Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/ff0ba6f805940752e3bef1602c96450ec5bb5216.roa
File:                     ff0ba6f805940752e3bef1602c96450ec5bb5216.roa (raw, json)
Hash identifier:          rP+hNy5lyItc+8mrEc2RZUcV/+3c/mWzq54naHu9kLY=
Subject key identifier:   1F:91:3E:87:BE:B9:08:7A:D2:5E:15:26:AE:53:08:36:05:B2:CA:9A
Certificate issuer:       /CN=2bee98b52bf99165b867835f5390295e9317bb56
Certificate serial:       16E600
Authority key identifier: 87:A5:C2:9F:E4:B7:C1:E4:BD:3A:BD:43:2B:17:A8:47:60:1D:4E:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bee98b52bf99165b867835f5390295e9317bb56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/ff0ba6f805940752e3bef1602c96450ec5bb5216.roa
Signing time:             Tue 19 Apr 2022 13:03:46 +0000
ROA not before:           Tue 19 Apr 2022 03:00:00 +0000
ROA not after:            Fri 19 Apr 2024 03:00:00 +0000
asID:                     266841
IP address blocks:        170.83.76.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1500672 (0x16e600)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bee98b52bf99165b867835f5390295e9317bb56
        Validity
            Not Before: Apr 19 03:00:00 2022 GMT
            Not After : Apr 19 03:00:00 2024 GMT
        Subject: CN=ff0ba6f805940752e3bef1602c96450ec5bb5216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b0:c4:e4:db:d0:32:64:f1:78:a0:e5:58:fc:
                    01:4d:89:9e:ab:db:0c:14:81:c3:cf:36:89:6f:80:
                    d1:19:05:c8:de:aa:4c:dc:0e:7d:df:42:74:1a:ab:
                    dc:d1:b0:4f:b5:8b:25:8f:c1:68:81:bc:08:db:7e:
                    67:91:4d:e7:e8:9f:fe:f1:7c:ea:e5:74:9f:23:d5:
                    66:df:2a:60:a4:0e:9e:7f:ff:58:69:4d:1c:3b:d6:
                    17:34:59:0a:02:64:63:b6:69:b7:05:99:cf:f9:26:
                    ba:99:f9:61:80:d8:f2:19:80:d8:59:68:df:7c:b7:
                    17:30:e5:29:03:a9:d2:37:ea:49:b7:09:5f:24:e4:
                    0f:89:69:aa:d3:e8:bc:5b:a6:e4:44:81:4f:69:b7:
                    2f:29:0b:9c:3f:b2:2e:6f:54:4e:20:9b:27:2c:38:
                    13:dd:5a:49:51:05:30:51:a8:54:b4:70:b9:dd:b8:
                    dc:7f:03:e4:d4:f8:b4:3f:32:7e:01:0c:55:44:81:
                    ba:d7:7d:5b:ed:b1:d0:5f:6c:79:93:10:1d:17:ee:
                    4a:fd:d8:30:c0:71:ef:4c:bb:75:94:93:09:58:4e:
                    36:a9:af:59:e5:f6:c2:2c:86:da:f1:4a:5f:02:90:
                    5f:bf:e3:1d:05:46:dc:55:a1:f7:10:8e:7a:bd:20:
                    37:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:91:3E:87:BE:B9:08:7A:D2:5E:15:26:AE:53:08:36:05:B2:CA:9A
            X509v3 Authority Key Identifier:
                keyid:87:A5:C2:9F:E4:B7:C1:E4:BD:3A:BD:43:2B:17:A8:47:60:1D:4E:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bee98b52bf99165b867835f5390295e9317bb56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/ff0ba6f805940752e3bef1602c96450ec5bb5216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/2bee98b52bf99165b867835f5390295e9317bb56.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:8e:45:31:41:c8:46:33:ad:8b:45:df:59:a3:bf:e6:49:5d:
         e1:07:00:75:d1:96:5f:3a:8d:40:b4:0e:07:84:21:74:5e:0d:
         47:0e:27:5a:13:4c:e1:56:be:9c:53:ef:f1:ca:76:c7:82:fa:
         c9:22:b4:a5:51:bb:4e:09:0a:63:0e:5a:44:05:6f:36:f1:50:
         6d:94:56:76:16:76:c0:70:b7:0f:ad:6d:b8:ee:61:bb:23:30:
         8f:94:f7:45:0b:38:f0:11:69:58:99:74:d5:24:02:50:20:e2:
         ef:43:bd:22:99:e2:46:b7:0c:7e:83:c5:1a:fc:2b:41:e3:d4:
         49:5b:e3:dc:31:3c:ca:91:74:9c:55:68:5d:2c:74:fc:61:73:
         a0:b5:b4:a3:e0:99:fc:54:c6:87:76:87:18:f7:c3:c4:cc:c5:
         12:cb:07:f7:50:2e:84:09:44:56:f8:a1:cb:17:52:3b:fc:28:
         98:60:a0:be:b6:38:ea:d0:0b:1e:8e:76:dc:10:41:5c:de:64:
         b4:63:13:a6:67:0e:d0:fb:33:8b:ed:f8:cb:7b:d9:df:b8:e3:
         1f:e0:d9:80:74:0c:95:e4:33:8a:a6:65:0d:e6:cc:63:da:4d:
         fb:59:72:be:7b:53:76:f6:09:ee:f9:19:09:47:d7:b8:79:e7:
         40:c7:2d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----