Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6d26b71a-ea69-4ab9-b972-634f6cb6bdec/dd41d48ca132eb990202b7c4ace88b85cb085861.roa
File:                     dd41d48ca132eb990202b7c4ace88b85cb085861.roa (raw, json)
Hash identifier:          VIWYyhuUuFjniJ1Nl6valUsDzFrbW10Eq59iqtmoPY8=
Subject key identifier:   50:27:AD:4E:7A:6F:42:92:1D:49:79:E3:F2:5A:DB:D0:7B:7B:74:2F
Certificate issuer:       /CN=b3089555a2ff274cc3f3d658901d3ac99e4a448d
Certificate serial:       1A33DA
Authority key identifier: 03:5B:49:76:39:53:8C:71:71:AC:A4:D7:F4:6C:03:80:19:6E:DF:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3089555a2ff274cc3f3d658901d3ac99e4a448d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6d26b71a-ea69-4ab9-b972-634f6cb6bdec/dd41d48ca132eb990202b7c4ace88b85cb085861.roa
Signing time:             Sun 02 Apr 2023 08:30:00 +0000
ROA not before:           Sat 01 Apr 2023 08:30:00 +0000
ROA not after:            Mon 31 Mar 2025 08:30:00 +0000
asID:                     269989
IP address blocks:        138.117.228.0/22 maxlen: 24
                          2803:bee0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1717210 (0x1a33da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3089555a2ff274cc3f3d658901d3ac99e4a448d
        Validity
            Not Before: Apr  1 08:30:00 2023 GMT
            Not After : Mar 31 08:30:00 2025 GMT
        Subject: CN=dd41d48ca132eb990202b7c4ace88b85cb085861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:26:42:92:85:b0:ac:6d:bd:e7:9d:94:ba:65:
                    7a:6e:19:4f:5e:bb:1a:97:f6:00:c9:92:00:31:df:
                    fd:ff:41:56:9c:d5:1c:11:99:5a:a6:24:12:1f:67:
                    e4:34:af:92:9b:0e:0f:be:8b:68:e7:5f:54:f3:0a:
                    b7:c9:c5:13:d1:c1:49:5e:4d:ba:17:01:3e:be:44:
                    ba:ca:2c:9d:bf:cc:5b:d1:73:b1:df:ce:2b:9f:6a:
                    0b:b5:9d:c7:1c:4f:b5:37:da:01:57:c0:6f:9e:50:
                    7f:8e:bf:b5:c9:5c:7e:91:a2:ec:23:72:0f:4c:a0:
                    d0:ed:12:eb:ff:b6:c0:e1:27:bb:71:2d:d5:f4:9b:
                    b6:48:91:c2:ca:9c:29:58:3c:40:2e:35:0c:b9:22:
                    e1:bd:55:da:64:5e:0b:82:64:1a:1a:23:a5:b4:a2:
                    77:64:28:19:58:69:49:8b:d7:21:c7:36:23:b9:c8:
                    ec:39:39:ad:ca:fa:3b:8d:b6:e0:23:dd:b0:f3:9a:
                    5f:3c:0f:aa:c9:6e:b5:3a:4d:2e:1e:fa:08:c4:26:
                    b9:53:84:f2:c7:39:04:29:32:5c:02:30:e5:9e:1b:
                    14:15:df:8f:6f:c7:d1:1e:9b:94:45:09:17:81:32:
                    d6:3a:ae:38:db:30:2f:2c:35:28:e2:9e:d3:a7:90:
                    bc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:27:AD:4E:7A:6F:42:92:1D:49:79:E3:F2:5A:DB:D0:7B:7B:74:2F
            X509v3 Authority Key Identifier:
                keyid:03:5B:49:76:39:53:8C:71:71:AC:A4:D7:F4:6C:03:80:19:6E:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3089555a2ff274cc3f3d658901d3ac99e4a448d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6d26b71a-ea69-4ab9-b972-634f6cb6bdec/dd41d48ca132eb990202b7c4ace88b85cb085861.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6d26b71a-ea69-4ab9-b972-634f6cb6bdec/b3089555a2ff274cc3f3d658901d3ac99e4a448d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.228.0/22
                IPv6:
                  2803:bee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:57:37:9c:9d:6c:6f:32:3e:3d:19:1b:5e:4d:08:5a:3d:d6:
         d5:79:70:86:05:a0:44:5a:c3:6a:85:3d:32:e3:b6:73:1c:76:
         86:35:9d:85:38:3c:3f:71:58:a8:53:ef:77:c5:1a:f9:b2:63:
         a6:06:07:d9:55:ff:80:73:29:84:96:36:6b:82:a8:87:52:f6:
         39:e5:5a:b4:0f:46:f6:8a:4d:1b:9d:f6:4b:eb:53:57:e3:9c:
         e8:ae:6f:07:48:68:fd:58:50:89:6a:df:ad:1c:32:ad:c5:93:
         18:18:84:5d:df:7a:e6:01:c8:66:33:53:2d:3e:9c:64:5b:39:
         e3:c6:83:47:7d:9d:03:51:79:e3:13:a6:78:f5:15:4b:24:ef:
         f4:8f:65:71:f4:0f:fa:72:90:b8:2b:9a:d6:36:53:61:90:5d:
         d6:9a:44:b9:3f:d4:ad:0c:be:a7:a6:9a:71:d8:0a:98:25:ab:
         02:ca:0f:31:3b:1e:88:17:7b:e2:2e:37:3d:2d:fd:31:e3:c7:
         8a:67:27:49:15:90:53:a8:d4:41:65:e8:35:ca:05:a9:5a:17:
         ba:d9:73:aa:e4:11:4e:73:c3:3d:f7:26:98:ee:4b:44:a5:35:
         81:7f:82:f3:dc:90:e1:bd:7c:04:cc:da:00:9a:1e:d6:26:0c:
         a8:c2:ac:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----