Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/13bc153e997df17cfcc7cffd26f5d7d42eb0f4df.roa
File:                     13bc153e997df17cfcc7cffd26f5d7d42eb0f4df.roa (raw, json)
Hash identifier:          pUkMqM2mKMi1JDUK4OHlwFOXaNsMi2PQdZsdNzh3lbQ=
Subject key identifier:   3F:35:B3:57:2A:00:2F:47:35:30:06:5F:24:81:96:F7:6F:48:8D:0E
Certificate issuer:       /CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
Certificate serial:       17802A
Authority key identifier: 81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/13bc153e997df17cfcc7cffd26f5d7d42eb0f4df.roa
Signing time:             Fri 01 Jul 2022 08:30:00 +0000
ROA not before:           Fri 01 Jul 2022 08:30:00 +0000
ROA not after:            Sun 30 Jun 2024 08:30:00 +0000
asID:                     271842
IP address blocks:        168.194.169.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1540138 (0x17802a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
        Validity
            Not Before: Jul  1 08:30:00 2022 GMT
            Not After : Jun 30 08:30:00 2024 GMT
        Subject: CN=13bc153e997df17cfcc7cffd26f5d7d42eb0f4df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9a:fe:33:c3:70:ec:29:22:81:6e:1f:dd:41:
                    a5:be:5d:a6:4b:85:8b:31:14:99:f9:a1:91:82:61:
                    6b:2a:c5:bd:03:f4:64:d9:41:89:bf:93:b4:4c:a8:
                    7a:0d:d8:9c:cf:24:17:f1:5c:af:0e:98:84:58:6e:
                    3f:a9:ec:a5:74:1b:a4:2e:f4:63:4b:a1:da:1d:44:
                    4b:17:d7:ad:d1:cb:a4:45:9f:45:e5:7d:ef:72:0d:
                    f1:79:9e:0d:9d:27:6a:bd:9b:ef:54:94:a1:02:eb:
                    b7:f3:c0:da:73:9f:5a:36:87:f4:40:ee:73:dd:27:
                    2b:5b:4b:a7:55:c1:36:e0:4e:51:cd:01:da:5b:84:
                    f9:ce:fd:66:90:33:a0:51:70:5f:2d:7c:4f:2f:91:
                    7f:11:e8:87:66:38:df:3a:ad:c4:74:04:8e:e1:0d:
                    69:0e:ce:86:98:5e:2f:4f:ce:56:62:5d:6d:12:68:
                    f0:4d:dc:bf:f0:43:65:8c:15:03:3f:f0:75:26:bf:
                    8b:a4:f1:4f:ef:1a:24:91:00:58:db:f5:fa:64:80:
                    5e:e2:78:2a:36:3a:03:35:e7:8b:7e:bc:06:d9:7c:
                    eb:d3:6c:9a:92:47:72:c7:e6:d7:d5:a3:7a:6c:c0:
                    6f:35:4a:e5:b8:46:fd:94:75:dd:27:41:7b:3e:fd:
                    69:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:35:B3:57:2A:00:2F:47:35:30:06:5F:24:81:96:F7:6F:48:8D:0E
            X509v3 Authority Key Identifier:
                keyid:81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/13bc153e997df17cfcc7cffd26f5d7d42eb0f4df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:41:a9:c6:c3:b6:64:83:dc:af:78:da:cf:e7:f5:51:09:03:
         06:fe:36:f9:fa:ee:05:e6:7b:50:b0:59:ff:b7:5f:c4:fa:3c:
         f9:21:48:49:ac:c9:0c:9e:ab:dc:df:74:8e:2f:cf:25:7a:34:
         fd:ab:16:0a:a9:f8:d5:59:80:d7:d3:25:df:a9:cd:29:bc:c3:
         df:03:f5:2c:87:e5:9a:21:bf:85:74:a1:99:bb:10:a8:55:9b:
         fa:50:23:c8:52:bb:57:1b:4a:95:b1:a2:0e:80:f3:74:bc:6c:
         1a:15:1a:13:bb:db:76:f3:4a:07:22:eb:b7:3c:12:d8:4f:47:
         c9:f6:f3:dd:13:f5:1d:6e:2b:90:da:3a:67:4d:c9:21:fb:d0:
         b1:b5:29:b6:15:34:19:ed:49:66:e9:37:5b:34:14:9d:76:13:
         a5:c1:00:86:9f:ee:98:b2:47:b6:83:cc:8a:20:ea:e6:02:9b:
         1c:4a:9a:cd:c6:5c:6e:ba:fd:58:56:b4:29:e9:f5:17:19:f6:
         8b:dc:21:92:69:d5:8a:99:0f:bd:4a:e9:62:1a:9d:5d:6e:6d:
         a3:9c:80:28:65:fe:ca:57:6a:2b:a8:fb:b5:e2:c3:21:45:02:
         c5:42:99:31:52:95:61:5a:f0:a3:23:a2:63:a3:aa:7b:0f:29:
         20:59:48:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----