Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/e5c1f3832d048a9884955ef38b4c7a0c03fdcf3d.roa
File:                     e5c1f3832d048a9884955ef38b4c7a0c03fdcf3d.roa (raw, json)
Hash identifier:          HAbv3FNhJo/jHqqVqo69JQKsgpn9/489QFj6yGpA9vI=
Subject key identifier:   40:E9:23:7C:02:A8:D4:2A:2C:E9:C8:5D:E5:18:23:2A:2E:88:57:EA
Certificate issuer:       /CN=23392513f47d61c0f12dc66bb0d069fed5378524
Certificate serial:       0D6DC3
Authority key identifier: 3C:89:F0:67:EB:7D:D4:43:8F:12:76:A2:BA:04:A3:4B:62:11:70:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23392513f47d61c0f12dc66bb0d069fed5378524.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/e5c1f3832d048a9884955ef38b4c7a0c03fdcf3d.roa
Signing time:             Mon 20 Jun 2022 21:56:00 +0000
ROA not before:           Mon 20 Jun 2022 03:00:00 +0000
ROA not after:            Thu 20 Jun 2024 03:00:00 +0000
asID:                     41095
IP address blocks:        138.204.12.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880067 (0xd6dc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23392513f47d61c0f12dc66bb0d069fed5378524
        Validity
            Not Before: Jun 20 03:00:00 2022 GMT
            Not After : Jun 20 03:00:00 2024 GMT
        Subject: CN=e5c1f3832d048a9884955ef38b4c7a0c03fdcf3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:01:31:f4:75:f6:46:f2:04:9d:2a:32:b8:80:
                    d1:e3:76:be:c4:2a:b3:98:5c:7d:a8:2e:2f:66:55:
                    0b:11:5c:a5:52:21:e0:fd:81:0a:34:54:58:2a:00:
                    5a:b7:0c:92:cf:bc:62:f2:92:fb:38:55:07:62:b5:
                    26:55:bf:75:21:44:17:f6:80:90:92:3d:b7:14:66:
                    0c:56:bf:01:e0:b5:45:4a:e4:55:64:b3:94:11:9c:
                    71:4b:42:bf:70:c9:36:a2:00:98:25:07:53:fe:8e:
                    77:d0:77:df:8d:0c:6e:9a:09:e1:d2:e9:4f:46:03:
                    c2:77:e7:29:d8:a8:ab:9e:5c:e9:f9:7a:ec:88:c5:
                    6c:8d:dc:02:d7:b2:68:b3:c4:33:49:85:14:b3:23:
                    a4:d7:4e:8d:ac:f8:da:4c:1f:4d:68:6b:ae:50:f9:
                    92:2b:75:bf:c4:44:65:08:ba:cc:ee:a4:9c:9f:1e:
                    a3:d0:16:d9:13:9e:2a:b9:eb:fa:1a:cd:e1:7d:f2:
                    fa:7e:55:fc:2d:07:5c:ec:f9:a4:57:47:5d:91:f7:
                    3d:e2:f3:d8:48:2a:41:24:73:79:f2:e3:1e:81:87:
                    b2:37:b4:15:2c:5a:69:dd:4a:f5:88:d4:6b:4d:bf:
                    3d:f9:00:d3:78:9d:0f:02:87:32:ba:ee:4f:ea:95:
                    69:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E9:23:7C:02:A8:D4:2A:2C:E9:C8:5D:E5:18:23:2A:2E:88:57:EA
            X509v3 Authority Key Identifier:
                keyid:3C:89:F0:67:EB:7D:D4:43:8F:12:76:A2:BA:04:A3:4B:62:11:70:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23392513f47d61c0f12dc66bb0d069fed5378524.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/e5c1f3832d048a9884955ef38b4c7a0c03fdcf3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/23392513f47d61c0f12dc66bb0d069fed5378524.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:80:bb:b6:88:53:d0:05:3d:06:2a:07:de:6e:f2:c3:55:af:
         bd:f3:20:d3:a7:1f:f1:31:f7:63:37:2f:aa:54:46:e5:c6:c2:
         a0:a8:40:7f:6c:75:22:29:60:5c:7b:b4:53:81:a5:81:f0:00:
         16:cc:37:be:90:b5:7b:7f:0c:e4:37:08:36:ac:12:68:af:55:
         95:74:2f:9a:64:a5:09:f5:cc:d1:aa:cb:4d:ca:de:7b:60:33:
         5c:6e:a7:de:ba:53:f6:94:6d:dc:ac:e4:be:9f:29:ab:01:1e:
         99:66:8f:ce:20:f1:58:ed:02:de:bd:86:08:b8:fc:ff:d7:52:
         d2:39:7c:64:7c:af:c4:22:38:e3:fd:30:27:18:63:8f:7d:4b:
         d9:d1:58:11:99:b3:f8:ea:77:e1:2c:9c:b3:02:9f:c8:da:51:
         86:fa:19:a5:47:ca:b9:79:30:bb:f0:d9:13:96:fc:9d:f9:71:
         6d:c7:65:f4:2b:51:13:6e:8d:76:13:7d:cc:05:02:7c:28:1b:
         33:77:db:d9:20:b4:40:cf:f0:88:f9:6b:90:44:f7:2a:f3:18:
         cd:5e:31:85:99:f1:31:71:5f:34:7f:06:a2:f4:3b:fe:e6:09:
         b7:80:d2:e8:b8:b8:64:a2:a2:2f:65:f2:db:75:5a:50:e6:bb:
         e2:3e:62:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----