Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/c6e6874aaa30c505835e1b4a7c3d3f95da66b138.roa
File:                     c6e6874aaa30c505835e1b4a7c3d3f95da66b138.roa (raw, json)
Hash identifier:          eENpg/Yt8f8TxNa4nO48VRj1pSuG2BZO2wNJXyzpyxw=
Subject key identifier:   58:D7:A9:B0:78:2D:DE:17:06:AD:B3:65:FC:04:53:D6:7C:31:54:9C
Certificate issuer:       /CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
Certificate serial:       1A90BD
Authority key identifier: 26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/c6e6874aaa30c505835e1b4a7c3d3f95da66b138.roa
Signing time:             Mon 03 Oct 2022 19:07:49 +0000
ROA not before:           Mon 03 Oct 2022 19:07:01 +0000
ROA not after:            Thu 03 Oct 2024 20:07:01 +0000
asID:                     6306
IP address blocks:        161.212.0.0/17 maxlen: 17

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1740989 (0x1a90bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
        Validity
            Not Before: Oct  3 19:07:01 2022 GMT
            Not After : Oct  3 20:07:01 2024 GMT
        Subject: CN=c6e6874aaa30c505835e1b4a7c3d3f95da66b138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a2:fe:c2:d6:e1:b9:88:68:d5:c5:81:d8:62:
                    ae:b8:a1:66:3c:1e:fb:8e:1d:dc:08:de:b8:b5:2d:
                    a2:fa:a4:f9:e7:ff:66:c4:e1:e1:24:c2:1b:e0:85:
                    af:86:71:8a:33:6a:1e:06:bd:b7:0b:d6:ca:77:05:
                    47:15:cb:b4:e7:19:76:91:08:6f:32:40:95:3f:2d:
                    11:3c:34:92:59:60:cf:2d:5f:1d:d0:d9:1a:75:21:
                    b0:48:14:2f:96:65:df:b5:94:b0:aa:1b:f7:8f:05:
                    dd:8c:69:18:9a:e9:49:67:54:c1:9d:94:00:64:a9:
                    81:2d:b5:0f:5b:85:ab:44:05:0f:91:e3:80:72:3c:
                    88:85:64:aa:27:51:63:44:61:97:79:1b:b6:e9:d0:
                    e0:10:15:a7:cc:ac:6f:f7:c5:08:28:df:c1:aa:04:
                    49:08:0e:97:7c:65:d4:b1:f9:7f:00:59:56:2a:46:
                    4e:b1:dd:e0:22:1a:a0:92:85:11:a3:a1:4d:d3:0e:
                    e7:f2:d7:88:60:15:fe:00:ec:2e:65:a8:7a:f5:58:
                    8b:57:55:5d:7d:7f:4e:e9:c3:d4:59:94:24:66:c1:
                    56:02:ec:67:00:32:ed:5c:9b:46:ae:c9:75:64:0c:
                    6f:f9:7a:ca:1c:60:6d:73:a9:66:61:09:ae:57:8a:
                    c4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D7:A9:B0:78:2D:DE:17:06:AD:B3:65:FC:04:53:D6:7C:31:54:9C
            X509v3 Authority Key Identifier:
                keyid:26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/c6e6874aaa30c505835e1b4a7c3d3f95da66b138.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.212.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         15:7c:6c:bc:15:ab:f3:9d:e0:a4:94:1c:42:75:17:ac:ff:56:
         7d:af:82:b2:23:ec:ab:6a:78:fa:38:df:cb:21:31:09:e9:6a:
         34:55:7c:f0:84:37:e8:de:06:1c:7c:be:87:b4:90:3d:c5:1c:
         50:88:95:e9:0d:cb:47:d0:b1:c8:27:fe:4b:9d:65:28:61:f1:
         f3:88:7a:9d:87:8a:7b:72:1f:2e:2c:61:bb:4b:84:de:28:60:
         23:ea:dd:ab:5c:15:e6:7a:04:39:87:65:95:62:b6:02:db:37:
         47:4c:10:8a:16:a2:de:5d:4f:a6:a7:dd:6a:25:a9:7d:b7:f4:
         7c:2b:c7:a4:48:aa:bd:96:e3:3c:04:ac:e8:b0:c9:b0:c7:ed:
         94:4d:37:a5:39:78:77:13:d6:36:de:f0:26:f8:ec:01:a5:80:
         06:80:78:b8:5d:cc:c9:f2:d3:dc:88:9a:35:33:0f:fe:dd:83:
         5d:ba:91:32:03:0b:af:ff:c0:3c:1b:13:22:8a:78:7d:84:60:
         4b:5e:b7:42:82:97:9a:98:1e:8b:80:a3:6e:10:39:e0:af:d6:
         25:5a:9d:07:93:e7:6d:aa:17:9a:3e:d2:f6:09:ec:d1:14:64:
         dc:54:b7:d3:f2:74:74:19:23:9e:ed:00:56:f1:ba:0d:08:96:
         bb:c5:77:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----