Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/8e95d878ea09e8df82ff09c56abe0420f93ae81a.roa
File:                     8e95d878ea09e8df82ff09c56abe0420f93ae81a.roa (raw, json)
Hash identifier:          USEM1tv/7EUI6/HbzxUUPJMIqWUcJVaIOT0i5wSfgBE=
Subject key identifier:   0E:2B:A4:45:1B:B5:BA:8C:11:1B:4B:5C:B4:02:5E:62:D4:07:5D:56
Certificate issuer:       /CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
Certificate serial:       1AD6E4
Authority key identifier: 26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/8e95d878ea09e8df82ff09c56abe0420f93ae81a.roa
Signing time:             Mon 03 Oct 2022 21:36:36 +0000
ROA not before:           Mon 03 Oct 2022 21:34:43 +0000
ROA not after:            Sun 03 Oct 2027 21:34:43 +0000
asID:                     6306
IP address blocks:        161.140.128.0/17 maxlen: 17

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1758948 (0x1ad6e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
        Validity
            Not Before: Oct  3 21:34:43 2022 GMT
            Not After : Oct  3 21:34:43 2027 GMT
        Subject: CN=8e95d878ea09e8df82ff09c56abe0420f93ae81a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a0:84:cd:f3:9f:11:0f:4c:9d:24:3d:48:9a:
                    2c:2f:75:52:3c:42:e6:3e:04:1e:74:9e:8b:c4:c0:
                    72:2e:37:3f:84:be:2b:9e:6a:74:0f:f0:16:6a:06:
                    8f:8f:7e:cb:4e:2d:5e:06:39:16:17:d5:40:ba:4c:
                    d8:94:54:23:e7:9c:d5:34:71:41:16:0d:10:2a:1a:
                    9e:09:0d:21:63:f9:47:b0:6d:1b:a3:7a:a5:9b:61:
                    04:69:b0:2e:6d:15:e6:9d:fa:a3:1e:0c:ae:fe:1a:
                    e8:41:2f:bf:95:bd:53:cd:44:6a:00:4f:0f:4c:6d:
                    ce:b0:49:d5:38:1e:b0:bc:b9:95:41:83:23:38:35:
                    18:55:80:42:d8:cc:67:1e:cb:95:28:b9:60:f7:e6:
                    b4:a2:b1:7d:98:ac:c7:eb:b0:4d:e8:fb:3b:b0:37:
                    44:07:6e:98:ab:62:32:e7:a2:9b:d3:af:35:8e:66:
                    0e:dd:41:2c:66:ad:7f:09:66:38:83:93:3c:d5:3a:
                    b6:dc:80:0d:51:72:02:41:93:a3:d9:58:c7:61:de:
                    29:5f:ac:02:3a:3f:14:45:4c:45:8a:c9:97:52:22:
                    d8:47:fe:17:1d:19:aa:a0:0b:83:df:7b:e0:16:6e:
                    1c:07:d0:af:37:ac:ed:d9:7b:96:8b:2c:df:54:cb:
                    0e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2B:A4:45:1B:B5:BA:8C:11:1B:4B:5C:B4:02:5E:62:D4:07:5D:56
            X509v3 Authority Key Identifier:
                keyid:26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/8e95d878ea09e8df82ff09c56abe0420f93ae81a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.140.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         41:c4:de:e1:96:b6:bf:d9:7d:90:6f:b7:c8:1a:e3:f2:4d:f8:
         c2:1b:3b:1c:7b:ca:3e:b7:76:cb:82:87:8b:d5:22:9a:d8:28:
         c9:6e:3f:64:4f:5a:82:22:b2:46:d4:53:56:a9:29:e5:ae:cc:
         eb:b3:25:71:c5:8f:fa:62:9f:5d:39:36:8b:00:af:8e:4e:f8:
         b9:ea:ae:ab:e7:5b:dd:52:1e:b0:43:dc:bf:29:f0:16:e2:da:
         21:bb:4a:ce:41:ab:89:38:c6:0b:c7:cd:08:9c:50:91:20:bb:
         10:3d:e1:b1:bb:4b:95:4c:99:8b:0d:da:70:5a:26:b8:ec:94:
         7e:28:30:45:64:4d:fe:33:05:b2:67:73:25:a9:2a:9a:cf:3f:
         e0:a0:aa:70:33:f4:dd:37:aa:0a:d6:8d:2a:12:40:aa:41:5b:
         e0:c4:52:e3:fb:bb:47:4d:ec:7a:2a:49:23:0a:eb:98:10:93:
         cb:4a:96:d9:2c:e3:a0:f4:86:e5:63:4b:92:0c:ee:5f:92:73:
         0f:01:3f:2e:3f:5c:38:b0:d7:45:67:fa:74:05:26:1a:1d:04:
         91:fe:51:ef:e7:8a:13:4c:a3:4e:2d:8e:2a:b6:3e:5a:c4:bc:
         ca:81:3b:e3:83:d0:63:db:a5:b2:4f:e4:77:3c:7c:ea:d6:b2:
         a6:25:7e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----