Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/5f1fde63286e89bbf42dd9a8e578eac230bcec9d.roa
File:                     5f1fde63286e89bbf42dd9a8e578eac230bcec9d.roa (raw, json)
Hash identifier:          zWzKSMvjEk5sPydMNTxNe+/E1Stvk12Tm5fQpNHhC5M=
Subject key identifier:   58:17:2E:73:D8:24:48:7A:10:87:5A:2D:37:52:BD:B2:DE:2A:8E:93
Certificate issuer:       /CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Certificate serial:       144F34
Authority key identifier: D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/5f1fde63286e89bbf42dd9a8e578eac230bcec9d.roa
Signing time:             Thu 31 Aug 2023 08:30:01 +0000
ROA not before:           Wed 30 Aug 2023 08:30:01 +0000
ROA not after:            Fri 29 Aug 2025 08:30:01 +0000
asID:                     263833
IP address blocks:        138.255.168.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1330996 (0x144f34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
        Validity
            Not Before: Aug 30 08:30:01 2023 GMT
            Not After : Aug 29 08:30:01 2025 GMT
        Subject: CN=5f1fde63286e89bbf42dd9a8e578eac230bcec9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:46:cd:dd:8f:7d:28:e0:03:be:b2:e8:ab:18:
                    30:63:78:80:4d:e0:24:cb:df:80:c9:58:f0:66:00:
                    34:e7:51:e0:fd:23:5f:25:e3:69:a5:0e:01:71:17:
                    bf:93:85:09:d7:40:72:ef:8f:e0:6d:ee:4e:ba:17:
                    e3:54:bd:f3:9d:f4:56:d3:26:31:68:c1:75:14:4a:
                    bc:77:44:c1:d2:4b:87:91:df:a0:d7:8c:4d:ac:e8:
                    2d:42:c0:a5:9a:5b:ab:47:fc:87:f2:de:7c:f4:12:
                    ca:46:53:0b:5a:a4:d8:ce:c1:3b:cf:2d:cd:da:a4:
                    b4:da:51:b8:fa:c8:13:8b:7b:38:97:55:28:9b:5e:
                    03:77:04:22:1d:39:a1:5e:2f:33:be:ad:63:61:b8:
                    6b:fa:b2:85:e8:b9:33:21:4e:18:18:d8:8c:59:34:
                    2b:22:41:e6:97:40:5f:a4:e3:3c:88:ca:d8:38:2d:
                    75:11:18:ed:97:9b:6f:7e:8b:97:df:02:8e:32:78:
                    0a:b5:cd:11:d4:db:b9:7e:70:93:28:1f:52:17:20:
                    f4:53:90:bc:9d:47:31:c2:0a:9f:06:3c:70:dd:d1:
                    ed:b2:9c:2e:ec:7b:27:00:34:ba:53:f8:14:9d:1b:
                    45:bb:90:c9:40:3b:85:ed:c6:b4:4e:d7:f6:2a:43:
                    6a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:17:2E:73:D8:24:48:7A:10:87:5A:2D:37:52:BD:B2:DE:2A:8E:93
            X509v3 Authority Key Identifier:
                keyid:D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/5f1fde63286e89bbf42dd9a8e578eac230bcec9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:8b:81:3a:e1:68:f8:f6:92:48:b5:55:53:93:ee:d3:86:1a:
         d3:f3:eb:13:09:90:ec:1a:37:18:04:a7:14:b5:fb:11:a3:ce:
         ff:df:dd:be:66:6c:4b:d3:fb:55:50:60:7e:bb:a4:52:63:fb:
         10:39:07:29:7c:27:25:c4:89:f3:c2:f1:6b:d6:8a:48:bd:01:
         90:c7:b8:45:6c:17:4e:94:10:0b:f4:72:10:b6:53:97:1d:37:
         78:34:99:23:5f:c4:c0:4e:63:1e:c9:86:11:06:31:41:b9:17:
         6f:5b:62:f6:c2:80:6a:d1:d9:e1:e5:2e:1b:bb:3a:1b:6f:09:
         c0:fa:b6:cd:fe:87:b6:fb:04:93:38:5c:6e:72:44:c3:24:87:
         85:17:15:0c:e5:77:4f:05:65:74:10:9c:1f:6d:77:a1:37:c9:
         3f:d4:9f:81:27:a9:38:89:7d:7a:2a:e7:de:be:77:03:f3:c5:
         a5:84:58:71:8f:5e:99:3e:33:ba:f4:3e:be:a4:34:d9:f7:18:
         07:1a:4e:f9:f8:cd:65:c6:cc:67:38:e8:41:66:b0:08:4d:ed:
         ef:19:80:de:e7:b7:4c:f7:49:07:07:50:bf:0f:4e:31:d5:67:
         4a:ec:b0:b9:f5:2a:9b:4b:e3:99:4f:de:72:b4:3e:7e:3d:87:
         60:43:3d:8b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFE80MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhk
NTVlYzkwZThiNmU1ZWNhNmE0MDYwYTlhMTg1MzJmZTFmMzkxYjUwHhcNMjMwODMw
MDgzMDAxWhcNMjUwODI5MDgzMDAxWjAzMTEwLwYDVQQDEyg1ZjFmZGU2MzI4NmU4
OWJiZjQyZGQ5YThlNTc4ZWFjMjMwYmNlYzlkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmUbN3Y99KOADvrLoqxgwY3iATeAky9+AyVjwZgA051Hg/SNf
JeNppQ4BcRe/k4UJ10By74/gbe5OuhfjVL3znfRW0yYxaMF1FEq8d0TB0kuHkd+g
14xNrOgtQsClmlurR/yH8t589BLKRlMLWqTYzsE7zy3N2qS02lG4+sgTi3s4l1Uo
m14DdwQiHTmhXi8zvq1jYbhr+rKF6LkzIU4YGNiMWTQrIkHml0BfpOM8iMrYOC11
ERjtl5tvfouX3wKOMngKtc0R1Nu5fnCTKB9SFyD0U5C8nUcxwgqfBjxw3dHtspwu
7HsnADS6U/gUnRtFu5DJQDuF7ca0Ttf2KkNqcQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFgXLnPYJEh6EIdaLTdSvbLeKo6TMB8GA1UdIwQYMBaAFNlbt1vM1oSBgjCS
r+WnlnediRtjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGQ1NWVj
OTBlOGI2ZTVlY2E2YTQwNjBhOWExODUzMmZlMWYzOTFiNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGViYjYxYzAtNjQwMC00NmQyLWE0MWMtNzM0NmE4
MGZlMDVjLzVmMWZkZTYzMjg2ZTg5YmJmNDJkZDlhOGU1NzhlYWMyMzBiY2VjOWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kZWJiNjFjMC02NDAwLTQ2ZDItYTQxYy03MzQ2
YTgwZmUwNWMvOGQ1NWVjOTBlOGI2ZTVlY2E2YTQwNjBhOWExODUzMmZlMWYzOTFi
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAYr/qDANBgkqhkiG9w0BAQsFAAOCAQEAeouBOuFo+PaSSLVV
U5Pu04Ya0/PrEwmQ7Bo3GASnFLX7EaPO/9/dvmZsS9P7VVBgfrukUmP7EDkHKXwn
JcSJ88Lxa9aKSL0BkMe4RWwXTpQQC/RyELZTlx03eDSZI1/EwE5jHsmGEQYxQbkX
b1ti9sKAatHZ4eUuG7s6G28JwPq2zf6HtvsEkzhcbnJEwySHhRcVDOV3TwVldBCc
H213oTfJP9SfgSepOIl9eirn3r53A/PFpYRYcY9emT4zuvQ+vqQ02fcYBxpO+fjN
ZcbMZzjoQWawCE3t7xmA3ue3TPdJBwdQvw9OMdVnSuywufUqm0vjmU/ecrQ+fj2H
YEM9iw==
-----END CERTIFICATE-----