Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e559669c-6bf0-4dbc-96b8-8ccc1d3a119f/aa05be11a37e386d4273534dc5e9dab4d6d92f83.roa
File:                     aa05be11a37e386d4273534dc5e9dab4d6d92f83.roa (raw, json)
Hash identifier:          gGyyebl0Dziz4mzsS2snO+DEcopj/hxaIPnvAJXbRgA=
Subject key identifier:   6B:43:16:A7:C3:8D:35:2E:06:E4:47:98:57:A0:AC:91:DC:F4:15:3E
Certificate issuer:       /CN=05acb8c1e2626d355ab3218cba38c58053ed499d
Certificate serial:       02D7
Authority key identifier: 51:82:8E:84:D2:7E:54:B9:EE:CB:BF:96:F7:1A:E5:73:8F:DA:09:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05acb8c1e2626d355ab3218cba38c58053ed499d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e559669c-6bf0-4dbc-96b8-8ccc1d3a119f/aa05be11a37e386d4273534dc5e9dab4d6d92f83.roa
Signing time:             Mon 04 Jul 2022 18:34:30 +0000
ROA not before:           Mon 04 Jul 2022 03:00:00 +0000
ROA not after:            Thu 04 Jul 2024 03:00:00 +0000
asID:                     270122
IP address blocks:        138.122.184.0/22 maxlen: 22
                          2806:3c4::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 727 (0x2d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05acb8c1e2626d355ab3218cba38c58053ed499d
        Validity
            Not Before: Jul  4 03:00:00 2022 GMT
            Not After : Jul  4 03:00:00 2024 GMT
        Subject: CN=aa05be11a37e386d4273534dc5e9dab4d6d92f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fd:91:b7:a1:fe:14:cb:d3:16:27:e2:62:bf:
                    a1:5e:a1:22:df:c5:1d:37:a2:bd:d6:49:c4:2b:1d:
                    cd:00:6d:32:07:80:b6:78:36:41:10:d4:d7:48:6b:
                    fc:42:89:76:11:d6:e0:67:8c:8d:00:d9:e9:94:52:
                    fd:61:8e:b4:3d:85:36:c5:e6:f3:23:a8:4e:ca:bb:
                    dc:f0:20:03:b5:0f:a8:7f:ac:5c:e9:33:78:82:de:
                    b6:88:ab:7f:ca:6f:4f:74:20:c5:49:07:65:b1:76:
                    fd:01:b4:66:c0:42:18:ff:35:fd:f1:66:6f:00:39:
                    9e:75:0d:4c:d5:26:b7:18:bf:e1:95:a8:0b:5d:51:
                    79:7d:ad:3d:97:f6:21:27:11:64:36:97:be:df:aa:
                    af:3a:c8:ec:64:cc:18:3c:96:b6:b7:f3:66:f3:b7:
                    52:98:a3:8b:1d:86:b4:b2:ae:3f:42:d8:a6:88:4e:
                    1d:1b:df:eb:80:9e:d4:61:30:16:22:95:99:fb:c3:
                    8e:e9:37:9d:df:89:53:f4:5a:d8:77:72:21:80:9c:
                    ed:0a:13:47:7c:d9:f6:d0:83:6f:d7:e5:09:82:ee:
                    8c:d0:bc:b4:4a:b9:32:66:30:b0:79:c5:a9:ef:81:
                    9b:4d:46:5e:6b:0b:97:64:09:98:01:66:60:19:ea:
                    e7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:43:16:A7:C3:8D:35:2E:06:E4:47:98:57:A0:AC:91:DC:F4:15:3E
            X509v3 Authority Key Identifier:
                keyid:51:82:8E:84:D2:7E:54:B9:EE:CB:BF:96:F7:1A:E5:73:8F:DA:09:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05acb8c1e2626d355ab3218cba38c58053ed499d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e559669c-6bf0-4dbc-96b8-8ccc1d3a119f/aa05be11a37e386d4273534dc5e9dab4d6d92f83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e559669c-6bf0-4dbc-96b8-8ccc1d3a119f/05acb8c1e2626d355ab3218cba38c58053ed499d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.184.0/22
                IPv6:
                  2806:3c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:fa:5b:18:cd:3a:f7:b8:c1:89:b9:9f:10:16:be:15:7b:3e:
         c6:f8:07:6d:fc:85:2c:cc:4b:a4:bb:a9:1b:07:c5:21:36:83:
         ca:1c:d0:fa:ca:f0:07:03:3d:10:a1:9d:be:56:00:7e:fd:98:
         93:c6:ff:f2:2b:ab:6e:7d:74:00:76:73:5c:97:2b:4e:e9:20:
         e5:97:df:09:0e:e3:a3:cc:c9:a1:72:69:51:5b:39:0d:24:1d:
         41:73:d8:05:6f:a6:9a:8b:34:70:5f:ec:90:15:c4:ab:6c:c6:
         e3:96:1a:fc:2e:6c:3c:5b:0f:7b:13:e4:7d:14:51:6a:dd:0a:
         c7:bc:02:8d:c8:ea:6e:4b:ba:b3:dd:69:20:f8:bf:09:17:7c:
         66:a6:85:85:aa:e8:1c:c9:ef:01:54:d6:5b:57:72:ad:0c:28:
         c5:4a:d7:af:c3:1d:29:3b:21:72:1a:84:5e:90:2a:bd:42:6e:
         4b:14:c0:03:89:84:a5:79:8d:e1:f2:c4:7b:48:5a:61:e8:32:
         85:42:c7:9d:c3:8a:18:d7:2f:09:63:83:0c:8a:a6:a0:2d:3d:
         b9:c8:a7:6d:3d:af:93:49:77:72:bc:2b:57:08:e9:86:fe:e4:
         d6:44:f4:2b:c4:4d:5a:2d:60:0d:a2:18:9a:52:b4:e9:f8:d2:
         cd:20:30:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----