ae-8b57-734346664fe1/3cbb1e6975e41f070f38851df885faa9bd247ee4.roa
Signing time:             Fri 03 Jun 2022 09:13:54 +0000
ROA not before:           Fri 03 Jun 2022 03:00:00 +0000
ROA not after:            Mon 03 Jun 2024 03:00:00 +0000
asID:                     61317
IP address blocks:        138.99.120.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2453 (0x995)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14cccbd44c277091b395ba21d80e9bd47281ef92
        Validity
            Not Before: Jun  3 03:00:00 2022 GMT
            Not After : Jun  3 03:00:00 2024 GMT
        Subject: CN=3cbb1e6975e41f070f38851df885faa9bd247ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:12:1c:15:09:28:df:d3:68:a0:01:b8:81:3d:
                    37:a7:78:53:1f:3d:8f:e2:1f:d8:c1:be:b2:14:a9:
                    8a:21:d2:b7:38:3e:6b:1b:de:ec:10:25:33:79:a3:
                    b6:6f:d7:3a:9a:6e:be:f8:53:03:89:77:c8:2c:e3:
                    c5:b5:0d:75:f8:2b:14:30:1b:ff:8f:71:d3:57:52:
                    67:e3:70:67:ed:d3:4d:07:6f:54:52:c2:d0:29:fb:
                    16:36:7a:01:ef:27:e6:53:f0:8d:3c:ee:b5:78:7e:
                    77:9a:98:45:1f:e6:b9:1b:c9:36:0d:fc:20:28:0d:
                    30:5d:d7:c4:1c:1d:c8:08:f6:cc:77:ed:99:06:14:
                    d4:ca:1d:2e:ab:f8:cf:1e:c9:de:b8:15:75:4b:2e:
                    e3:7a:82:c3:87:e1:93:fe:fc:99:4b:fb:6e:53:c5:
                    5f:9c:a7:bd:5c:85:47:b1:3d:35:e6:3f:16:5e:73:
                    bb:18:b3:79:a5:59:53:3f:22:79:86:1b:72:0b:a9:
                    33:dc:a4:8f:d0:15:36:3d:1c:53:09:a7:21:8b:6e:
                    b0:e3:77:31:d8:06:30:0f:d4:29:58:98:e2:98:5a:
                    aa:f0:d7:51:a8:b8:39:dd:78:78:b9:7d:5f:b5:ac:
                    f6:20:a8:43:0c:31:78:49:10:b4:b0:4c:85:63:dc:
                    93:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:32:57:2E:CC:51:39:26:44:AF:36:27:72:CC:17:A8:4F:43:7E:64
            X509v3 Authority Key Identifier:
                keyid:51:B2:F5:93:38:6A:58:8F:34:71:D5:BC:2A:BF:AF:54:76:11:13:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14cccbd44c277091b395ba21d80e9bd47281ef92.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51b96a5e-fdb2-41ae-8b57-734346664fe1/3cbb1e6975e41f070f38851df885faa9bd247ee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51b96a5e-fdb2-41ae-8b57-734346664fe1/14cccbd44c277091b395ba21d80e9bd47281ef92.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:7d:6d:6d:fc:6e:18:03:77:f0:6b:e2:07:61:ca:63:a7:d5:
         d2:64:bd:7d:4c:ac:c6:e9:cd:49:82:6c:d1:2e:88:5c:f5:c7:
         e7:cf:5d:e1:a8:79:c1:74:ac:a8:3a:b9:91:1a:19:6e:9a:5d:
         bc:99:ca:14:8e:bc:82:4c:10:73:2f:97:48:ec:92:aa:ab:cb:
         52:4f:2e:ed:ba:2f:bd:60:a1:b6:e0:0e:57:86:b4:ca:03:6d:
         9e:79:ae:29:5a:ca:71:3d:4c:81:50:0c:a8:d4:66:e4:e3:43:
         cd:5e:b3:02:ec:62:cc:72:80:f3:af:d3:9f:73:cd:22:5a:80:
         0c:11:ed:ea:4f:4e:64:c0:e2:3a:00:09:be:04:94:3a:c3:1d:
         d4:f5:9d:ad:17:82:41:7f:2c:b9:92:9e:00:5b:ea:f8:7e:45:
         10:d3:39:b7:69:fb:16:85:66:b7:ce:b7:e2:da:c0:55:50:25:
         ea:fc:1a:52:af:5b:f8:d0:2f:77:75:38:b0:b2:22:af:5b:a4:
         c0:2c:32:c2:61:6e:c0:67:8d:b9:4c:41:de:2b:1b:49:03:ff:
         4a:14:1c:5a:61:9c:37:b0:84:39:3f:8b:d5:b4:56:c1:8d:51:
         c0:66:ab:d1:e9:0f:c2:23:0b:65:94:22:83:36:c0:d7:cb:c7:
         fa:29:25:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----