Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/28b7d8f3fa8f80d0d0283bf38d6bb6f641e2abbe.roa
File:                     28b7d8f3fa8f80d0d0283bf38d6bb6f641e2abbe.roa (raw, json)
Hash identifier:          bilWz2oFw+X8MF/i/V2LH43Z6idGlHHS4H6KTrAx+lQ=
Subject key identifier:   50:E4:6D:CE:34:B2:65:82:52:CB:68:5F:EE:28:41:CC:53:CC:1B:AF
Certificate issuer:       /CN=5f126d30fa6a87627cafe0e8a0ca50fa3b12e800
Certificate serial:       14B54A
Authority key identifier: 61:3B:0E:DA:DF:D9:37:A0:EB:D2:3A:E3:96:08:F0:1D:D9:9A:BA:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f126d30fa6a87627cafe0e8a0ca50fa3b12e800.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/28b7d8f3fa8f80d0d0283bf38d6bb6f641e2abbe.roa
Signing time:             Mon 12 Jun 2023 06:58:22 +0000
ROA not before:           Sun 11 Jun 2023 06:58:22 +0000
ROA not after:            Thu 12 Jun 2025 06:58:22 +0000
asID:                     270076
IP address blocks:        138.186.76.0/22 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1357130 (0x14b54a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f126d30fa6a87627cafe0e8a0ca50fa3b12e800
        Validity
            Not Before: Jun 11 06:58:22 2023 GMT
            Not After : Jun 12 06:58:22 2025 GMT
        Subject: CN=28b7d8f3fa8f80d0d0283bf38d6bb6f641e2abbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:86:f8:25:06:22:e2:f2:9b:b5:0e:83:b4:20:
                    41:30:5f:07:93:0b:74:e0:47:b5:99:c1:11:89:e9:
                    53:7c:a8:9d:ec:6b:5d:ed:3e:de:9f:9f:13:80:50:
                    40:40:8a:8e:48:3b:86:01:2a:e3:09:d2:bf:5f:70:
                    5f:6c:3a:ff:ee:0c:fd:7c:5f:5b:dc:55:aa:69:d6:
                    78:15:6a:7f:ac:ea:3f:7a:78:66:20:7a:5a:98:4f:
                    a8:03:12:d0:c5:dc:2f:4f:25:44:37:41:8e:dc:05:
                    f9:75:1e:c8:d0:10:ab:9e:c7:6d:b7:76:37:8c:13:
                    9c:b0:aa:c0:fe:a2:84:19:66:17:6a:8d:60:21:c2:
                    35:e0:d1:a2:62:d7:38:76:3a:75:31:c6:6e:05:28:
                    11:f3:7a:15:86:30:ab:87:09:4d:16:5c:c9:dc:37:
                    fd:e1:4e:48:0b:c8:bf:36:48:27:dc:1a:b9:0d:a6:
                    fa:36:b6:c6:3e:57:bd:66:71:e3:eb:0e:33:99:5f:
                    b2:25:df:31:18:d1:eb:96:8a:bd:c1:fc:ad:9a:59:
                    f3:dc:7f:e8:e1:3e:bd:a1:08:c8:85:34:8a:d4:1b:
                    0d:a5:78:90:00:c4:01:30:22:96:ef:50:e9:fa:8b:
                    a6:80:78:58:8d:82:49:7a:16:44:7f:05:1a:03:74:
                    e1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E4:6D:CE:34:B2:65:82:52:CB:68:5F:EE:28:41:CC:53:CC:1B:AF
            X509v3 Authority Key Identifier:
                keyid:61:3B:0E:DA:DF:D9:37:A0:EB:D2:3A:E3:96:08:F0:1D:D9:9A:BA:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f126d30fa6a87627cafe0e8a0ca50fa3b12e800.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/28b7d8f3fa8f80d0d0283bf38d6bb6f641e2abbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/5f126d30fa6a87627cafe0e8a0ca50fa3b12e800.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:74:12:26:d8:1b:e9:36:8d:4a:5b:e5:44:62:10:5f:99:ed:
         9e:03:39:7a:99:d6:90:d4:56:98:50:b2:dd:21:d0:95:45:6b:
         66:29:b6:c5:9f:b6:cc:a4:55:4a:10:fd:dd:0e:01:49:50:cd:
         15:2b:1f:5f:e2:b4:34:1c:a4:a2:10:d2:37:17:a0:16:77:e3:
         9b:de:cc:d2:66:93:93:ea:49:a6:7a:7c:e8:d3:f1:0c:95:31:
         71:42:84:da:a6:66:50:6b:31:68:73:7a:1a:36:7a:bd:3f:dc:
         01:f3:58:0e:67:0f:65:53:8e:1a:ba:78:78:9c:eb:51:d9:df:
         3b:38:95:ca:5e:08:25:88:9e:d8:91:fa:8d:fe:5f:82:b9:f6:
         50:86:f7:7c:85:72:88:1d:83:f6:4f:5d:2c:65:0b:e3:5c:01:
         63:93:b1:d6:76:7e:3e:96:b3:e9:9e:bb:a0:e8:c5:75:6f:c0:
         27:2e:c0:73:ad:8a:fd:ce:f9:f5:2b:3e:17:78:98:9f:db:ef:
         1b:12:bd:85:7d:8e:04:99:33:9a:c3:1c:e9:a1:ab:08:ea:a4:
         b6:80:89:84:69:be:5e:90:4b:de:a6:cf:1f:13:8d:46:33:9e:
         c0:0e:1e:9e:75:e8:c4:0a:57:fd:d0:9d:21:4a:1d:07:aa:dc:
         e7:82:06:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----