Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/988cf02511341892cc9783ae1431e87badfb22d1.roa
File:                     988cf02511341892cc9783ae1431e87badfb22d1.roa (raw, json)
Hash identifier:          WOLDykIjIkOsZd0BI1mfxXxvXutQOye3CN7ORMF44/w=
Subject key identifier:   EB:CE:7B:CA:34:5F:32:BB:C3:49:73:20:A0:DD:49:83:B9:D6:5B:E5
Certificate issuer:       /CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
Certificate serial:       1394C2
Authority key identifier: 4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/988cf02511341892cc9783ae1431e87badfb22d1.roa
Signing time:             Wed 10 Nov 2021 14:32:31 +0000
ROA not before:           Wed 10 Nov 2021 03:00:00 +0000
ROA not after:            Tue 10 Nov 2026 03:00:00 +0000
asID:                     263774
IP address blocks:        170.83.125.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1283266 (0x1394c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
        Validity
            Not Before: Nov 10 03:00:00 2021 GMT
            Not After : Nov 10 03:00:00 2026 GMT
        Subject: CN=988cf02511341892cc9783ae1431e87badfb22d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:84:35:0e:fb:89:26:0a:d2:57:f8:fb:b0:2e:
                    94:46:57:22:63:20:86:a5:c5:ea:1a:8b:31:43:3d:
                    b8:bb:89:c7:85:d1:cb:d3:3a:fd:d0:ae:ba:49:a9:
                    99:3c:71:e5:6e:62:77:c5:a6:40:a0:e7:12:0b:63:
                    1b:ab:ff:83:b3:f7:13:c8:15:54:c2:6f:ab:f5:d7:
                    bb:64:50:92:a5:97:bc:a6:0e:3e:7e:5b:09:6f:9a:
                    10:40:48:63:60:09:97:9b:d7:86:07:da:91:31:dd:
                    7e:bf:1b:7c:c9:86:0b:97:44:9d:0f:a4:5e:ea:49:
                    34:4e:b3:43:32:31:a4:8d:2f:4e:73:15:7c:66:b9:
                    5c:cd:b9:f7:20:e9:08:f9:d5:0b:1d:35:54:6f:9e:
                    f4:00:e2:28:04:ed:1b:ba:2a:98:ef:5e:49:b4:28:
                    7e:4d:4c:6e:74:7b:ca:0a:18:34:30:3d:08:9d:1f:
                    94:76:d8:74:4b:7c:1d:e5:1e:22:e1:4e:43:10:52:
                    dd:ca:d8:9f:02:45:96:b0:5d:ce:ff:4d:03:b5:93:
                    c5:6d:c3:63:80:df:68:6e:b3:5e:5f:94:72:e2:fc:
                    77:0d:95:48:b1:7f:3c:af:cc:44:30:8d:d1:b9:43:
                    2e:e1:33:49:81:dc:ef:04:d3:61:03:96:ff:5e:fc:
                    0d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CE:7B:CA:34:5F:32:BB:C3:49:73:20:A0:DD:49:83:B9:D6:5B:E5
            X509v3 Authority Key Identifier:
                keyid:4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/988cf02511341892cc9783ae1431e87badfb22d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/0306af81c270a60bd7a6b440bc97d420322ebcb5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:6b:16:c2:83:0d:f1:1c:e3:88:1b:c1:48:c7:d0:ed:63:9f:
         c0:a7:62:11:21:7c:1d:86:6e:f6:50:8c:61:01:55:f0:3f:ea:
         12:61:b8:f8:84:e0:d4:40:4f:ee:97:e9:bf:24:6b:69:f4:98:
         d0:06:e9:fb:da:6f:20:64:9e:bd:8a:d1:1d:d7:7a:3a:39:ae:
         17:fe:07:3b:c0:fe:ca:c7:41:ca:5d:f3:b5:8d:23:fc:57:be:
         dd:32:fd:7c:d9:7d:5b:a9:b6:80:4b:9a:bd:df:31:64:00:97:
         a5:ea:ae:e7:a7:5a:a4:3c:ba:49:7a:5f:cf:56:02:7b:7d:58:
         d9:23:70:a2:8e:57:e5:1c:97:39:08:6c:47:e8:de:88:5a:4d:
         82:fe:a5:c0:20:94:0e:f3:52:ee:b6:2c:9b:0b:3e:22:0a:b3:
         44:97:48:7e:0f:57:b2:44:05:3b:dd:bf:21:ea:6a:d2:29:04:
         58:b2:ea:f1:16:e2:c7:c3:21:43:68:b6:8f:3b:44:2e:a2:69:
         5f:55:39:79:20:33:02:fd:6b:a0:cb:33:1a:1d:bd:72:9f:ac:
         6a:a6:89:62:6d:f6:36:f9:b2:57:25:a6:1c:e8:1c:2c:6d:cb:
         6c:ca:1c:95:9d:cb:e4:96:13:34:b5:20:13:fd:01:ce:8f:d1:
         39:7c:3e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----