Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/d7f12b07c82d794d26dfdfc0a97927a946dccecc.roa
File:                     d7f12b07c82d794d26dfdfc0a97927a946dccecc.roa (raw, json)
Hash identifier:          XOIHWJKonc/5E1eHflzmQ6eElZn7XeNeR2W9ip64d+k=
Subject key identifier:   71:A7:79:6F:8C:C3:75:17:62:EE:6B:6A:0C:83:27:20:40:44:5F:B5
Certificate issuer:       /CN=2bee98b52bf99165b867835f5390295e9317bb56
Certificate serial:       16B9D1
Authority key identifier: 87:A5:C2:9F:E4:B7:C1:E4:BD:3A:BD:43:2B:17:A8:47:60:1D:4E:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bee98b52bf99165b867835f5390295e9317bb56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/d7f12b07c82d794d26dfdfc0a97927a946dccecc.roa
Signing time:             Thu 14 Apr 2022 17:17:01 +0000
ROA not before:           Thu 14 Apr 2022 03:00:00 +0000
ROA not after:            Sat 13 Apr 2024 03:00:00 +0000
asID:                     3549
IP address blocks:        170.83.76.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1489361 (0x16b9d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bee98b52bf99165b867835f5390295e9317bb56
        Validity
            Not Before: Apr 14 03:00:00 2022 GMT
            Not After : Apr 13 03:00:00 2024 GMT
        Subject: CN=d7f12b07c82d794d26dfdfc0a97927a946dccecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:08:58:ba:d5:37:c6:66:12:07:a4:16:6f:ff:
                    48:6b:16:0a:81:18:31:35:78:d6:78:1e:8f:8c:4a:
                    cf:7a:ac:fd:97:35:18:68:2d:64:14:2f:9e:59:6d:
                    65:55:1b:ea:fe:22:17:0c:7c:a6:54:02:90:ef:a5:
                    ed:44:a3:80:15:37:42:c7:05:53:0e:85:fb:d0:55:
                    4e:44:f7:3b:b3:e5:53:d8:92:e0:43:3d:04:82:df:
                    1f:f3:25:5d:5e:49:50:e7:8a:ac:7c:79:08:f8:3c:
                    97:e3:88:2f:cf:16:0e:51:a0:40:ef:63:92:9f:fc:
                    92:26:56:31:c4:03:1b:ec:61:81:8e:2f:1d:f2:82:
                    8e:80:3a:67:09:42:3e:f1:24:14:f6:08:96:ea:2f:
                    c5:18:0b:ab:d7:8a:45:6e:78:97:cc:c4:15:d8:7b:
                    2b:d9:b6:37:95:9d:d0:66:47:2b:f9:36:fa:04:c1:
                    86:29:ba:0e:c0:0f:97:c7:cb:73:12:2f:ea:eb:ad:
                    63:cf:58:4c:ec:84:4d:14:5f:97:00:1e:17:6d:ce:
                    b7:fc:90:37:d9:2b:ae:0b:04:91:11:d1:43:0a:13:
                    e5:0d:7d:1c:9c:49:1d:93:c8:c7:4a:34:fe:43:a4:
                    a4:ff:a9:4d:a3:66:ec:bd:90:af:e5:f6:24:9c:3a:
                    a1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A7:79:6F:8C:C3:75:17:62:EE:6B:6A:0C:83:27:20:40:44:5F:B5
            X509v3 Authority Key Identifier:
                keyid:87:A5:C2:9F:E4:B7:C1:E4:BD:3A:BD:43:2B:17:A8:47:60:1D:4E:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bee98b52bf99165b867835f5390295e9317bb56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/d7f12b07c82d794d26dfdfc0a97927a946dccecc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/2bee98b52bf99165b867835f5390295e9317bb56.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:64:f4:1b:30:4b:88:ad:3c:c1:8f:5c:61:51:17:5b:8e:95:
         1d:b0:49:e5:32:93:38:17:13:f3:e2:20:38:56:b8:53:bd:da:
         c8:cf:a9:a8:b4:d0:5e:5d:46:aa:a9:06:f7:89:54:d2:85:5d:
         52:38:c1:ad:24:ce:c3:5f:64:5a:ff:2d:b3:94:66:89:c2:84:
         d0:07:db:ef:0e:8e:11:56:f1:b6:ff:a5:64:74:49:2d:da:c4:
         e5:7c:0f:f8:0f:91:94:c9:5d:da:ea:e4:22:18:09:5d:97:b3:
         86:85:02:87:64:b0:17:c9:57:0c:9b:d6:c6:58:95:77:3a:d3:
         66:6a:cc:04:01:b4:02:b5:4e:b0:32:01:17:18:cf:13:e5:4c:
         03:fb:42:0d:6e:55:94:5a:b3:01:09:5d:ad:e8:d5:27:40:a7:
         2a:16:f6:a6:d1:50:0f:12:c2:c4:55:ec:fb:3a:d9:86:dd:c8:
         eb:f0:7e:a5:31:ba:eb:9b:cd:8e:ea:39:c0:0e:aa:d6:79:f6:
         be:61:5e:ff:69:db:da:00:ba:25:f8:9c:89:84:9a:73:24:a1:
         47:5f:90:d1:b2:a6:c9:a0:99:20:08:1b:27:f2:3a:f5:7d:57:
         af:d5:11:c3:3c:34:2c:d8:3e:54:9e:f6:a1:9d:e1:4f:e5:40:
         7d:7d:d8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----