Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/80afa50631ec7a089f3db07b9f27e16aa7fe85bf.roa
File:                     80afa50631ec7a089f3db07b9f27e16aa7fe85bf.roa (raw, json)
Hash identifier:          mimA/nSndTM+6/X2SyiRDx7+Z8oX1+KxWiLM2WHHWbk=
Subject key identifier:   B7:82:D8:E2:CB:DB:F2:AB:FB:FA:99:53:B7:5D:B5:63:73:43:B6:0F
Certificate issuer:       /CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
Certificate serial:       139616
Authority key identifier: 4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/80afa50631ec7a089f3db07b9f27e16aa7fe85bf.roa
Signing time:             Wed 10 Nov 2021 14:33:26 +0000
ROA not before:           Wed 10 Nov 2021 03:00:00 +0000
ROA not after:            Tue 10 Nov 2026 03:00:00 +0000
asID:                     263774
IP address blocks:        170.83.126.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1283606 (0x139616)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
        Validity
            Not Before: Nov 10 03:00:00 2021 GMT
            Not After : Nov 10 03:00:00 2026 GMT
        Subject: CN=80afa50631ec7a089f3db07b9f27e16aa7fe85bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:76:a1:ae:86:5a:d0:36:c6:fb:d7:4c:0b:69:
                    9c:8a:24:f7:ab:12:37:88:aa:bc:13:40:d6:db:18:
                    ae:db:ed:88:5f:c2:a6:98:0c:da:d9:20:b1:b5:fd:
                    36:11:52:52:99:2e:6e:01:5f:3b:d3:ad:9b:bb:c3:
                    9a:76:39:42:f9:23:64:dc:ac:61:cc:f8:fd:d9:6c:
                    fe:91:2d:db:3a:b6:bb:17:65:ca:1f:f1:9e:0b:a4:
                    3e:02:b0:83:a3:3c:1a:d5:ce:9b:9c:02:3f:70:a8:
                    17:f0:aa:bf:d5:0c:e8:45:db:c0:e6:51:a1:58:d2:
                    95:56:da:aa:5d:11:71:d0:16:d0:ce:b0:d2:ac:32:
                    80:85:40:a7:2a:0f:42:0d:d9:35:76:92:6d:d6:a6:
                    67:1a:df:21:45:0f:2f:83:09:5b:45:c4:f5:81:e3:
                    0f:35:06:93:3f:03:54:d1:e0:50:00:02:cb:7d:70:
                    15:e5:03:0b:aa:45:d1:ee:dc:d6:14:51:38:b8:1e:
                    f5:af:04:2a:39:01:97:10:03:90:27:98:bd:6f:12:
                    bb:54:34:3d:0c:a2:b6:e6:df:cf:0f:44:da:46:ff:
                    2a:47:f0:a9:42:cd:36:2f:06:0a:0e:97:b5:16:b5:
                    d3:f4:c9:ff:d4:a2:dc:6e:0f:40:2c:7f:c8:3a:ad:
                    d3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:82:D8:E2:CB:DB:F2:AB:FB:FA:99:53:B7:5D:B5:63:73:43:B6:0F
            X509v3 Authority Key Identifier:
                keyid:4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/80afa50631ec7a089f3db07b9f27e16aa7fe85bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/0306af81c270a60bd7a6b440bc97d420322ebcb5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:51:60:47:da:ee:2a:fd:d4:35:24:ce:1b:0b:0a:a1:24:0e:
         04:01:35:1a:0c:d9:2c:52:95:e8:00:a9:94:91:6f:3b:2c:91:
         e1:47:c1:8b:dd:ab:10:d7:0c:f8:e8:3c:e6:b1:45:59:1d:73:
         22:80:60:b7:c3:8e:03:da:9c:78:45:12:ca:1c:41:45:45:9d:
         d5:12:2d:8d:5a:fb:20:48:58:5f:80:c4:e4:a6:de:5e:df:ed:
         39:c4:f7:80:60:0b:43:8e:86:04:d7:75:b7:a2:00:cd:b4:19:
         0b:64:ea:26:e7:33:9b:4a:94:6e:4e:cd:a5:59:23:f0:7f:c7:
         66:02:b1:68:37:0b:53:25:e1:36:9b:5e:2c:8a:7f:cf:f7:0f:
         c1:5e:33:b3:c3:e0:1f:bf:e1:cc:2f:7b:4a:49:fd:e2:f1:6c:
         ba:7b:ae:56:8d:ce:6d:c8:75:db:6a:3b:e1:da:a3:3b:3a:ee:
         0a:ba:c1:c7:de:c9:f5:46:b3:07:9f:b4:c4:0a:40:fd:f0:59:
         3a:03:82:54:a6:ce:bc:52:49:0c:7b:ab:1b:ec:d1:09:ab:a4:
         18:d6:18:cc:20:20:5e:f6:cc:cc:97:32:c9:38:9c:68:f4:e0:
         72:8b:44:52:7c:39:4d:3b:b2:a3:18:5f:25:d8:5d:76:6c:4c:
         ce:fc:84:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----