Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/2de1712fab876319cf1d80f56772ee5d79a79d6a.roa
File:                     2de1712fab876319cf1d80f56772ee5d79a79d6a.roa (raw, json)
Hash identifier:          LvvJRFA1810qkdQi+rSuOFVDH/lAEjw2L2XZYoCDaUc=
Subject key identifier:   10:97:BE:07:8A:6E:F7:25:98:42:F0:0F:E1:15:32:72:F8:12:D1:AE
Certificate issuer:       /CN=88c828fbf7c4212619b24a7d12142f15f0f5ffea
Certificate serial:       216D
Authority key identifier: 6A:15:80:3C:4B:16:44:9A:6C:C1:B1:2E:28:E8:2C:8F:E8:A7:6F:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88c828fbf7c4212619b24a7d12142f15f0f5ffea.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/2de1712fab876319cf1d80f56772ee5d79a79d6a.roa
Signing time:             Fri 17 Feb 2023 16:26:37 +0000
ROA not before:           Sat 11 Feb 2023 23:11:38 +0000
ROA not after:            Sat 15 Feb 2025 23:11:38 +0000
asID:                     262589
IP address blocks:        170.0.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8557 (0x216d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88c828fbf7c4212619b24a7d12142f15f0f5ffea
        Validity
            Not Before: Feb 11 23:11:38 2023 GMT
            Not After : Feb 15 23:11:38 2025 GMT
        Subject: CN=2de1712fab876319cf1d80f56772ee5d79a79d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d3:1a:6c:97:4e:29:13:54:90:24:e7:98:a5:
                    66:a1:cf:00:31:fa:3a:d0:e9:a8:5f:f1:71:06:e6:
                    9a:1c:c5:6f:97:e3:50:07:63:a7:f4:07:d8:7c:b7:
                    e7:5e:c6:a7:2d:0b:af:09:5e:2f:b3:a6:a0:40:ff:
                    22:de:3f:45:17:14:3e:fb:3b:fd:47:39:52:50:7b:
                    5c:96:25:9f:5d:25:a2:8c:f2:a0:05:ea:30:15:da:
                    19:47:43:65:e7:71:f4:4a:4f:2b:64:2b:b4:ad:46:
                    8c:2c:e5:6b:1c:bf:1c:c4:34:77:ef:49:63:00:3a:
                    26:f0:bb:1b:53:f9:22:9b:31:f4:7d:79:5e:f4:54:
                    03:a0:0f:fc:55:58:9c:54:34:e2:58:89:01:00:b3:
                    92:0f:ff:6e:23:45:9b:65:f4:9b:f1:b7:0b:89:26:
                    54:1a:fb:0f:b7:af:14:c2:43:9e:5d:3d:24:71:0a:
                    94:f7:33:15:8e:d6:23:70:58:f6:e4:4c:b0:a8:35:
                    90:6a:27:f2:6c:9e:33:8a:72:8f:b8:99:ac:a6:b8:
                    60:28:bb:4f:1b:c2:8b:72:e0:1e:1f:60:d0:36:82:
                    68:28:71:a6:5f:a4:c1:44:f1:c3:7d:93:84:c0:c4:
                    84:7f:f5:cd:1f:b1:56:80:3b:c3:3e:53:b9:f8:f9:
                    4d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:97:BE:07:8A:6E:F7:25:98:42:F0:0F:E1:15:32:72:F8:12:D1:AE
            X509v3 Authority Key Identifier:
                keyid:6A:15:80:3C:4B:16:44:9A:6C:C1:B1:2E:28:E8:2C:8F:E8:A7:6F:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88c828fbf7c4212619b24a7d12142f15f0f5ffea.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/2de1712fab876319cf1d80f56772ee5d79a79d6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/88c828fbf7c4212619b24a7d12142f15f0f5ffea.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:ec:a3:40:7c:61:d2:3f:69:f5:fe:2f:c0:0c:30:55:39:40:
         44:2f:14:65:42:70:d0:37:b7:3e:46:a1:48:e4:f3:5e:cf:c7:
         9a:ac:d7:5e:0e:de:b5:a3:0a:16:1c:3a:39:0e:36:b1:73:0b:
         24:a8:b6:76:61:70:bc:ac:96:4c:92:6e:41:aa:22:cb:ce:73:
         b0:2d:0f:ad:5b:a8:a7:2b:04:82:30:da:6f:19:10:c3:11:68:
         b9:86:8f:70:2c:0f:40:87:85:f6:0c:05:79:96:74:68:d0:47:
         03:67:0a:e7:7a:0f:11:10:e5:6f:81:d6:6d:79:1f:e7:5a:b9:
         03:6d:4f:e7:11:58:86:af:1e:4f:5c:a6:42:8b:08:42:ba:27:
         4e:9f:e6:c9:20:55:e2:30:98:83:b0:dd:8a:41:d4:be:3c:93:
         cb:c7:32:b3:ca:1f:00:aa:e1:e9:27:7c:72:c5:99:55:fd:7b:
         f9:e4:91:af:a9:28:2f:d7:47:cb:14:f5:16:55:b2:98:e4:e7:
         c0:fa:6d:e7:67:b6:2f:ee:5b:07:35:76:b1:9f:b1:e4:be:8a:
         42:7a:ad:77:c2:96:38:55:53:26:23:b4:7d:b3:ad:d6:a8:97:
         16:25:92:23:6f:f3:17:09:0d:59:ce:79:2a:2e:8d:ca:3b:03:
         7d:f3:23:ce
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICIW0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODhj
ODI4ZmJmN2M0MjEyNjE5YjI0YTdkMTIxNDJmMTVmMGY1ZmZlYTAeFw0yMzAyMTEy
MzExMzhaFw0yNTAyMTUyMzExMzhaMDMxMTAvBgNVBAMTKDJkZTE3MTJmYWI4NzYz
MTljZjFkODBmNTY3NzJlZTVkNzlhNzlkNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDK0xpsl04pE1SQJOeYpWahzwAx+jrQ6ahf8XEG5pocxW+X41AH
Y6f0B9h8t+dexqctC68JXi+zpqBA/yLeP0UXFD77O/1HOVJQe1yWJZ9dJaKM8qAF
6jAV2hlHQ2XncfRKTytkK7StRows5WscvxzENHfvSWMAOibwuxtT+SKbMfR9eV70
VAOgD/xVWJxUNOJYiQEAs5IP/24jRZtl9JvxtwuJJlQa+w+3rxTCQ55dPSRxCpT3
MxWO1iNwWPbkTLCoNZBqJ/JsnjOKco+4maymuGAou08bwoty4B4fYNA2gmgocaZf
pMFE8cN9k4TAxIR/9c0fsVaAO8M+U7n4+U2XAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUEJe+B4pu9yWYQvAP4RUycvgS0a4wHwYDVR0jBBgwFoAUahWAPEsWRJpswbEu
KOgsj+inb/YwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS84OGM4Mjhm
YmY3YzQyMTI2MTliMjRhN2QxMjE0MmYxNWYwZjVmZmVhLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9mYjFkZjlhYS1hOWJjLTRmM2MtOGU1Mi03MTE0NmE2
MTk2ZjkvMmRlMTcxMmZhYjg3NjMxOWNmMWQ4MGY1Njc3MmVlNWQ3OWE3OWQ2YS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2ZiMWRmOWFhLWE5YmMtNGYzYy04ZTUyLTcxMTQ2
YTYxOTZmOS84OGM4MjhmYmY3YzQyMTI2MTliMjRhN2QxMjE0MmYxNWYwZjVmZmVh
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQAqgAIMA0GCSqGSIb3DQEBCwUAA4IBAQAY7KNAfGHSP2n1/i/A
DDBVOUBELxRlQnDQN7c+RqFI5PNez8earNdeDt61owoWHDo5DjaxcwskqLZ2YXC8
rJZMkm5BqiLLznOwLQ+tW6inKwSCMNpvGRDDEWi5ho9wLA9Ah4X2DAV5lnRo0EcD
Zwrneg8REOVvgdZteR/nWrkDbU/nEViGrx5PXKZCiwhCuidOn+bJIFXiMJiDsN2K
QdS+PJPLxzKzyh8AquHpJ3xyxZlV/Xv55JGvqSgv10fLFPUWVbKY5OfA+m3nZ7Yv
7lsHNXaxn7HkvopCeq13wpY4VVMmI7R9s63WqJcWJZIjb/MXCQ1ZznkqLo3KOwN9
8yPO
-----END CERTIFICATE-----