Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/a57cd23b841208d5537d33f177c11e2f6b76cef6.roa
File:                     a57cd23b841208d5537d33f177c11e2f6b76cef6.roa (raw, json)
Hash identifier:          /LOf5FEuUIHNsOlqIm8+VvJvloZaJwWWOI6Qw2uJuvk=
Subject key identifier:   81:71:C1:F7:E0:C0:B1:AE:D0:81:60:D3:6E:1E:FB:4F:9A:84:3B:87
Certificate issuer:       /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial:       0BFDAE
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/a57cd23b841208d5537d33f177c11e2f6b76cef6.roa
Signing time:             Sat 30 Apr 2022 15:18:57 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     267789
IP address blocks:        161.22.39.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785838 (0xbfdae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=a57cd23b841208d5537d33f177c11e2f6b76cef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:23:15:77:a1:ba:e0:5b:e6:55:9e:01:a8:24:
                    60:e4:b0:ce:d8:ee:c8:01:13:02:4d:7d:2e:44:ab:
                    78:a1:e9:6d:06:85:7a:15:fa:92:be:5f:b0:48:50:
                    95:a6:2f:99:58:1d:8b:e1:7b:24:eb:14:53:b8:6e:
                    65:f8:30:11:7a:9c:b3:ed:29:a3:4a:3d:b4:27:18:
                    77:71:9a:92:06:c9:5c:12:88:48:62:79:bd:f9:71:
                    11:6b:1b:a6:9d:9e:17:9d:77:7c:eb:67:f5:5b:53:
                    50:98:1f:fc:b5:c1:6b:d1:68:45:a0:de:63:40:f9:
                    5e:bb:09:5d:0c:69:84:43:eb:6c:40:25:08:59:64:
                    20:29:cf:3e:ba:78:b9:73:e3:f2:54:a6:b7:a5:4c:
                    27:33:2d:f3:43:b7:ed:90:39:77:98:b3:4e:29:af:
                    df:7b:c9:17:74:f1:d3:6c:7e:b1:2f:44:3c:0b:48:
                    67:08:7e:e4:4b:59:cd:08:28:18:a4:1c:9a:28:81:
                    b0:d1:3b:ea:02:f4:8c:ed:7b:22:2c:59:65:cc:db:
                    a2:c6:c1:3a:1f:c0:72:aa:59:e7:73:1e:e7:90:44:
                    e1:ac:99:3f:ca:9c:a7:a3:35:70:67:48:2c:5c:bf:
                    31:92:67:44:b5:aa:9c:51:ca:f4:ee:8f:46:b4:fd:
                    90:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:71:C1:F7:E0:C0:B1:AE:D0:81:60:D3:6E:1E:FB:4F:9A:84:3B:87
            X509v3 Authority Key Identifier:
                keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/a57cd23b841208d5537d33f177c11e2f6b76cef6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:18:c2:91:d9:4e:f7:04:4c:1a:e0:62:b0:48:40:e0:bf:11:
         71:5c:a8:fc:de:9d:d0:a2:2b:37:bb:5f:91:b0:23:88:ef:49:
         f2:25:53:61:b7:a3:ba:57:da:7b:f0:b6:bb:68:0d:45:f4:58:
         0d:eb:e6:bb:2a:a2:d9:8f:2f:6a:a8:53:55:ac:c1:82:81:77:
         a3:26:a4:42:a2:77:8c:de:4a:ee:e0:57:4f:4d:a7:1c:ff:cb:
         a1:d9:c1:84:ff:5c:13:27:8d:37:3e:f5:a4:be:28:28:bd:7a:
         2c:a6:fc:19:3a:41:4c:b3:0b:a7:a4:97:62:16:86:c8:19:01:
         a3:a6:bb:50:c4:8a:0b:69:0f:ac:b7:bc:e6:c4:a9:45:28:31:
         af:e8:c2:68:bc:f0:20:d5:76:1e:4c:85:da:31:05:04:ae:73:
         6f:fa:ab:c3:cc:fa:f4:22:89:15:06:36:a5:62:2f:ec:d4:fe:
         c7:31:47:0d:84:89:a0:fe:58:e9:04:79:73:62:38:f5:d5:9f:
         89:3a:2d:41:35:e0:f3:5b:5d:85:38:27:0c:2f:55:a2:bb:3d:
         c5:b6:43:50:db:76:74:eb:16:34:12:a5:98:e5:c8:00:20:c9:
         99:20:2e:a1:8a:ad:78:87:5b:62:aa:9d:f7:43:3e:6f:1e:12:
         ff:07:35:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----