Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/22f062b842f4d7a2988462cbf6460a9cdef42262.roa
File:                     22f062b842f4d7a2988462cbf6460a9cdef42262.roa (raw, json)
Hash identifier:          dabIfpp+eooOQtM4C3RGEoSM5FJNhpcbHkZh54ZjTRw=
Subject key identifier:   00:CC:9C:80:E8:55:63:1B:3F:06:C7:90:D6:9B:26:1B:8F:C1:D0:D4
Certificate issuer:       /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial:       1F458C
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/22f062b842f4d7a2988462cbf6460a9cdef42262.roa
Signing time:             Sun 09 Apr 2023 01:47:26 +0000
ROA not before:           Sun 23 Oct 2022 19:12:17 +0000
ROA not after:            Sat 26 Oct 2024 19:12:17 +0000
asID:                     269918
IP address blocks:        131.72.168.0/22 maxlen: 24
                          2803:dd80::/32 maxlen: 128

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2049420 (0x1f458c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
        Validity
            Not Before: Oct 23 19:12:17 2022 GMT
            Not After : Oct 26 19:12:17 2024 GMT
        Subject: CN=22f062b842f4d7a2988462cbf6460a9cdef42262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:85:4a:ad:bc:8b:56:a7:b9:4b:b5:f8:c0:97:
                    38:06:07:f1:17:bd:9a:b8:07:ad:ba:a5:84:11:35:
                    4b:3a:37:34:05:b2:4e:34:fa:38:fc:d5:02:ef:05:
                    35:f2:4e:f5:41:6f:05:e1:2d:7d:9e:0d:2a:83:e1:
                    ff:16:b0:a3:60:9d:d8:95:d9:98:2c:ef:27:e7:94:
                    1f:75:21:c6:70:e8:ff:a8:ac:11:78:08:8f:91:92:
                    dc:f3:58:37:3b:41:72:9c:c1:33:8b:8e:35:ee:d4:
                    b7:5f:9e:58:61:17:5e:a7:ef:53:4a:0a:5e:49:af:
                    dc:dd:0f:f0:14:26:2a:f5:6c:c0:21:71:5c:73:54:
                    9f:a4:42:d3:9b:a2:19:c0:2a:68:06:32:c5:50:64:
                    b4:a3:90:fb:f5:63:64:07:82:f2:36:c9:e2:27:33:
                    be:a0:2a:78:2c:74:ca:ad:a3:a5:e6:16:29:31:4c:
                    80:a6:8b:ee:d1:70:b9:35:36:b7:45:aa:87:39:48:
                    2c:a4:f5:29:05:95:47:07:73:4e:d5:6a:32:0a:cb:
                    95:05:77:b4:d9:c7:82:89:12:70:b1:03:82:2b:1a:
                    25:96:76:0d:89:f9:36:5e:42:d1:bf:9e:ff:37:31:
                    bf:1c:47:e1:f8:54:87:76:db:5e:c5:b4:7c:51:e2:
                    b0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CC:9C:80:E8:55:63:1B:3F:06:C7:90:D6:9B:26:1B:8F:C1:D0:D4
            X509v3 Authority Key Identifier:
                keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/22f062b842f4d7a2988462cbf6460a9cdef42262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.168.0/22
                IPv6:
                  2803:dd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:1c:8d:47:b5:ab:70:32:de:12:98:8a:75:75:e7:7a:2d:7e:
         19:c1:1a:72:9f:49:ed:32:8a:99:f2:8e:4b:3e:7a:15:28:6b:
         53:a1:34:c2:3a:ba:91:69:83:11:64:5f:e9:97:50:f1:17:2f:
         f6:0f:71:8f:96:cd:ae:95:87:69:3f:56:fb:a5:29:5e:8e:9b:
         c3:88:03:3f:d2:00:f2:03:54:0e:fd:95:53:e9:82:dd:da:52:
         53:10:88:ea:d0:9d:0a:3f:77:2e:9f:0f:10:f3:27:90:dd:17:
         31:5c:c0:71:84:10:07:e3:0e:f4:27:b9:e8:1c:b8:2b:f0:d7:
         38:0d:ed:70:6a:c1:42:9b:83:c7:83:54:ed:c0:1e:77:1c:c4:
         42:6f:03:5d:9a:df:c6:df:70:6a:8d:ed:15:bf:5c:84:1e:53:
         51:2a:11:25:42:e7:c3:8a:af:48:b7:66:ea:ef:a3:61:2f:42:
         24:8b:93:ff:09:6c:5a:96:d4:6b:01:b0:07:6b:c9:82:60:fe:
         89:b5:5f:79:d0:14:cf:18:3c:df:59:0b:05:88:bb:0d:ba:b5:
         8a:d4:cf:a7:1b:a5:d4:1c:a2:15:bd:5d:8b:d9:c6:ab:65:b1:
         0e:b1:ac:47:46:a9:4f:23:8e:51:24:69:68:4e:62:ed:b4:15:
         42:41:b1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----