Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/30058409ce5f8f7fef689aecc09c3d2c9b582292.roa
File:                     30058409ce5f8f7fef689aecc09c3d2c9b582292.roa (raw, json)
Hash identifier:          chBUYuOyUQuzoH330Ggvuv1vNG7/ddsViSNdP5Vvq10=
Subject key identifier:   03:C9:FA:98:19:C4:A0:6A:94:6C:54:3B:69:C1:D5:52:72:72:B9:9A
Certificate issuer:       /CN=2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c
Certificate serial:       16B636
Authority key identifier: E2:B1:80:8C:7C:7A:FF:C0:8C:31:F3:E7:43:94:C5:AC:89:04:A6:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/30058409ce5f8f7fef689aecc09c3d2c9b582292.roa
Signing time:             Mon 06 Jun 2022 20:19:57 +0000
ROA not before:           Mon 06 Jun 2022 03:00:00 +0000
ROA not after:            Thu 06 Jun 2024 03:00:00 +0000
asID:                     52376
IP address blocks:        170.244.56.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1488438 (0x16b636)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c
        Validity
            Not Before: Jun  6 03:00:00 2022 GMT
            Not After : Jun  6 03:00:00 2024 GMT
        Subject: CN=30058409ce5f8f7fef689aecc09c3d2c9b582292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e5:96:0e:3e:64:04:d8:87:cf:c2:ae:c8:b2:
                    cb:c7:c2:b6:fa:46:c3:59:5e:b9:2b:6f:36:e3:20:
                    4e:1a:4b:92:c0:46:01:7d:3a:b5:1f:9e:49:9d:c6:
                    8e:dd:ff:3f:ae:c8:6e:ff:31:96:aa:b4:6c:19:66:
                    a9:9d:25:e8:41:44:b6:b7:3e:fa:95:ad:c0:09:4f:
                    8c:db:6f:25:ec:4c:97:ae:e4:9d:e5:cb:27:fa:6b:
                    d5:8e:de:89:35:a9:56:a5:92:14:52:0c:8a:3b:85:
                    b6:17:e3:4a:45:08:bf:fe:81:31:68:73:9a:ad:3d:
                    3b:75:7a:e1:d5:21:ec:31:2e:c6:0e:cb:55:a7:3c:
                    70:ff:47:14:df:de:c3:4e:01:cd:0e:d5:c9:32:d2:
                    d2:9f:08:24:5a:20:87:7d:1c:d3:83:f0:12:0b:ce:
                    60:71:58:08:a6:8f:47:9f:66:b7:5e:6a:41:ed:ce:
                    99:c1:53:e2:47:1b:52:cd:02:40:3d:43:35:27:e6:
                    79:d8:e4:00:a5:5a:0a:ce:80:98:2b:09:0b:a8:dc:
                    80:5f:06:f5:a3:df:fe:e5:6b:34:d0:91:82:f4:c6:
                    22:38:a7:79:72:94:55:41:df:52:42:13:c6:5f:53:
                    48:6e:d7:c3:51:0f:45:b3:8e:fa:12:56:32:cb:e8:
                    94:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C9:FA:98:19:C4:A0:6A:94:6C:54:3B:69:C1:D5:52:72:72:B9:9A
            X509v3 Authority Key Identifier:
                keyid:E2:B1:80:8C:7C:7A:FF:C0:8C:31:F3:E7:43:94:C5:AC:89:04:A6:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/30058409ce5f8f7fef689aecc09c3d2c9b582292.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:11:d8:b1:37:51:f1:c5:ba:e1:42:3d:1e:c2:37:16:12:38:
         5b:b0:f0:02:ec:c6:89:84:01:d7:18:da:3e:66:1d:ae:c2:f8:
         26:72:45:a2:4c:9d:61:05:92:00:5f:52:55:de:41:ba:66:d9:
         c2:2e:18:d3:bd:1d:49:72:76:5e:14:05:9c:7b:1c:3e:e8:d5:
         92:21:0f:55:b0:a6:05:13:17:42:c5:ab:26:65:e1:22:c8:73:
         19:3c:15:3d:cf:c0:32:9f:7c:1b:ef:10:97:aa:6e:78:62:d5:
         a1:00:cd:71:0f:f7:5d:20:be:28:e9:4d:b6:3b:9b:0e:8a:68:
         08:3b:31:93:cc:1e:34:1d:e0:27:b9:ad:fa:3e:e6:45:bc:ff:
         ff:45:3c:11:e8:3a:f4:f6:a2:69:8f:3e:d5:24:82:cb:39:eb:
         c2:c7:09:60:7d:18:83:37:e7:da:9d:37:9f:89:82:01:fe:9c:
         6f:63:db:47:22:e3:b1:89:ff:8c:a5:d9:f8:ad:97:a6:28:29:
         8f:e7:55:59:40:37:fd:3b:b4:4a:2d:e2:90:40:fc:5f:02:f5:
         9b:b9:22:9d:83:4d:f2:ee:39:8c:d9:d6:48:f4:d8:27:a9:17:
         c9:4c:c8:28:75:a2:bf:34:39:0f:a3:f0:3a:97:9f:cf:be:3e:
         5f:70:8b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----