Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/ccf7c71e8e35dd5500d8f91e1417bedec27019ae.roa
File:                     ccf7c71e8e35dd5500d8f91e1417bedec27019ae.roa (raw, json)
Hash identifier:          p7zEA6KZ8tSR5vC+yIbUOzxJMRG9loIIJDWUFlW88WM=
Subject key identifier:   05:88:C7:24:EA:96:D8:2A:85:0D:3A:A6:0C:BB:25:99:74:E2:E7:49
Certificate issuer:       /CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Certificate serial:       12149F
Authority key identifier: D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/ccf7c71e8e35dd5500d8f91e1417bedec27019ae.roa
Signing time:             Fri 02 Jun 2023 08:30:09 +0000
ROA not before:           Thu 01 Jun 2023 08:30:09 +0000
ROA not after:            Sat 31 May 2025 08:30:09 +0000
asID:                     263833
IP address blocks:        138.255.170.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1184927 (0x12149f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
        Validity
            Not Before: Jun  1 08:30:09 2023 GMT
            Not After : May 31 08:30:09 2025 GMT
        Subject: CN=ccf7c71e8e35dd5500d8f91e1417bedec27019ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d1:93:e3:22:84:51:0b:34:68:f2:9d:26:65:
                    53:ab:05:dd:30:c2:20:bb:13:96:99:0c:f7:85:7d:
                    a6:b6:63:4c:36:9e:ac:6f:c9:30:09:3f:91:f1:6b:
                    7c:31:4c:3a:76:88:64:bc:f2:d0:e5:64:4f:db:b9:
                    26:e6:a5:f0:c6:4c:bd:d3:f3:2f:7d:db:0f:ce:21:
                    ed:17:bb:e9:27:6d:87:d7:8d:be:e6:65:54:ad:af:
                    8c:73:c9:b0:51:2c:41:ba:07:49:f0:9c:bf:24:ea:
                    42:f5:83:4a:45:1f:36:b1:f0:1e:74:af:92:8d:93:
                    c5:1a:04:20:b8:1c:b6:1b:34:6e:8d:04:0e:7e:98:
                    69:93:dc:e1:7d:5a:63:a8:0a:05:17:69:23:89:e9:
                    c6:91:7f:0d:5d:92:a1:f0:01:b9:bf:fb:2e:93:1c:
                    b1:fa:7b:06:e4:42:fa:23:78:11:a9:d1:79:68:09:
                    0e:dc:ab:cf:93:6f:9e:c8:68:b2:02:06:20:c3:ad:
                    2e:42:7f:be:03:39:9a:35:a5:cd:03:67:75:33:df:
                    0c:5f:0c:2d:7c:4b:53:04:ac:79:55:c4:2d:e0:c3:
                    6f:a7:ec:a0:f5:c4:85:c6:43:ba:bb:9f:41:76:94:
                    05:f5:33:92:e3:0b:84:db:4e:99:88:b3:9b:74:ba:
                    11:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:88:C7:24:EA:96:D8:2A:85:0D:3A:A6:0C:BB:25:99:74:E2:E7:49
            X509v3 Authority Key Identifier:
                keyid:D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/ccf7c71e8e35dd5500d8f91e1417bedec27019ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:85:5b:f1:85:62:eb:bf:0a:fd:5c:3b:34:40:b6:86:d0:9c:
         a5:ad:36:7a:d4:82:c2:b1:0d:6c:a6:9b:74:9a:00:91:3c:c2:
         70:85:a1:43:a2:60:32:fe:ea:1b:61:58:a5:0f:8c:d7:b4:78:
         d2:c7:a4:6c:bf:d7:ac:44:45:8a:04:ba:c2:1e:88:54:8e:be:
         9f:6a:b1:aa:2a:66:8e:6b:cb:8b:b8:b4:6b:0b:38:cd:06:5c:
         f5:ea:e1:fa:eb:c2:f9:4b:f3:8c:85:a3:3b:01:30:40:d9:f9:
         ad:8b:de:c3:3e:db:a8:30:f1:bc:ed:3d:d8:2c:9f:b0:a5:df:
         97:a3:7b:13:88:b1:2f:4a:0e:0e:1d:c8:38:0f:ef:2c:9c:16:
         4f:8a:13:90:b3:8b:76:4d:bb:fb:bb:30:66:60:23:1a:2c:9c:
         5b:75:cd:df:1c:3f:34:76:29:d8:19:49:7a:f1:03:0d:24:e6:
         5f:8a:48:ed:50:a8:39:29:cf:ca:e6:50:2b:b7:cb:6f:1a:bd:
         9e:17:c1:15:70:91:d3:5a:0d:80:71:d1:2e:ae:99:9d:6a:36:
         5d:44:c1:68:ba:b3:e6:72:03:eb:0b:44:94:de:c4:9a:52:af:
         bf:b6:33:db:47:70:af:db:bf:a2:b6:69:5c:78:ca:59:74:7a:
         d7:14:27:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----