Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/19562ebf3ed2f44ea567decbe92611a74f5ad721.roa
File:                     19562ebf3ed2f44ea567decbe92611a74f5ad721.roa (raw, json)
Hash identifier:          ulVdJD96fkvnC4NR8eJMYOzu2o6McC9xkfdyCv6khKg=
Subject key identifier:   0D:78:A8:6E:59:DF:13:11:93:B9:4D:F2:A7:C2:9D:48:37:32:89:45
Certificate issuer:       /CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Certificate serial:       145521
Authority key identifier: D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/19562ebf3ed2f44ea567decbe92611a74f5ad721.roa
Signing time:             Thu 31 Aug 2023 08:30:03 +0000
ROA not before:           Wed 30 Aug 2023 08:30:03 +0000
ROA not after:            Fri 29 Aug 2025 08:30:03 +0000
asID:                     263833
IP address blocks:        138.255.170.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1332513 (0x145521)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
        Validity
            Not Before: Aug 30 08:30:03 2023 GMT
            Not After : Aug 29 08:30:03 2025 GMT
        Subject: CN=19562ebf3ed2f44ea567decbe92611a74f5ad721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c6:03:c7:90:0f:7e:b8:50:54:0e:34:bc:3e:
                    a7:9c:13:85:b6:5e:b4:d4:74:c5:85:36:15:79:c1:
                    6d:a0:a8:01:f6:95:47:ed:ff:f5:32:2b:5f:b9:17:
                    6b:b2:54:9d:dd:c0:8c:5e:96:ee:fc:19:fa:99:62:
                    3e:0d:d7:af:d5:1d:49:b3:3c:46:27:9f:b8:a1:4c:
                    4d:91:09:3b:7a:5d:11:ff:7e:29:06:59:89:81:b4:
                    59:32:26:0b:5b:1a:44:a0:60:9e:3c:48:d6:f9:d0:
                    52:3d:7e:28:a9:db:d2:75:fd:84:da:6b:8e:a5:a6:
                    3d:61:c6:d7:1e:18:b5:81:fc:55:17:25:b0:f5:a5:
                    0a:43:d8:cb:8c:a5:88:e6:86:91:1d:33:9c:99:c6:
                    b2:77:68:6e:82:5b:23:ea:a7:02:d6:82:02:99:54:
                    f8:ce:4a:04:bb:48:62:38:48:a8:74:12:1c:5c:11:
                    2e:2d:b7:61:7a:a1:8e:be:cd:da:95:ba:a1:f6:98:
                    94:ff:90:2f:b0:fe:d7:8f:3f:b3:e1:e8:bb:82:02:
                    ae:fd:b8:00:ae:ae:6c:27:8a:c8:ca:5d:bd:9b:23:
                    47:77:41:54:f1:25:d6:65:5b:d1:32:43:bd:11:e8:
                    0a:0a:18:0a:49:8c:b3:6b:a9:b7:78:c6:97:b6:5d:
                    c9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:78:A8:6E:59:DF:13:11:93:B9:4D:F2:A7:C2:9D:48:37:32:89:45
            X509v3 Authority Key Identifier:
                keyid:D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/19562ebf3ed2f44ea567decbe92611a74f5ad721.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:cb:01:ae:99:74:07:ee:07:78:68:6e:31:7c:fd:fb:40:c6:
         a5:8f:3c:89:55:be:4c:11:c4:57:90:23:c3:55:44:bb:a2:3e:
         54:c0:3f:72:fc:f4:ec:c9:5b:8e:91:95:f4:74:41:ba:b5:a1:
         6a:52:a7:ea:e5:3e:6b:22:46:02:0e:fd:70:1b:81:07:2f:a4:
         41:84:2a:2f:f3:95:1d:bf:37:a3:45:3c:59:86:08:48:72:e9:
         aa:27:d4:1b:02:b0:91:6a:43:07:f7:4b:03:34:48:1c:e1:4e:
         e6:ef:40:35:b0:64:b4:82:53:b7:3f:7a:ea:af:3c:2c:14:54:
         9f:af:bd:d3:50:fd:f1:6f:f0:0c:7b:4d:e4:dc:2f:8f:2f:fc:
         20:8b:2d:46:af:e1:9f:e7:cf:83:6f:02:48:09:12:6f:94:eb:
         a1:c4:18:7c:6c:19:bb:50:51:3c:dd:4b:9a:5c:d5:b4:cc:7e:
         c9:56:04:22:55:20:5d:de:51:53:62:8a:fe:4f:a1:07:30:6e:
         86:60:b0:fc:56:e2:87:70:e9:76:bc:76:78:63:19:86:01:ba:
         84:46:22:1a:43:43:2a:7a:fe:9f:7c:d3:99:45:58:13:6c:62:
         57:dc:13:a9:3c:9e:c6:e8:28:4c:66:65:97:c6:1f:ca:fc:86:
         11:bf:73:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----