Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/676c240fa8040bb8bc89d4b6a6ed20eb365142f3.roa
File:                     676c240fa8040bb8bc89d4b6a6ed20eb365142f3.roa (raw, json)
Hash identifier:          aOVPsz5M7d4RYyidtiepEbyyO0PJaMtgI6tDI4oqL4k=
Subject key identifier:   41:F6:5C:D9:9B:79:AC:2C:D4:79:4C:46:DE:34:3C:40:8F:5C:87:D2
Certificate issuer:       /CN=0127eff5fb89d4f04f362b89beb72d612147af7f
Certificate serial:       1CAF65
Authority key identifier: F6:3D:41:85:1E:14:D5:2B:14:A8:8A:D1:88:46:26:17:3E:84:E3:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0127eff5fb89d4f04f362b89beb72d612147af7f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/676c240fa8040bb8bc89d4b6a6ed20eb365142f3.roa
Signing time:             Sat 21 Jan 2023 21:04:30 +0000
ROA not before:           Fri 20 Jan 2023 21:02:47 +0000
ROA not after:            Tue 21 Jan 2025 21:02:47 +0000
asID:                     265703
IP address blocks:        138.0.122.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1879909 (0x1caf65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0127eff5fb89d4f04f362b89beb72d612147af7f
        Validity
            Not Before: Jan 20 21:02:47 2023 GMT
            Not After : Jan 21 21:02:47 2025 GMT
        Subject: CN=676c240fa8040bb8bc89d4b6a6ed20eb365142f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4f:e2:87:dd:e5:4e:fd:0a:32:6e:d3:97:aa:
                    ce:78:7a:1a:bd:bd:4e:c2:3f:a5:07:d9:b8:a8:2b:
                    d9:18:e0:77:9c:3a:18:a0:85:27:5e:77:7c:4e:6c:
                    d9:e6:b1:b9:e6:32:6a:e8:55:11:59:16:a1:0a:b3:
                    76:d6:ac:26:17:84:e3:ac:57:28:7f:b7:e4:86:81:
                    6b:8d:ad:9a:0f:a5:76:e4:9e:e8:2c:23:cc:fd:19:
                    54:01:70:5a:f4:cd:64:75:1f:ee:e7:2c:37:98:f9:
                    8e:91:0f:01:eb:ef:0f:46:fa:40:b2:28:31:16:78:
                    ed:5a:62:64:50:85:fc:94:2c:f1:70:a2:02:99:c5:
                    d2:d3:b6:1f:0b:98:c4:f4:ed:7b:e0:3c:67:ea:61:
                    70:e9:56:d2:b4:af:31:3d:07:81:02:0c:52:5f:ce:
                    bd:31:0b:25:b8:53:84:68:55:f2:99:fc:45:e6:a3:
                    9b:3c:e7:66:41:93:1c:bf:73:a1:b9:e3:1b:f6:ff:
                    cb:70:2f:83:53:b7:32:db:ac:29:83:c8:ab:15:32:
                    d2:e0:c3:a2:28:62:13:55:99:7d:43:fd:7c:9b:4e:
                    50:76:e9:14:06:1e:80:76:e1:b0:65:f9:17:56:89:
                    3a:e1:c6:85:6b:5f:02:50:dc:13:94:8a:3e:95:be:
                    cd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F6:5C:D9:9B:79:AC:2C:D4:79:4C:46:DE:34:3C:40:8F:5C:87:D2
            X509v3 Authority Key Identifier:
                keyid:F6:3D:41:85:1E:14:D5:2B:14:A8:8A:D1:88:46:26:17:3E:84:E3:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0127eff5fb89d4f04f362b89beb72d612147af7f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/676c240fa8040bb8bc89d4b6a6ed20eb365142f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/0127eff5fb89d4f04f362b89beb72d612147af7f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:c1:9e:52:05:4d:7c:b1:fc:c9:ac:64:d2:17:69:63:85:3e:
         69:7e:71:8a:f8:42:56:e6:2d:ee:9a:19:d8:f5:bc:83:6f:63:
         48:5f:8c:dc:6d:bf:04:ca:e5:09:f2:4f:db:fb:8d:93:6b:b6:
         61:ab:b5:03:4e:8e:13:1e:92:2d:45:f7:7e:1c:2c:f1:9c:4b:
         a2:04:85:51:d7:0e:5f:46:13:b7:a8:52:96:d6:0c:96:da:59:
         55:87:1b:34:9d:60:af:cb:e1:46:e9:b5:93:56:ce:9a:89:2f:
         4e:95:34:98:f0:1b:3e:61:49:55:51:fa:12:52:3b:98:bf:bd:
         6b:58:0d:f4:bf:f9:38:cb:87:7e:51:c3:8c:bc:b8:bb:c7:ef:
         4d:a6:d5:17:b9:97:30:0f:1a:9e:18:db:8a:ef:2c:2b:9b:c8:
         51:8f:67:80:32:d1:c8:a0:f9:fa:14:ba:16:73:23:63:4a:64:
         e4:5a:98:72:7b:10:da:11:36:2a:9d:48:73:22:1c:21:ae:58:
         6e:6d:0f:f6:07:a7:25:eb:1b:10:30:8a:a1:0c:5d:55:6a:dc:
         9d:a1:89:f3:97:bf:58:ff:b2:cb:fc:7b:7e:6a:11:d3:63:00:
         11:52:0f:53:3c:1e:fc:da:aa:c2:07:d2:99:6d:0a:d3:c9:8e:
         f4:fe:4f:f2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHK9lMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAx
MjdlZmY1ZmI4OWQ0ZjA0ZjM2MmI4OWJlYjcyZDYxMjE0N2FmN2YwHhcNMjMwMTIw
MjEwMjQ3WhcNMjUwMTIxMjEwMjQ3WjAzMTEwLwYDVQQDEyg2NzZjMjQwZmE4MDQw
YmI4YmM4OWQ0YjZhNmVkMjBlYjM2NTE0MmYzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhk/ih93lTv0KMm7Tl6rOeHoavb1Owj+lB9m4qCvZGOB3nDoY
oIUnXnd8TmzZ5rG55jJq6FURWRahCrN21qwmF4TjrFcof7fkhoFrja2aD6V25J7o
LCPM/RlUAXBa9M1kdR/u5yw3mPmOkQ8B6+8PRvpAsigxFnjtWmJkUIX8lCzxcKIC
mcXS07YfC5jE9O174Dxn6mFw6VbStK8xPQeBAgxSX869MQsluFOEaFXymfxF5qOb
POdmQZMcv3OhueMb9v/LcC+DU7cy26wpg8irFTLS4MOiKGITVZl9Q/18m05QdukU
Bh6AduGwZfkXVok64caFa18CUNwTlIo+lb7N8QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEH2XNmbeaws1HlMRt40PECPXIfSMB8GA1UdIwQYMBaAFPY9QYUeFNUrFKiK
0YhGJhc+hOMrMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDEyN2Vm
ZjVmYjg5ZDRmMDRmMzYyYjg5YmViNzJkNjEyMTQ3YWY3Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2MyOTM2NjQtZjNlNy00NjkyLWFlNDMtNDE4M2Qz
ZDY0MjlhLzY3NmMyNDBmYTgwNDBiYjhiYzg5ZDRiNmE2ZWQyMGViMzY1MTQyZjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83YzI5MzY2NC1mM2U3LTQ2OTItYWU0My00MTgz
ZDNkNjQyOWEvMDEyN2VmZjVmYjg5ZDRmMDRmMzYyYjg5YmViNzJkNjEyMTQ3YWY3
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAYoAejANBgkqhkiG9w0BAQsFAAOCAQEANsGeUgVNfLH8yaxk
0hdpY4U+aX5xivhCVuYt7poZ2PW8g29jSF+M3G2/BMrlCfJP2/uNk2u2Yau1A06O
Ex6SLUX3fhws8ZxLogSFUdcOX0YTt6hSltYMltpZVYcbNJ1gr8vhRum1k1bOmokv
TpU0mPAbPmFJVVH6ElI7mL+9a1gN9L/5OMuHflHDjLy4u8fvTabVF7mXMA8anhjb
iu8sK5vIUY9ngDLRyKD5+hS6FnMjY0pk5FqYcnsQ2hE2Kp1IcyIcIa5Ybm0P9gen
JesbEDCKoQxdVWrcnaGJ85e/WP+yy/x7fmoR02MAEVIPUzwe/NqqwgfSmW0K08mO
9P5P8g==
-----END CERTIFICATE-----