Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/256d4c9c9a9718e11e408633ff90291f8877407f.roa
File:                     256d4c9c9a9718e11e408633ff90291f8877407f.roa (raw, json)
Hash identifier:          CLGJulpWPuoE2OD49jKHNbBDlPQwsUnQFH2bsQnRzRU=
Subject key identifier:   74:27:F9:B7:48:EB:40:FC:82:FD:3C:A7:12:3A:D3:E9:28:2A:49:3F
Certificate issuer:       /CN=569d9c53d2d7a2dabbb573b437a4edbd78719117
Certificate serial:       036226
Authority key identifier: 7E:23:73:C2:1C:1C:73:EA:50:DA:EE:CE:10:06:0B:BB:52:C4:C2:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/569d9c53d2d7a2dabbb573b437a4edbd78719117.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/256d4c9c9a9718e11e408633ff90291f8877407f.roa
Signing time:             Fri 01 Oct 2021 13:47:37 +0000
ROA not before:           Sat 15 May 2021 03:00:00 +0000
ROA not after:            Mon 15 May 2023 03:00:00 +0000
asID:                     3257
IP address blocks:        170.83.236.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221734 (0x36226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=569d9c53d2d7a2dabbb573b437a4edbd78719117
        Validity
            Not Before: May 15 03:00:00 2021 GMT
            Not After : May 15 03:00:00 2023 GMT
        Subject: CN=256d4c9c9a9718e11e408633ff90291f8877407f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:63:a1:45:aa:60:5b:30:c1:b8:68:72:64:6a:
                    ff:31:83:57:1f:88:6e:08:4a:bb:28:23:55:e6:ee:
                    f8:6b:e4:60:c6:b1:74:c7:d2:da:d0:a2:12:9f:5f:
                    01:b6:1c:be:76:dd:d1:ba:90:69:70:a7:ca:96:28:
                    91:0c:8c:50:74:96:00:b5:5c:f7:93:da:e9:97:04:
                    da:7e:39:40:be:70:18:4c:d8:e5:d8:5e:49:9b:72:
                    25:d3:e7:45:3b:a5:3b:b4:56:29:32:5b:68:50:5d:
                    95:02:01:6d:eb:dd:43:70:03:39:d2:26:83:c5:6a:
                    7e:e7:92:e5:22:fc:ed:8b:74:a0:38:d2:6b:fd:33:
                    37:f8:4e:f6:f7:bb:08:79:6c:d5:40:a0:83:f8:63:
                    c3:5d:29:05:47:48:62:eb:38:04:e5:2b:79:85:7f:
                    d7:a1:56:34:ba:5f:74:ca:df:2b:eb:65:bf:0e:48:
                    76:0b:55:1b:c2:df:33:2c:02:f9:74:7d:0a:9c:a8:
                    a9:5f:72:40:5b:cc:45:43:6b:de:da:ec:24:5b:a5:
                    31:b8:e9:12:5a:7c:61:4b:2a:61:e5:eb:b6:ae:af:
                    db:fc:93:07:47:6b:6f:16:78:03:52:80:63:00:b5:
                    23:f0:ae:58:9e:3d:15:c5:c6:e2:d7:d9:cf:12:6b:
                    ad:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:27:F9:B7:48:EB:40:FC:82:FD:3C:A7:12:3A:D3:E9:28:2A:49:3F
            X509v3 Authority Key Identifier:
                keyid:7E:23:73:C2:1C:1C:73:EA:50:DA:EE:CE:10:06:0B:BB:52:C4:C2:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/569d9c53d2d7a2dabbb573b437a4edbd78719117.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/256d4c9c9a9718e11e408633ff90291f8877407f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/569d9c53d2d7a2dabbb573b437a4edbd78719117.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:9b:7b:f3:8d:a4:11:19:a8:c5:ca:e8:61:17:a9:4e:a1:22:
         60:96:c9:a7:b3:37:7f:9f:19:01:c4:4a:b7:e8:ab:19:b7:47:
         2c:ee:3c:26:1d:93:29:0c:39:9b:e9:cf:be:38:ae:75:ce:09:
         f2:42:00:61:28:cc:21:6e:bb:1d:5c:40:b5:80:38:d7:8b:80:
         3b:7f:81:bd:52:67:7f:ed:fb:cb:31:a4:b3:57:c1:a0:4a:5e:
         c4:f5:c1:96:d4:f5:e9:e2:52:ea:7a:a4:02:87:6d:7b:7f:56:
         85:40:51:87:28:b2:a3:1d:c6:38:33:46:9d:40:62:33:e0:e0:
         59:f3:a2:f0:d1:05:fa:b7:36:e4:49:9b:90:c7:f7:df:e9:bf:
         f5:b7:fd:d9:4c:c5:15:42:c1:9b:e9:73:9c:b6:08:4b:a5:83:
         9c:2f:f9:6c:30:94:18:e7:a7:ed:3d:6a:9e:73:83:3b:56:cd:
         b8:c2:cc:e0:48:33:a6:e7:61:e9:8b:40:e8:28:d5:bf:81:cf:
         6c:91:04:69:f9:2f:95:09:48:5d:54:05:07:3b:5a:ae:ff:22:
         00:aa:b9:ab:f2:b9:76:ed:e0:a4:f5:99:f0:d9:25:71:26:20:
         9b:7b:0c:7b:ad:0b:74:d5:6a:36:61:20:e7:a6:cf:5f:f8:bc:
         be:0e:f8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----