Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/3e782d666db8ad741f1b3caa8821b5ea469b2b0c.roa
File:                     3e782d666db8ad741f1b3caa8821b5ea469b2b0c.roa (raw, json)
Hash identifier:          l4rOiesfizQj6q38uo84miqtlmwIxrw6vBF5fYd5siM=
Subject key identifier:   B8:1E:5B:85:C5:33:AE:69:DA:6F:4B:24:98:02:CC:05:4E:78:49:37
Certificate issuer:       /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial:       0DD14C
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/3e782d666db8ad741f1b3caa8821b5ea469b2b0c.roa
Signing time:             Mon 18 Jul 2022 15:15:24 +0000
ROA not before:           Mon 27 Dec 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     270026
IP address blocks:        161.22.36.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905548 (0xdd14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
        Validity
            Not Before: Dec 27 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=3e782d666db8ad741f1b3caa8821b5ea469b2b0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2c:70:1a:b7:c3:35:95:29:82:b0:bc:c1:a2:
                    0b:d5:86:b4:8b:6c:e4:26:e0:b8:48:12:fc:df:66:
                    21:96:0f:4e:ac:6a:34:2b:24:f5:b5:36:44:55:c6:
                    87:9e:6e:25:e2:ea:c0:5e:88:f1:a0:c7:97:d1:98:
                    c9:61:b5:82:09:f5:21:bc:b5:c2:58:5a:bd:17:9a:
                    a9:c3:cf:b4:0e:f2:6f:9d:12:22:96:52:4a:ca:06:
                    43:9f:6d:77:41:a5:2d:59:af:d3:ec:c4:3c:6f:45:
                    1e:c5:8b:1e:cd:bc:8a:8a:54:fd:8c:62:aa:df:f9:
                    0a:72:53:15:3f:c2:31:77:1b:57:30:f4:7e:42:00:
                    98:d8:ed:1d:ed:42:e0:71:65:b7:a0:b1:05:58:11:
                    f8:af:8f:ea:bc:e4:dc:37:87:85:b8:c2:58:d0:f9:
                    d2:3f:d3:84:42:0a:1e:35:ff:1d:36:8f:f9:0f:a8:
                    46:d0:84:0b:80:d2:4b:6d:5f:a1:a4:43:c3:e1:91:
                    48:a7:d8:c2:29:6c:f1:4c:4f:5c:e2:d1:00:48:4e:
                    3a:7a:de:ad:7f:98:ba:36:da:33:45:01:59:02:5c:
                    71:52:7d:4d:7b:da:a0:a8:60:4a:ab:0c:6f:1c:a7:
                    55:06:f0:ce:0b:94:32:e8:ea:78:df:4a:af:c8:ce:
                    fc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1E:5B:85:C5:33:AE:69:DA:6F:4B:24:98:02:CC:05:4E:78:49:37
            X509v3 Authority Key Identifier:
                keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/3e782d666db8ad741f1b3caa8821b5ea469b2b0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:7f:67:51:39:75:69:a2:8c:12:87:1b:bb:d1:8f:79:5c:73:
         10:f9:f6:ec:6a:bf:6b:a9:7e:d7:dd:72:65:2d:e4:42:f3:be:
         52:21:a7:35:c0:72:61:d6:de:7c:95:19:e5:cb:a5:29:53:c5:
         91:c7:83:7b:3a:3b:10:83:c8:16:00:64:af:9b:c1:b6:21:1d:
         ad:ac:91:d9:e7:12:12:25:58:26:0c:26:4a:88:f4:73:87:27:
         07:4e:f4:63:66:66:4d:0b:a3:f2:ce:40:ed:05:c8:8f:0b:05:
         b2:19:ba:3e:7d:92:bf:df:71:b5:fa:c0:7c:03:da:88:de:27:
         9e:80:50:b1:88:74:01:d5:ba:28:bc:4d:dd:00:39:b0:82:c1:
         16:65:6d:a0:62:cc:38:ff:25:48:fe:d0:d0:ad:86:47:90:4b:
         f8:dc:e9:0e:b0:2c:e0:d2:69:74:4c:f1:c2:5c:83:c7:0a:e9:
         77:07:4a:0f:a9:85:f1:a4:c3:ef:36:e9:b0:99:02:ef:48:9e:
         a5:b7:12:94:8b:b3:6b:a3:3b:68:72:f5:63:02:97:de:f2:61:
         15:d7:81:56:be:15:e0:bd:56:fd:05:dc:63:92:84:1a:c8:3d:
         44:42:f7:56:51:66:50:11:2a:cb:0a:9a:d8:0e:b4:77:9a:5b:
         03:42:ab:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----