Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/f0d1f6da3b8d89ca8d362ae84c6add0bfebeeb9e.roa
File:                     f0d1f6da3b8d89ca8d362ae84c6add0bfebeeb9e.roa (raw, json)
Hash identifier:          HN+078ppH52QbXPMomcHmJs7L9F1C8hKLCV1R+5el3o=
Subject key identifier:   4D:8C:65:BA:EB:18:21:05:21:3B:5B:2B:3D:D2:C3:DB:D5:9A:A0:EE
Certificate issuer:       /CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
Certificate serial:       138235
Authority key identifier: 4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/f0d1f6da3b8d89ca8d362ae84c6add0bfebeeb9e.roa
Signing time:             Wed 10 Nov 2021 14:27:23 +0000
ROA not before:           Wed 10 Nov 2021 03:00:00 +0000
ROA not after:            Tue 10 Nov 2026 03:00:00 +0000
asID:                     263774
IP address blocks:        170.83.124.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1278517 (0x138235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
        Validity
            Not Before: Nov 10 03:00:00 2021 GMT
            Not After : Nov 10 03:00:00 2026 GMT
        Subject: CN=f0d1f6da3b8d89ca8d362ae84c6add0bfebeeb9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5e:6f:fb:af:30:4b:39:31:cb:0e:9f:9b:a6:
                    66:63:8a:91:cd:a6:86:13:23:05:89:05:9e:9e:cd:
                    ef:77:c8:d8:c2:4c:93:ac:e2:ba:28:ce:b6:82:b5:
                    f2:e3:49:bd:4d:82:ce:8a:66:77:77:c1:ba:c3:76:
                    59:ec:cc:5e:7a:3a:02:ae:ee:f6:87:55:73:22:03:
                    07:a0:e9:b6:0c:f0:ea:0e:ff:8e:01:00:99:bf:c9:
                    dd:fb:da:e4:74:42:04:7d:66:4b:5d:7a:a6:01:aa:
                    bf:a1:8a:de:6b:cc:8b:9b:98:7d:88:6d:cc:e4:21:
                    df:10:7a:6b:ca:91:d7:d3:63:50:42:47:e8:dd:4a:
                    18:d4:83:33:78:7d:f7:29:3c:3b:27:59:19:0f:93:
                    2b:d6:d4:9f:29:43:f8:f8:68:7e:ed:83:47:61:fd:
                    92:ff:7b:a2:ba:ed:bf:a0:03:18:e4:b3:62:e3:f7:
                    b0:2c:a8:4a:b6:e8:9c:33:88:75:2f:7b:ae:a4:ef:
                    e8:c4:d3:54:f0:9b:18:c7:d8:a7:45:8f:aa:fb:27:
                    ff:fb:da:38:34:7d:01:5c:f4:1b:ef:97:74:0f:4a:
                    30:49:e4:95:17:34:4c:1c:2b:c0:82:da:ac:2c:56:
                    00:b6:ca:a4:b0:48:8f:98:86:c4:69:d2:58:69:03:
                    17:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8C:65:BA:EB:18:21:05:21:3B:5B:2B:3D:D2:C3:DB:D5:9A:A0:EE
            X509v3 Authority Key Identifier:
                keyid:4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/f0d1f6da3b8d89ca8d362ae84c6add0bfebeeb9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/0306af81c270a60bd7a6b440bc97d420322ebcb5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:1e:92:f9:75:14:88:ee:b9:d4:5a:47:38:3d:40:39:40:ea:
         9d:05:53:b2:e0:a6:b5:fc:23:1e:d5:24:2f:5e:25:23:96:3f:
         ce:e9:90:02:aa:cb:2a:ee:be:bb:b7:fe:c0:1f:99:4c:5c:97:
         41:4a:cb:a3:c1:f0:dc:f9:8d:4d:98:12:46:9c:a3:b3:15:21:
         91:34:4f:10:6e:3f:8b:29:78:68:d3:30:74:6f:56:82:27:90:
         21:c2:8b:10:6e:80:20:33:76:2f:8f:48:9e:96:00:62:2c:a3:
         eb:22:f1:ed:71:53:f3:f8:be:fa:21:dd:2c:a1:8e:b3:d9:5c:
         99:0c:39:05:1e:9a:86:4f:7f:bd:72:9f:6f:3f:80:e7:6f:92:
         de:df:1e:da:64:bb:cd:c8:93:c9:e9:1d:7d:7f:b2:e7:47:fc:
         75:69:60:48:68:3a:17:7f:82:c7:42:f5:32:c7:4e:7f:2a:4e:
         62:d6:39:6a:56:d9:60:2d:07:2b:a2:5d:1b:8e:0b:5c:87:1a:
         34:92:3f:77:00:8d:d1:83:b4:12:0b:50:99:a9:a2:7a:c4:40:
         c7:58:98:8a:03:ab:ac:68:12:66:7a:5b:a1:b6:b4:9b:32:ef:
         09:a7:f3:ef:9f:ed:f9:5f:46:14:fd:57:fd:92:2e:52:40:d3:
         03:22:32:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----