Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/fbbc76b16ce1efe4b19de02c01b918dd643077ca.roa
File:                     fbbc76b16ce1efe4b19de02c01b918dd643077ca.roa (raw, json)
Hash identifier:          ctRwh+YRZu1NGTvka1a2jRRrtGl2WSmZt21TMkFuH78=
Subject key identifier:   03:CB:56:1A:39:A8:33:EC:D2:0B:5F:33:54:B2:53:0D:6C:60:7F:4F
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       1BC13E
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/fbbc76b16ce1efe4b19de02c01b918dd643077ca.roa
Signing time:             Mon 26 Sep 2022 19:29:59 +0000
ROA not before:           Mon 26 Sep 2022 19:25:22 +0000
ROA not after:            Thu 26 Sep 2024 19:25:22 +0000
asID:                     3816
IP address blocks:        161.10.0.0/20 maxlen: 20
                          161.10.16.0/20 maxlen: 20
                          161.10.32.0/20 maxlen: 20
                          161.10.48.0/20 maxlen: 20
                          161.10.64.0/22 maxlen: 22
                          161.10.80.0/20 maxlen: 20
                          161.10.96.0/19 maxlen: 19
                          161.10.128.0/19 maxlen: 19
                          161.10.160.0/19 maxlen: 19
                          161.10.192.0/19 maxlen: 19
                          161.10.224.0/22 maxlen: 22
                          161.10.228.0/22 maxlen: 22
                          161.10.232.0/22 maxlen: 22
                          161.10.236.0/22 maxlen: 22
                          161.10.240.0/22 maxlen: 22
                          161.10.244.0/22 maxlen: 22
                          161.10.248.0/22 maxlen: 22
                          161.10.252.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1818942 (0x1bc13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Sep 26 19:25:22 2022 GMT
            Not After : Sep 26 19:25:22 2024 GMT
        Subject: CN=fbbc76b16ce1efe4b19de02c01b918dd643077ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:34:41:ad:90:70:5c:20:7b:2b:c8:99:4d:29:
                    69:df:1c:d3:3a:e9:e5:43:b1:9b:46:f5:c7:e3:06:
                    e2:45:18:75:8e:cd:4e:06:dd:2d:5a:32:01:90:f5:
                    04:fd:a7:a2:bc:33:ee:2e:b1:58:6a:79:ee:f9:50:
                    4c:d5:59:48:2f:a2:7a:2d:b2:0b:f2:1c:aa:1b:31:
                    76:4f:06:da:83:ee:f0:b7:64:a1:d5:da:25:ff:d3:
                    6e:3f:01:3d:83:fd:ec:97:7b:44:92:0f:f7:50:58:
                    e4:00:32:6d:0f:ab:7f:d7:72:30:ae:69:6a:9d:45:
                    bb:aa:4c:d3:66:6c:34:5a:3f:34:ea:7b:d4:bd:93:
                    74:1a:32:2d:a4:00:11:54:c8:a3:58:31:c3:7c:7a:
                    68:4f:39:f3:2a:e7:5c:0f:5f:98:b8:e2:50:0c:77:
                    7b:74:84:72:49:5b:e6:ed:c6:95:4a:86:78:f4:ea:
                    42:40:27:4a:aa:95:a0:db:91:12:cb:a6:ea:ad:b5:
                    50:f5:ae:5a:59:9a:c9:8d:d1:95:c1:f3:6a:d0:6a:
                    bb:25:40:e1:03:c8:6b:9d:76:7a:04:ac:bc:ae:ca:
                    60:00:31:e0:a9:17:e7:07:14:5b:18:2b:be:c7:85:
                    e5:8f:3c:cb:ad:82:f0:07:30:df:c6:a8:e6:ea:12:
                    bd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CB:56:1A:39:A8:33:EC:D2:0B:5F:33:54:B2:53:0D:6C:60:7F:4F
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/fbbc76b16ce1efe4b19de02c01b918dd643077ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.10.0.0-161.10.67.255
                  161.10.80.0-161.10.255.255

    Signature Algorithm: sha256WithRSAEncryption
         4d:85:43:55:f9:51:63:3a:bd:00:57:8f:14:79:d5:c5:b9:80:
         c8:99:32:40:70:e4:91:0e:ad:ed:9f:b4:86:7b:4c:e7:09:0c:
         70:93:9d:47:c5:c8:7f:4e:b5:ac:3a:54:5c:3e:8b:5a:54:96:
         4d:fc:81:07:c9:3a:cc:a0:fd:ae:cd:14:59:3e:2a:66:90:de:
         d0:71:a1:ca:59:11:fe:53:33:be:cd:39:f2:ae:45:0a:fd:76:
         8b:87:ba:21:d4:bf:14:b5:70:84:45:c2:1b:9d:db:85:ac:d0:
         9a:ed:9e:a8:4e:00:82:da:8c:3e:ec:d5:3e:08:0d:36:d7:49:
         e9:33:2a:94:8d:6e:cb:54:05:1f:c2:29:0c:58:ee:06:38:dd:
         b4:82:35:0a:30:fe:db:c7:d2:89:0d:f9:5f:7a:45:09:6e:f8:
         bb:2e:74:c7:8d:7c:91:31:75:7e:0a:a0:d6:11:17:92:66:ed:
         e2:7c:55:41:39:dd:64:14:61:91:fa:a9:00:9b:a4:f7:72:1f:
         76:78:26:47:9a:9c:db:6d:e3:9d:9f:dd:e4:88:d5:f7:87:fd:
         30:e7:de:7b:73:68:df:f0:44:bd:51:3f:82:2c:96:d9:1b:8e:
         7a:39:fe:4f:6d:d4:18:79:52:1c:29:5b:69:7f:9d:c0:6b:74:
         ed:fb:fb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----