Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b68a10c-54a0-424e-88c9-e0e7e85e5c5c/2872a73756f67ea07566a7d02cd0b7ae754cbf62.roa
File:                     2872a73756f67ea07566a7d02cd0b7ae754cbf62.roa (raw, json)
Hash identifier:          eRBjEaqped07ran5StFI1dgsB0M52D7qmO/5jjWjcdE=
Subject key identifier:   14:DB:4F:10:13:DF:8D:75:0E:3D:88:20:92:AB:0F:ED:5D:C8:1A:5B
Certificate issuer:       /CN=3e089b1672b85d5b6e072fa49ac9aa7681ce1d2c
Certificate serial:       18C507
Authority key identifier: C0:DF:BE:F2:49:D4:28:4F:A2:22:65:25:74:CA:A9:6B:98:D1:BD:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3e089b1672b85d5b6e072fa49ac9aa7681ce1d2c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b68a10c-54a0-424e-88c9-e0e7e85e5c5c/2872a73756f67ea07566a7d02cd0b7ae754cbf62.roa
Signing time:             Sat 18 Jun 2022 00:07:41 +0000
ROA not before:           Fri 17 Jun 2022 03:00:00 +0000
ROA not after:            Mon 17 Jun 2024 03:00:00 +0000
asID:                     265633
IP address blocks:        170.244.52.0/22 maxlen: 24
                          2803:5ac0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1623303 (0x18c507)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e089b1672b85d5b6e072fa49ac9aa7681ce1d2c
        Validity
            Not Before: Jun 17 03:00:00 2022 GMT
            Not After : Jun 17 03:00:00 2024 GMT
        Subject: CN=2872a73756f67ea07566a7d02cd0b7ae754cbf62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c5:99:54:f5:93:8b:eb:c0:14:63:e7:53:03:
                    13:4b:ae:49:cf:bd:d0:ce:e7:9d:97:ad:ff:d9:4b:
                    ab:b3:df:f9:82:76:1c:c5:7a:9a:a4:7a:da:22:26:
                    f7:e4:2e:32:de:46:29:f6:5c:d4:4e:e2:83:83:d4:
                    0e:3c:57:d4:f1:48:de:20:b7:a8:26:ae:b8:b9:84:
                    a7:27:5d:3c:48:49:1b:99:67:91:a5:23:3f:5d:f9:
                    0d:91:15:b6:ca:40:c2:ae:95:67:e9:db:d0:82:30:
                    ce:02:a5:66:5c:0e:23:d6:2b:27:20:ac:c1:37:1a:
                    8d:86:e2:31:87:0e:b4:34:20:1f:ff:18:f8:b1:56:
                    4d:44:71:47:5d:1f:cb:b8:ed:34:ec:3c:27:46:bb:
                    ab:be:68:a6:65:2f:93:86:95:9a:82:e3:4d:f2:fc:
                    23:61:57:7d:3a:43:d9:43:5d:5c:7c:91:f8:90:20:
                    e0:04:b5:b8:86:b1:0b:2d:ad:61:02:43:e3:f1:0b:
                    32:49:67:50:4d:a4:ee:b3:3b:3c:24:44:58:86:1d:
                    95:76:a1:76:e9:2b:4d:f7:64:a4:b9:51:07:75:aa:
                    89:0b:86:9f:ab:6a:0a:4e:cb:b4:47:37:e4:49:08:
                    a7:60:52:c4:c0:f0:0a:19:9a:2c:c3:70:85:90:d4:
                    fe:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DB:4F:10:13:DF:8D:75:0E:3D:88:20:92:AB:0F:ED:5D:C8:1A:5B
            X509v3 Authority Key Identifier:
                keyid:C0:DF:BE:F2:49:D4:28:4F:A2:22:65:25:74:CA:A9:6B:98:D1:BD:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3e089b1672b85d5b6e072fa49ac9aa7681ce1d2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b68a10c-54a0-424e-88c9-e0e7e85e5c5c/2872a73756f67ea07566a7d02cd0b7ae754cbf62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b68a10c-54a0-424e-88c9-e0e7e85e5c5c/3e089b1672b85d5b6e072fa49ac9aa7681ce1d2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.52.0/22
                IPv6:
                  2803:5ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:96:04:6d:93:fd:a2:12:f9:a9:6e:f5:44:80:c8:cf:8a:b9:
         86:d5:42:94:56:c1:db:5b:89:3f:9e:65:6d:fa:d8:87:56:56:
         2a:e8:78:8b:93:a0:55:03:96:44:21:34:1c:3c:e5:24:7a:75:
         73:1d:c7:c4:3f:b2:db:95:c1:34:07:ab:0b:41:ff:88:77:41:
         83:e4:8a:6f:98:15:68:f5:c1:45:d8:4e:86:44:c3:8d:01:ed:
         e5:5b:5c:74:42:d3:2e:dc:db:32:84:2c:bd:37:d4:b9:e8:80:
         6f:f5:30:18:0c:2e:ac:e2:98:d1:d5:5f:23:c6:ac:e4:5d:ab:
         c5:1c:4d:40:40:10:38:c7:7e:48:a1:1e:4b:d5:35:14:78:e1:
         8b:86:11:c3:e7:0d:65:d0:4c:53:22:e2:74:20:2b:ab:15:3f:
         1d:b6:98:f0:75:df:0c:c7:23:1e:ff:b3:7c:f5:b2:d7:4b:95:
         2b:86:93:f6:08:dc:95:65:22:5f:db:6c:66:e2:c7:29:e2:c5:
         e7:79:84:0b:96:2b:bc:18:6a:5a:42:23:ba:01:a2:cc:1f:a8:
         9c:60:02:e7:81:0f:8d:85:7c:ba:65:32:fc:32:70:f8:c3:ac:
         38:2e:d9:0e:40:41:96:8c:86:c2:f4:b0:d1:28:26:f6:5c:f4:
         c8:6d:1e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----