Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/6785b90fd2af54f9f07d69b44c7707f444c4e872.roa
File:                     6785b90fd2af54f9f07d69b44c7707f444c4e872.roa (raw, json)
Hash identifier:          8l5uBchE6B4XEYv7FJ04hbCI+SwlXZJSQ3gCNMupNxg=
Subject key identifier:   21:6B:67:8F:3F:76:93:A5:5A:B6:BB:2D:27:3A:83:86:19:42:67:FE
Certificate issuer:       /CN=2bee98b52bf99165b867835f5390295e9317bb56
Certificate serial:       16D9C8
Authority key identifier: 87:A5:C2:9F:E4:B7:C1:E4:BD:3A:BD:43:2B:17:A8:47:60:1D:4E:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bee98b52bf99165b867835f5390295e9317bb56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/6785b90fd2af54f9f07d69b44c7707f444c4e872.roa
Signing time:             Tue 19 Apr 2022 03:10:30 +0000
ROA not before:           Tue 19 Apr 2022 03:00:00 +0000
ROA not after:            Fri 19 Apr 2024 03:00:00 +0000
asID:                     266841
IP address blocks:        170.83.76.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1497544 (0x16d9c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bee98b52bf99165b867835f5390295e9317bb56
        Validity
            Not Before: Apr 19 03:00:00 2022 GMT
            Not After : Apr 19 03:00:00 2024 GMT
        Subject: CN=6785b90fd2af54f9f07d69b44c7707f444c4e872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9a:e5:85:c5:bf:de:8b:28:f5:da:23:d7:f3:
                    3e:ef:6c:91:34:fb:17:8d:3a:0e:2f:0e:4a:37:16:
                    f9:9b:9e:86:ef:82:7f:e5:c0:80:d2:a4:56:82:7c:
                    e1:23:86:e3:06:8e:03:d3:ba:1c:3a:6b:cc:93:0e:
                    0a:1c:b8:f4:90:b0:8f:ad:a7:4d:93:ce:b6:41:e4:
                    0e:70:53:e6:05:d7:4b:6f:20:ec:2a:5d:37:d0:8b:
                    31:68:fb:d8:81:f5:22:3c:02:06:0f:db:7a:16:d0:
                    9a:a2:b0:ac:29:6a:34:0a:ca:49:1e:7e:3a:e5:70:
                    34:bb:91:99:1c:47:a3:b7:68:2a:d1:25:a4:7a:59:
                    d4:ae:c9:97:94:09:f5:f4:36:a1:c8:8f:33:cc:78:
                    37:42:13:2b:c9:18:8e:09:70:21:ff:0d:47:4c:89:
                    c2:23:ae:54:66:1f:5b:84:52:4f:1a:87:36:42:47:
                    e2:a4:cf:37:6b:08:6e:c7:e1:bb:47:74:01:c2:4d:
                    6d:28:7e:21:d6:c2:a8:0b:f8:4d:76:7a:07:30:02:
                    f1:be:7b:94:8c:d2:01:66:68:b5:48:06:12:6e:c3:
                    65:e5:67:87:d8:c0:4e:66:ed:cb:23:39:f7:2f:2f:
                    dd:94:01:be:72:63:a2:21:75:b8:3a:cb:54:64:7c:
                    2e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6B:67:8F:3F:76:93:A5:5A:B6:BB:2D:27:3A:83:86:19:42:67:FE
            X509v3 Authority Key Identifier:
                keyid:87:A5:C2:9F:E4:B7:C1:E4:BD:3A:BD:43:2B:17:A8:47:60:1D:4E:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bee98b52bf99165b867835f5390295e9317bb56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/6785b90fd2af54f9f07d69b44c7707f444c4e872.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/2bee98b52bf99165b867835f5390295e9317bb56.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:a0:fe:23:9a:88:37:40:df:c9:69:8c:cc:74:bc:0c:b7:e8:
         cc:4b:fd:de:3c:9a:d8:4b:a3:56:9d:14:e7:71:00:38:af:6d:
         55:48:98:40:04:32:03:95:c4:76:c0:4c:96:da:00:f0:d6:38:
         63:d0:5c:e7:06:7d:23:58:fa:3e:dd:b6:c6:27:98:6a:bf:5f:
         81:95:b4:c2:c2:ba:4f:aa:db:22:e9:ea:68:21:58:e0:a3:aa:
         f7:81:84:c9:23:9b:96:e9:db:2f:e1:d3:f8:e9:57:f5:79:cd:
         a2:7e:f5:09:ad:d1:df:87:34:87:6b:13:26:79:e2:9b:9e:3e:
         84:5c:39:4d:d6:f6:a3:9d:83:e0:dc:4c:4d:4b:0f:e1:c7:b5:
         11:de:e8:a0:95:70:18:bd:9d:95:3f:d2:e7:0d:8f:49:99:f2:
         8c:2c:17:94:d2:6e:14:d3:32:93:0a:cc:7b:c4:b6:54:92:c6:
         07:03:81:69:f2:f3:e1:59:57:97:d6:29:8e:c1:92:aa:14:e7:
         74:52:36:32:ee:16:26:50:c9:7a:23:06:b7:0e:b5:9f:49:d8:
         e2:34:03:2e:3b:d0:7e:87:ad:6a:22:ab:1d:be:dc:f3:8d:ee:
         61:d2:01:e8:bf:34:2b:a5:5b:45:9a:75:96:3d:df:f3:30:52:
         8e:fc:a5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----