Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5cafbaf7-e873-46e1-9551-b7f6b6a66574/e53fea795f471cbe80814d2d37968cecb07f32b2.roa
File:                     e53fea795f471cbe80814d2d37968cecb07f32b2.roa (raw, json)
Hash identifier:          gB3De/1ButxZtiOxTJ67SbGWsznUQ8pMmhxMHgvVd9Y=
Subject key identifier:   36:09:76:E7:C3:25:8B:4C:66:72:89:48:6E:89:D4:06:7E:4F:22:E5
Certificate issuer:       /CN=84d605a07f8bab0d07a46770e6cf549145385f55
Certificate serial:       2138BE
Authority key identifier: 33:7A:E1:4E:44:11:69:5B:E2:4C:7C:37:14:16:0D:8D:AE:D0:C2:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/84d605a07f8bab0d07a46770e6cf549145385f55.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5cafbaf7-e873-46e1-9551-b7f6b6a66574/e53fea795f471cbe80814d2d37968cecb07f32b2.roa
Signing time:             Sat 20 May 2023 00:14:04 +0000
ROA not before:           Fri 19 May 2023 00:14:04 +0000
ROA not after:            Tue 20 May 2025 00:14:04 +0000
asID:                     266867
IP address blocks:        164.163.160.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2177214 (0x2138be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84d605a07f8bab0d07a46770e6cf549145385f55
        Validity
            Not Before: May 19 00:14:04 2023 GMT
            Not After : May 20 00:14:04 2025 GMT
        Subject: CN=e53fea795f471cbe80814d2d37968cecb07f32b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6b:73:a2:11:c3:17:bd:92:f2:4e:83:e1:ba:
                    54:65:20:fd:bc:22:a5:fa:eb:49:dd:f5:8c:8d:97:
                    3b:70:0b:e7:2b:6d:bd:00:35:a0:6b:9e:cb:c2:bd:
                    fb:c9:9e:ee:41:a2:fe:37:21:49:d5:ff:59:ec:67:
                    5c:8f:10:fc:44:80:f0:f1:48:0f:f9:00:15:3f:b8:
                    af:5c:c1:cb:0a:64:a6:0f:77:5b:a6:80:ea:4d:7f:
                    d8:a6:47:0d:12:f6:19:bf:22:f2:5f:38:6f:f8:ae:
                    37:81:05:29:a2:2f:b2:1b:9c:66:73:ce:b1:70:fc:
                    72:db:11:20:8a:64:e6:7d:d7:f6:af:a8:ae:1b:53:
                    0e:b4:c8:ac:d6:46:01:12:8b:9d:0a:c9:8f:c9:86:
                    02:c5:cf:89:2f:72:f9:10:33:5c:81:fe:93:60:14:
                    a3:74:f0:42:f1:5d:fa:ee:81:01:27:e3:57:68:d7:
                    ab:60:f7:52:58:a0:a8:e4:d5:36:bd:ac:f7:90:89:
                    3d:91:10:48:64:18:0c:49:bb:bf:36:c0:26:b8:d7:
                    94:52:f6:34:e8:d0:38:ad:5c:29:64:17:79:af:9e:
                    7c:8e:99:7e:1a:df:d6:c4:14:9b:8b:4d:f5:84:5a:
                    3d:70:25:6b:3e:d2:cc:64:65:2d:b2:2a:4b:85:a0:
                    9d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:09:76:E7:C3:25:8B:4C:66:72:89:48:6E:89:D4:06:7E:4F:22:E5
            X509v3 Authority Key Identifier:
                keyid:33:7A:E1:4E:44:11:69:5B:E2:4C:7C:37:14:16:0D:8D:AE:D0:C2:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/84d605a07f8bab0d07a46770e6cf549145385f55.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5cafbaf7-e873-46e1-9551-b7f6b6a66574/e53fea795f471cbe80814d2d37968cecb07f32b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5cafbaf7-e873-46e1-9551-b7f6b6a66574/84d605a07f8bab0d07a46770e6cf549145385f55.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:89:e0:05:a2:07:d6:8a:e1:c2:5b:71:ea:14:17:bd:7c:17:
         9e:3d:91:9b:c1:b1:c8:15:3c:23:2f:ac:b8:9f:9d:69:c2:85:
         54:e5:b9:83:00:e3:3d:84:55:1a:ac:7e:21:be:4e:da:9f:76:
         b1:7e:27:de:93:40:14:b4:44:84:8c:18:d9:26:cd:46:13:d5:
         50:e8:22:d4:df:25:fa:8a:f3:bb:a4:9d:ec:cc:72:d9:cd:01:
         37:53:ba:81:30:ba:d6:1c:ee:df:8a:a6:5c:99:c1:27:b7:14:
         8b:14:09:75:8e:ed:f6:5a:4e:1e:38:94:3a:7e:b0:67:af:43:
         95:ad:fb:33:c2:c7:48:3a:d6:78:d2:2a:55:9a:45:d1:26:52:
         6b:10:68:7b:0e:a1:8c:e8:5f:f4:6a:e6:04:f2:51:44:54:80:
         6c:c5:4e:05:58:bd:9e:32:5c:09:93:d2:e6:e0:9d:a1:8a:91:
         f6:db:cf:de:be:19:f7:21:8b:2f:f5:59:1a:9b:a0:cf:70:f0:
         2e:97:04:df:2f:17:e1:ba:3d:38:4c:55:da:d6:f9:61:c6:9a:
         76:f9:fa:66:26:a3:7d:ca:98:a2:7e:1f:03:8e:d9:ca:eb:84:
         cc:69:b3:c6:87:04:63:e0:83:95:51:44:a6:8b:65:4c:98:e7:
         e6:3a:9b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----