Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/214fceab77b87226412f59e7b62a6395f4a2e7c2.roa
File:                     214fceab77b87226412f59e7b62a6395f4a2e7c2.roa (raw, json)
Hash identifier:          NHTjegDkAq9vRnUjNu9Kmq6dpAet9oXZhLugeO/GrX4=
Subject key identifier:   B3:10:09:F3:03:22:CF:17:92:6D:7A:A2:32:9F:EB:0C:43:5E:CC:E8
Certificate issuer:       /CN=2a234a7b53d24b6272623544bf02f8d638997781
Certificate serial:       16A964
Authority key identifier: 80:E5:BF:B2:D6:E6:9A:A6:8D:AE:56:9B:06:44:59:9C:22:FD:D1:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a234a7b53d24b6272623544bf02f8d638997781.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/214fceab77b87226412f59e7b62a6395f4a2e7c2.roa
Signing time:             Tue 26 Apr 2022 05:47:59 +0000
ROA not before:           Tue 26 Apr 2022 03:00:00 +0000
ROA not after:            Fri 26 Apr 2024 03:00:00 +0000
asID:                     1299
IP address blocks:        170.82.36.0/24 maxlen: 24
                          170.82.38.0/24 maxlen: 24
                          170.82.37.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1485156 (0x16a964)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a234a7b53d24b6272623544bf02f8d638997781
        Validity
            Not Before: Apr 26 03:00:00 2022 GMT
            Not After : Apr 26 03:00:00 2024 GMT
        Subject: CN=214fceab77b87226412f59e7b62a6395f4a2e7c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:07:3c:7a:84:19:c2:b1:a7:b4:c1:b3:17:92:
                    44:60:45:6b:24:8e:03:38:25:55:40:de:15:3d:27:
                    3a:f5:3d:80:bf:60:50:6f:38:0b:50:e3:55:f2:f2:
                    ca:d0:31:d9:9c:4c:14:8d:17:7a:5a:90:c6:e2:b2:
                    4c:38:cd:f5:6b:e6:ab:76:91:43:43:ef:dd:84:e2:
                    b9:a6:26:bf:d6:59:f4:c0:b0:92:1f:c3:fa:33:81:
                    b0:ab:9d:62:f5:de:ef:d6:73:f5:f8:bb:67:51:9d:
                    72:6d:f9:4e:35:6b:64:06:c5:39:bc:99:bf:00:4d:
                    7a:35:ba:fb:89:b8:71:e7:50:be:b1:43:82:a4:0c:
                    9e:7a:cb:57:26:33:f4:dc:5d:56:8a:f3:d4:8a:35:
                    61:75:4a:11:03:30:91:7b:9a:9c:d0:13:f9:ea:e8:
                    90:87:2c:aa:cc:72:a5:0d:b9:09:c0:07:ff:0b:08:
                    c4:1f:9b:7e:96:5e:6a:27:96:45:b5:e6:32:95:b0:
                    84:8d:a4:9b:31:9f:3f:01:21:dc:cb:56:c3:ad:53:
                    c0:89:0e:10:e2:c3:6e:ec:41:a4:e6:25:27:a0:d4:
                    2a:b3:eb:e0:86:47:0d:f9:57:f5:08:a9:0e:1a:fa:
                    0c:41:de:9f:98:69:b7:d6:f2:96:bd:d2:27:fa:3c:
                    b8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:10:09:F3:03:22:CF:17:92:6D:7A:A2:32:9F:EB:0C:43:5E:CC:E8
            X509v3 Authority Key Identifier:
                keyid:80:E5:BF:B2:D6:E6:9A:A6:8D:AE:56:9B:06:44:59:9C:22:FD:D1:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a234a7b53d24b6272623544bf02f8d638997781.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/214fceab77b87226412f59e7b62a6395f4a2e7c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/2a234a7b53d24b6272623544bf02f8d638997781.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.36.0-170.82.38.255

    Signature Algorithm: sha256WithRSAEncryption
         41:82:46:61:e0:ef:02:c3:55:eb:a9:fd:4f:9f:44:da:ab:a7:
         40:45:ff:58:78:e7:99:79:25:9a:57:90:44:ee:4f:ad:58:5d:
         f0:c9:be:2d:3f:13:52:d0:7c:06:a0:d4:28:39:e7:54:1d:5d:
         df:2e:5b:04:35:f6:c0:bc:e6:76:98:d4:35:c1:5c:5c:c4:38:
         f7:57:67:83:af:3f:a9:69:21:a1:b0:b8:e1:33:e3:5a:6f:0a:
         ac:89:55:d5:48:97:58:c9:cf:ea:45:9c:b2:59:d5:11:84:f7:
         5e:4c:87:db:b6:e2:66:e0:19:3f:9b:88:08:89:e7:62:1d:68:
         73:71:ce:7d:55:0f:e3:c2:1b:e0:57:6b:7c:7b:9e:41:80:a6:
         33:65:61:55:28:99:a3:8e:0c:d8:ab:ca:71:62:9a:61:d3:80:
         56:ba:12:d2:1a:03:c2:fe:06:ae:43:ac:00:24:d4:20:25:09:
         11:0c:29:72:d4:1b:63:61:1d:4a:3d:2a:59:fd:cd:0a:9f:d2:
         9a:aa:95:3f:d9:29:2b:ba:20:10:25:d7:f5:5b:43:ff:f5:9e:
         ab:70:4e:b5:55:5f:10:ec:29:58:ad:ed:0b:4a:48:a8:1c:76:
         07:91:b7:d2:3f:05:0d:6a:6a:2e:1b:cd:9a:ed:4b:50:f6:fd:
         c0:6e:b9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----