Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b63a8af6-9fd2-47cd-bcc8-fef826e9c722/cda7196b484f1b68b4a33627945b17c524f49c5d.roa
File:                     cda7196b484f1b68b4a33627945b17c524f49c5d.roa (raw, json)
Hash identifier:          A0OPDoDgYCsUHkWXzIAM7BT5/ptAJhDg1YVI876pZmM=
Subject key identifier:   67:1A:CC:90:62:33:A5:10:E7:3F:E9:03:BF:9D:4C:13:5E:D8:D9:4B
Certificate issuer:       /CN=d380f261f4e23159ca264d740602eeef80a350a5
Certificate serial:       0AB7
Authority key identifier: 70:54:53:74:8F:CE:20:C5:2C:BB:28:F4:AE:89:87:C3:4F:C8:D5:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d380f261f4e23159ca264d740602eeef80a350a5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b63a8af6-9fd2-47cd-bcc8-fef826e9c722/cda7196b484f1b68b4a33627945b17c524f49c5d.roa
Signing time:             Sat 08 Oct 2022 01:51:14 +0000
ROA not before:           Thu 06 Oct 2022 13:37:24 +0000
ROA not after:            Sun 06 Oct 2024 13:37:24 +0000
asID:                     263737
IP address blocks:        138.59.140.0/22 maxlen: 24
                          2803:df80::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2743 (0xab7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d380f261f4e23159ca264d740602eeef80a350a5
        Validity
            Not Before: Oct  6 13:37:24 2022 GMT
            Not After : Oct  6 13:37:24 2024 GMT
        Subject: CN=cda7196b484f1b68b4a33627945b17c524f49c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:df:a8:5e:7f:e9:b0:95:5b:0c:41:c2:f8:74:
                    1c:19:d6:93:50:db:96:86:b0:d9:ae:66:d2:78:c5:
                    fc:c4:4a:ea:68:be:10:5b:b7:0c:cf:d1:a0:c4:17:
                    f5:45:bb:de:f9:59:dd:cf:ac:64:7b:81:da:6b:d4:
                    2f:e0:53:d8:55:a3:27:8f:4f:5e:38:12:b1:20:e5:
                    69:c4:a1:ce:60:79:20:10:e8:46:4e:de:43:cd:c2:
                    70:b2:6c:d9:ad:92:b1:00:7e:05:1f:66:f2:73:d1:
                    bd:f8:67:a9:54:39:93:62:aa:91:50:3a:e4:67:65:
                    cf:0b:47:b2:eb:13:80:f7:c5:e9:1a:90:ed:4b:4b:
                    f7:65:c8:f9:a4:9b:da:6a:d9:81:81:5e:0b:b4:c9:
                    be:16:53:ab:09:e7:d4:b0:e0:52:7e:34:6d:e3:19:
                    a5:6e:3d:f4:7a:fd:d1:9d:f8:cb:10:a0:86:ac:2d:
                    47:18:14:35:1b:15:2d:d8:5c:d7:4a:40:5c:24:ae:
                    00:49:58:c3:37:6b:7f:3d:6b:23:d0:83:18:0f:f1:
                    1a:34:29:04:c4:86:4d:ea:fb:38:be:30:93:23:68:
                    f8:91:60:58:31:6d:38:87:26:b4:c2:d1:3d:60:1e:
                    c2:10:cb:48:9a:9d:4b:06:bb:06:77:d6:d5:51:ca:
                    22:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1A:CC:90:62:33:A5:10:E7:3F:E9:03:BF:9D:4C:13:5E:D8:D9:4B
            X509v3 Authority Key Identifier:
                keyid:70:54:53:74:8F:CE:20:C5:2C:BB:28:F4:AE:89:87:C3:4F:C8:D5:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d380f261f4e23159ca264d740602eeef80a350a5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b63a8af6-9fd2-47cd-bcc8-fef826e9c722/cda7196b484f1b68b4a33627945b17c524f49c5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b63a8af6-9fd2-47cd-bcc8-fef826e9c722/d380f261f4e23159ca264d740602eeef80a350a5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.140.0/22
                IPv6:
                  2803:df80::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:e7:4f:45:5b:0c:15:fb:f1:be:1c:41:cf:ea:2a:b3:c7:b7:
         14:5d:52:0e:02:56:e0:42:84:c0:e0:89:4b:5a:ca:12:86:aa:
         6a:11:d5:a2:96:e9:3e:9b:47:3f:6f:db:af:98:25:fb:9e:2f:
         33:b9:c7:c4:27:13:25:10:02:4c:39:33:d1:0a:b2:eb:0a:1e:
         d5:60:34:ef:4e:63:5d:dc:eb:4c:fd:0f:e5:a5:81:6c:f7:ef:
         9d:6a:18:83:a2:43:66:41:d6:e2:e5:d5:83:45:24:1b:30:c2:
         dd:f0:47:9a:92:b7:bc:61:68:56:b8:b5:99:d0:a1:88:38:93:
         8d:40:82:5e:d6:e9:17:18:db:89:e9:7b:19:b5:e7:90:0d:93:
         8f:73:e2:76:73:34:c0:8c:3f:b0:3f:d2:ce:bb:00:fd:73:a8:
         21:71:e0:ed:23:5f:24:50:2b:15:df:f7:d0:7b:5d:fa:e4:76:
         e2:92:a6:e6:37:9a:49:17:43:0b:c7:3a:b9:94:74:d6:52:1c:
         a1:b4:ae:9c:19:fb:01:c5:d9:d5:aa:ca:1e:dc:e3:e0:99:89:
         6b:cb:e5:43:9c:5c:38:b5:9b:53:59:04:fb:7a:fd:f1:1a:a1:
         4f:9c:90:b0:d8:8c:aa:14:d2:51:e9:86:87:dd:28:1c:7c:a9:
         de:13:69:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----