Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/537f8044fa1d46af562907dfef7a4584172236ca.roa
File:                     537f8044fa1d46af562907dfef7a4584172236ca.roa (raw, json)
Hash identifier:          xB+a50ARRaw6U4iyzivgt1CSWEq+DUJDb2/VfliaMyk=
Subject key identifier:   E5:6E:FB:15:C5:56:80:A5:39:01:EE:28:2E:63:E2:7F:81:5D:56:69
Certificate issuer:       /CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
Certificate serial:       136659
Authority key identifier: 4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/537f8044fa1d46af562907dfef7a4584172236ca.roa
Signing time:             Wed 10 Nov 2021 13:03:22 +0000
ROA not before:           Wed 10 Nov 2021 03:00:00 +0000
ROA not after:            Tue 10 Nov 2026 03:00:00 +0000
asID:                     263774
IP address blocks:        138.117.78.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1271385 (0x136659)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
        Validity
            Not Before: Nov 10 03:00:00 2021 GMT
            Not After : Nov 10 03:00:00 2026 GMT
        Subject: CN=537f8044fa1d46af562907dfef7a4584172236ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4f:98:67:b9:ce:8a:ca:1b:b4:42:c1:2d:d5:
                    92:1d:e3:2b:81:df:6b:0a:c0:24:e2:3d:57:c8:2f:
                    86:ac:41:dc:54:ee:6c:f6:b8:cb:c1:28:29:04:b8:
                    51:47:e6:4d:66:ca:82:79:0d:69:d4:65:bf:cb:45:
                    d8:54:01:0e:5b:3a:03:bb:ce:24:bc:db:dd:06:9f:
                    a2:7b:db:1b:0c:a9:6d:4b:11:26:54:61:0c:6f:3d:
                    c1:6c:d9:bc:23:1e:9c:f7:db:a5:06:91:d8:a5:bb:
                    b1:ef:08:45:c3:93:02:fd:16:28:f3:51:1a:50:10:
                    7e:60:fc:06:18:62:80:39:03:dc:98:d0:64:bc:dd:
                    6f:e2:19:ec:40:de:2f:15:64:22:04:e5:a3:20:40:
                    36:2c:2d:08:04:0a:ba:9d:f5:c9:0b:07:36:be:a4:
                    90:7f:cd:37:60:fd:1a:ca:b6:d4:f8:85:c2:e7:90:
                    1a:08:3b:ba:8c:87:03:f2:ab:8c:40:a2:b7:a4:ee:
                    93:a5:62:e5:2f:c3:40:45:18:52:39:90:66:a9:57:
                    d9:02:97:7f:f4:56:9a:91:b7:4c:7d:84:e0:ec:42:
                    6a:2b:2a:61:66:db:34:3a:4d:23:e5:5f:52:19:a4:
                    a8:fe:ea:3b:00:d6:80:15:c7:12:78:a4:f9:3c:a7:
                    4a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6E:FB:15:C5:56:80:A5:39:01:EE:28:2E:63:E2:7F:81:5D:56:69
            X509v3 Authority Key Identifier:
                keyid:4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/537f8044fa1d46af562907dfef7a4584172236ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/0306af81c270a60bd7a6b440bc97d420322ebcb5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:27:de:e5:a7:5d:7a:8c:2a:a7:37:a9:3a:d2:fe:4c:c8:01:
         56:df:22:42:da:4a:a7:76:14:48:6a:1c:4f:68:ae:11:c1:b0:
         c5:35:f4:13:c1:08:f3:b5:e0:6f:51:42:86:a8:5e:0c:ae:76:
         a1:8f:3e:87:d4:eb:d4:32:b8:37:e7:b8:59:e4:87:7a:dd:ea:
         c4:b9:52:56:5f:27:ae:e0:fc:57:98:6e:34:82:dd:4d:55:ff:
         12:f6:35:ef:3f:03:c9:71:42:d4:17:67:d9:c6:ce:4c:c5:3f:
         1a:a5:76:f1:78:f2:5b:08:9c:86:08:6d:58:cb:70:b1:2e:fc:
         d6:c6:40:21:df:22:88:bf:8f:cc:50:e4:83:9e:5a:15:9d:db:
         16:b4:34:ec:4e:19:28:44:55:0d:6a:de:3f:c1:44:4d:45:0a:
         16:2c:6d:df:08:03:5b:c4:7e:c0:fd:a0:e1:6f:ee:42:6e:dd:
         cb:a0:06:14:8c:24:7d:65:ed:5e:10:1e:0e:48:e1:28:00:57:
         2f:e4:d0:c6:49:9f:7c:db:4f:d2:24:f2:35:89:82:72:96:fc:
         c1:e2:9c:d2:1f:d9:1c:8d:88:3b:85:79:18:e9:f7:10:0b:d9:
         d3:c1:ef:9b:8f:6b:22:a7:77:2d:4f:56:ae:73:f3:d4:89:5a:
         a6:19:b1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----