Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/095602b172c003737704195961a4d1172cbf3f88.roa
File:                     095602b172c003737704195961a4d1172cbf3f88.roa (raw, json)
Hash identifier:          wqTijwenx4xOzAsL7oDpSinc7RQFb2SxqZs5L32UFKM=
Subject key identifier:   13:FA:CF:1C:D6:20:71:C0:86:15:D5:76:24:9D:BC:27:55:81:4C:24
Certificate issuer:       /CN=88c828fbf7c4212619b24a7d12142f15f0f5ffea
Certificate serial:       3F08
Authority key identifier: 6A:15:80:3C:4B:16:44:9A:6C:C1:B1:2E:28:E8:2C:8F:E8:A7:6F:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88c828fbf7c4212619b24a7d12142f15f0f5ffea.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/095602b172c003737704195961a4d1172cbf3f88.roa
Signing time:             Mon 20 Feb 2023 13:18:03 +0000
ROA not before:           Sun 19 Feb 2023 13:18:03 +0000
ROA not after:            Sun 20 Feb 2028 14:18:03 +0000
asID:                     270088
IP address blocks:        170.0.8.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16136 (0x3f08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88c828fbf7c4212619b24a7d12142f15f0f5ffea
        Validity
            Not Before: Feb 19 13:18:03 2023 GMT
            Not After : Feb 20 14:18:03 2028 GMT
        Subject: CN=095602b172c003737704195961a4d1172cbf3f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2d:6c:a6:1b:79:58:74:4e:20:47:82:7e:0f:
                    ea:a5:b2:f9:62:00:3a:0d:c2:1e:b6:65:c0:48:ef:
                    c0:cd:dd:e1:d1:7e:03:6a:e1:a1:eb:08:42:8f:26:
                    df:a3:ea:08:2b:1b:51:f6:c3:d1:28:72:cd:d2:3b:
                    8f:a0:fe:b0:78:80:1f:e5:61:d5:31:53:ab:1b:74:
                    4c:e0:20:b6:ed:63:30:8e:3e:a8:e6:3c:2e:06:5b:
                    a6:c4:3e:4b:c9:f7:05:f9:a6:bd:2f:5e:59:1d:e4:
                    fb:85:8e:98:9f:e4:ef:25:bd:a6:c5:cd:4f:a4:5f:
                    53:30:93:a8:e9:e7:a7:0a:76:39:e3:45:8f:98:b9:
                    75:f3:5a:c8:53:75:a1:7a:ac:3f:9a:e2:40:9d:3a:
                    d4:61:64:67:e5:f6:cd:07:e0:ac:66:88:28:4e:c1:
                    17:f7:72:47:e7:33:96:f9:54:94:83:75:48:77:a9:
                    d3:85:f6:eb:7e:26:d8:7b:b4:ef:f3:24:4c:6a:e5:
                    ef:cc:8d:e6:8d:33:7e:7e:5e:7e:10:f2:6e:ab:7f:
                    0e:e3:5b:7d:cf:6a:e8:58:7c:5c:e3:2b:22:8c:ad:
                    e5:11:88:b5:ce:d1:59:45:a3:b9:96:87:1f:9b:29:
                    3f:22:5f:a6:04:09:ec:b5:54:ee:9f:d9:cb:61:21:
                    86:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FA:CF:1C:D6:20:71:C0:86:15:D5:76:24:9D:BC:27:55:81:4C:24
            X509v3 Authority Key Identifier:
                keyid:6A:15:80:3C:4B:16:44:9A:6C:C1:B1:2E:28:E8:2C:8F:E8:A7:6F:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88c828fbf7c4212619b24a7d12142f15f0f5ffea.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/095602b172c003737704195961a4d1172cbf3f88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/88c828fbf7c4212619b24a7d12142f15f0f5ffea.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:0f:1a:46:bc:10:ad:5d:fc:8c:77:b7:23:a7:b5:35:de:ff:
         b1:40:83:e2:32:57:77:cb:b5:00:40:3f:c9:e5:b1:bb:1a:ba:
         1d:30:b2:1a:3a:89:23:81:7e:24:45:a4:61:e4:0a:6f:2c:1b:
         67:bb:47:7f:09:1f:a6:fd:d9:d5:ef:cf:a0:7b:7c:09:e9:90:
         f2:73:9e:28:39:1f:a1:27:40:ff:77:d4:a4:fe:64:05:1d:74:
         41:8c:11:b0:2c:62:c0:56:53:d7:cc:0e:f2:1e:92:ee:a1:bc:
         a0:0a:be:51:46:12:b1:05:20:12:27:50:34:e0:2f:69:8f:93:
         96:8d:e7:e6:5e:21:79:60:28:2f:bc:5b:4b:01:0e:37:6f:cf:
         36:cc:f9:b5:47:a2:50:15:6f:44:e6:91:e4:d3:87:cb:79:b6:
         c4:07:63:7d:07:a0:c8:f3:eb:eb:aa:e6:08:54:90:6c:91:20:
         aa:47:b6:67:59:c4:76:7f:01:47:31:c4:bc:8c:2c:a0:ce:19:
         50:0f:fc:1c:c2:ea:ac:98:7d:2a:58:13:bb:54:bc:c4:29:f0:
         59:e7:79:b9:4a:24:ca:b5:ce:a6:e7:29:92:cc:0b:2d:27:7e:
         b6:79:86:3a:30:e7:11:11:0b:fd:d9:42:79:25:66:21:b3:a4:
         01:bc:e7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----