Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/754269ed7bf4b0dab90c4aabca1e0daa205f76b9.roa
File:                     754269ed7bf4b0dab90c4aabca1e0daa205f76b9.roa (raw, json)
Hash identifier:          3s95q3PHNSgCk1+YVegWK8YHNTMxvW2nb1nAYb7kp/A=
Subject key identifier:   DC:0A:5E:BB:B3:6B:E8:D3:34:3B:B6:B4:5E:D7:A1:E5:E3:C8:8E:1E
Certificate issuer:       /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial:       01E429
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/754269ed7bf4b0dab90c4aabca1e0daa205f76b9.roa
Signing time:             Mon 29 Nov 2021 18:28:43 +0000
ROA not before:           Mon 29 Nov 2021 03:00:00 +0000
ROA not after:            Wed 29 Nov 2023 03:00:00 +0000
asID:                     27768
IP address blocks:        201.217.22.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123945 (0x1e429)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
        Validity
            Not Before: Nov 29 03:00:00 2021 GMT
            Not After : Nov 29 03:00:00 2023 GMT
        Subject: CN=754269ed7bf4b0dab90c4aabca1e0daa205f76b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:62:b5:f2:58:76:b2:ae:50:a5:66:f7:3b:ba:
                    14:0b:44:85:4a:46:09:e6:f9:94:e3:45:5e:d3:33:
                    82:a6:26:06:b7:af:56:b9:ef:62:eb:f7:e3:76:19:
                    d3:25:41:a7:4b:90:37:24:e0:06:1a:36:27:0c:70:
                    fc:6b:51:4d:11:b8:64:49:2a:3e:94:5a:a8:9b:eb:
                    a0:64:1a:19:60:0a:ac:b1:df:88:4e:9d:9e:3b:66:
                    1c:aa:94:82:1d:f6:88:34:70:86:6f:22:22:25:88:
                    40:bc:59:a7:a0:4a:d6:d0:6b:db:3f:0a:4c:a5:e6:
                    7b:08:9e:56:63:a5:b6:bd:4d:d6:86:f2:83:20:cb:
                    d7:26:6d:41:32:43:fb:74:ba:bc:bd:91:52:d0:b3:
                    ee:2f:aa:d2:0c:ae:d7:df:42:22:cb:30:da:9c:f8:
                    26:14:c6:75:81:52:6a:33:e4:ef:21:31:77:81:30:
                    4a:c7:10:80:79:02:51:a5:bd:f0:fb:e9:65:4a:00:
                    64:1d:7c:59:22:56:4e:d0:e8:60:ae:51:18:39:ea:
                    54:95:d6:92:a6:17:58:f1:be:0a:a0:07:a8:5a:42:
                    39:90:5e:dd:9a:32:6e:b3:da:5a:2f:c2:e1:a2:3a:
                    b8:c4:59:ac:27:1f:1b:8b:9c:98:a3:6d:30:d5:72:
                    13:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0A:5E:BB:B3:6B:E8:D3:34:3B:B6:B4:5E:D7:A1:E5:E3:C8:8E:1E
            X509v3 Authority Key Identifier:
                keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/754269ed7bf4b0dab90c4aabca1e0daa205f76b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:d0:90:c8:7d:8f:96:7c:6d:d7:a4:42:6f:99:66:2c:09:67:
         51:e6:f1:1c:e9:ee:ea:4f:f5:1b:f1:4c:44:ac:12:74:7d:5a:
         32:84:20:37:dc:fd:60:5c:95:77:18:ab:51:ad:13:7e:04:8e:
         37:70:eb:9a:2e:d1:10:1a:43:34:01:6e:8f:7d:8a:45:57:f8:
         82:c1:43:8c:ca:1b:8e:10:65:90:8f:2a:b6:2d:26:88:c8:fb:
         9e:21:50:c5:37:c0:55:58:a9:86:d9:51:49:96:23:03:0a:4e:
         8e:70:7d:d1:09:85:63:b0:4a:53:52:37:73:09:4f:52:c6:61:
         ab:ea:f9:10:53:de:d0:25:2a:24:9e:76:be:c1:7b:ba:62:30:
         9c:5d:b7:ce:bd:68:93:8b:c6:d8:4b:25:02:1b:69:e8:0a:a7:
         33:bf:5b:a3:d4:d0:4a:ee:ab:85:6c:d1:29:2f:d1:23:2e:40:
         52:a7:c6:23:81:90:aa:f1:34:ac:e3:f4:84:7a:cb:4c:ab:f5:
         71:a7:fa:ed:e2:8b:86:5b:0b:bf:6c:a1:04:6c:6f:59:ef:22:
         67:9f:fc:8b:48:64:c6:03:06:29:ca:9c:74:b6:84:bc:29:07:
         4c:43:31:02:83:0e:35:e7:b2:94:27:9a:af:60:0e:a4:37:b8:
         2a:7a:a2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----