Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/d8267fde641d106c0f8d24f765b7574f1011a2e6.roa
File:                     d8267fde641d106c0f8d24f765b7574f1011a2e6.roa (raw, json)
Hash identifier:          kvfj3btjkv+iW1DhEfi2ceGa9vCtUKyhh3bzKCAqkKk=
Subject key identifier:   01:AF:71:8E:61:03:D9:13:8F:9B:F8:A8:D2:42:3D:72:39:78:A9:FE
Certificate issuer:       /CN=0127eff5fb89d4f04f362b89beb72d612147af7f
Certificate serial:       1CB6DE
Authority key identifier: F6:3D:41:85:1E:14:D5:2B:14:A8:8A:D1:88:46:26:17:3E:84:E3:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0127eff5fb89d4f04f362b89beb72d612147af7f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/d8267fde641d106c0f8d24f765b7574f1011a2e6.roa
Signing time:             Sat 21 Jan 2023 21:05:15 +0000
ROA not before:           Thu 19 Jan 2023 21:04:31 +0000
ROA not after:            Tue 21 Jan 2025 21:04:31 +0000
asID:                     266846
IP address blocks:        138.0.122.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1881822 (0x1cb6de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0127eff5fb89d4f04f362b89beb72d612147af7f
        Validity
            Not Before: Jan 19 21:04:31 2023 GMT
            Not After : Jan 21 21:04:31 2025 GMT
        Subject: CN=d8267fde641d106c0f8d24f765b7574f1011a2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ba:e7:f2:09:d5:0d:0b:6b:80:30:4d:f1:55:
                    a5:0c:1f:13:35:c3:fb:12:9d:8e:af:d0:3c:80:ab:
                    c9:20:d7:dd:68:11:f8:0f:36:70:cc:d2:be:bc:bc:
                    83:20:ae:22:bd:a3:6d:ed:9e:64:58:4f:f1:97:23:
                    cb:6a:34:72:3a:37:e4:9c:be:10:1f:f5:cc:ca:26:
                    33:a8:b2:e5:0f:03:47:96:b3:ab:43:1e:4f:ce:60:
                    bb:34:03:b8:ec:eb:61:58:53:f9:b1:c7:81:6b:b6:
                    47:f2:39:b0:06:f0:12:ab:c5:00:4a:7c:75:e2:28:
                    da:47:11:33:45:4e:40:f5:aa:13:46:e6:3c:4a:79:
                    86:a8:2b:62:5d:5b:51:af:d7:61:bc:56:bf:0f:90:
                    5a:5d:cc:9e:36:d3:3f:1b:f6:c6:51:ba:dd:d4:e3:
                    af:af:db:cb:10:5d:a4:87:81:60:95:96:12:0a:e8:
                    4b:f7:48:84:62:04:84:da:9b:51:f9:e3:77:b2:a4:
                    fa:e8:a9:23:ee:09:6f:e7:ec:81:a3:9b:60:8d:fe:
                    a0:aa:d4:1c:90:6c:37:e0:92:97:91:60:42:aa:00:
                    24:0c:19:ee:d2:c7:87:2d:b7:89:a1:e5:92:04:4f:
                    17:d4:dd:ee:45:88:76:10:3a:5a:79:47:84:54:34:
                    ff:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AF:71:8E:61:03:D9:13:8F:9B:F8:A8:D2:42:3D:72:39:78:A9:FE
            X509v3 Authority Key Identifier:
                keyid:F6:3D:41:85:1E:14:D5:2B:14:A8:8A:D1:88:46:26:17:3E:84:E3:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0127eff5fb89d4f04f362b89beb72d612147af7f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/d8267fde641d106c0f8d24f765b7574f1011a2e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/0127eff5fb89d4f04f362b89beb72d612147af7f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:63:04:58:97:ee:e9:1f:00:15:a9:f3:aa:e1:8d:c3:f8:e3:
         f1:93:00:ad:45:c6:81:a6:8f:18:37:fc:ce:44:69:6f:4e:99:
         a2:6b:4a:91:9f:07:0c:82:01:c6:1a:18:72:33:c9:4b:ad:98:
         32:60:f3:de:3d:50:11:68:be:58:7b:14:db:20:81:ff:15:66:
         b4:31:be:0f:3f:bb:d0:c4:44:70:cf:8e:eb:59:99:a8:7e:11:
         73:10:59:9e:e6:62:63:f6:9a:9e:8d:b2:e1:86:ad:69:04:a9:
         90:6a:5e:c9:89:7f:19:3b:04:7e:c7:42:ca:1a:9f:27:19:14:
         45:4b:03:3c:9b:d6:1e:f9:78:66:ef:1c:00:ba:5f:8d:ec:2f:
         06:66:6c:a0:b5:12:60:3d:91:c9:eb:5c:bc:19:ac:b0:96:27:
         b1:76:53:6f:8a:aa:5d:62:28:4d:21:6b:25:4d:69:16:52:25:
         3e:87:c2:90:1c:f8:e3:74:5e:05:04:bc:1a:c4:2e:e4:17:18:
         a2:aa:51:2d:e0:d9:33:35:80:54:6a:a0:7d:16:a2:da:fd:0d:
         ab:dc:6a:00:94:98:09:ca:0d:03:f2:ad:bb:45:9e:a3:5e:a2:
         a2:4c:8c:bd:39:08:43:e5:42:00:a1:5f:d3:07:5b:ef:f0:0e:
         d2:5f:bb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----