Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/eb81f6630bcf24da406f221418078a96e0eab83b.roa
File:                     eb81f6630bcf24da406f221418078a96e0eab83b.roa (raw, json)
Hash identifier:          stb6Nx9VTuNqDgWvTIc8k2ohNtbcrBZhXnokpgPICsY=
Subject key identifier:   55:15:44:16:5C:DB:BD:1B:35:A2:D5:DA:F6:37:AF:63:C5:9E:28:48
Certificate issuer:       /CN=88c828fbf7c4212619b24a7d12142f15f0f5ffea
Certificate serial:       5505
Authority key identifier: 6A:15:80:3C:4B:16:44:9A:6C:C1:B1:2E:28:E8:2C:8F:E8:A7:6F:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88c828fbf7c4212619b24a7d12142f15f0f5ffea.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/eb81f6630bcf24da406f221418078a96e0eab83b.roa
Signing time:             Wed 22 Feb 2023 14:51:06 +0000
ROA not before:           Tue 21 Feb 2023 14:50:37 +0000
ROA not after:            Sat 22 Feb 2025 14:50:37 +0000
asID:                     270088
IP address blocks:        170.0.8.0/22 maxlen: 22
                          2803:bbe0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21765 (0x5505)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88c828fbf7c4212619b24a7d12142f15f0f5ffea
        Validity
            Not Before: Feb 21 14:50:37 2023 GMT
            Not After : Feb 22 14:50:37 2025 GMT
        Subject: CN=eb81f6630bcf24da406f221418078a96e0eab83b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fe:69:50:d9:3d:c2:ef:69:fb:bf:3b:0a:19:
                    ae:e1:68:25:cd:a3:b7:67:a0:ef:f3:e0:74:7a:b5:
                    8d:c3:da:83:29:da:4f:45:77:bf:49:05:93:80:16:
                    d2:df:78:fb:6b:38:91:9c:41:12:83:93:a4:7c:55:
                    b6:10:27:10:2e:98:81:cd:89:2f:bc:dc:12:9e:5d:
                    9b:ab:e2:a6:cf:63:57:9e:05:2d:6e:8a:78:bc:bf:
                    c2:85:2f:f8:3f:60:56:7d:ea:b7:d4:0a:12:91:0d:
                    7d:5e:a1:27:a1:4a:17:4d:84:1b:45:f4:bb:51:41:
                    f1:b4:01:21:b6:1b:46:54:23:8e:10:38:ee:23:61:
                    ab:0a:07:e0:7a:fe:cd:27:6a:a2:68:a9:7a:62:ec:
                    47:2e:5f:cc:b3:3c:60:8d:55:7b:e1:41:b8:e0:50:
                    41:fd:a9:5b:8f:cb:8f:41:83:5a:21:e2:3b:19:74:
                    4e:d1:17:0a:b3:06:97:50:3c:68:a5:a6:57:b0:10:
                    bd:66:58:1a:2f:62:13:7b:dc:3a:41:15:20:36:90:
                    22:e6:1f:7e:41:11:ef:ce:ef:49:d8:47:91:08:93:
                    05:0e:5d:ad:91:76:51:d0:bf:2b:8f:c0:1e:79:67:
                    ac:31:25:c4:85:18:58:ed:51:c1:ca:c4:39:93:51:
                    12:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:15:44:16:5C:DB:BD:1B:35:A2:D5:DA:F6:37:AF:63:C5:9E:28:48
            X509v3 Authority Key Identifier:
                keyid:6A:15:80:3C:4B:16:44:9A:6C:C1:B1:2E:28:E8:2C:8F:E8:A7:6F:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88c828fbf7c4212619b24a7d12142f15f0f5ffea.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/eb81f6630bcf24da406f221418078a96e0eab83b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/88c828fbf7c4212619b24a7d12142f15f0f5ffea.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.8.0/22
                IPv6:
                  2803:bbe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:1b:40:85:d0:ae:a3:0b:24:df:0f:0c:4a:d5:14:0a:4f:2f:
         e2:8d:1e:1f:6a:b9:6f:a8:f2:28:1a:0f:b2:af:c7:05:e6:cb:
         c3:82:90:a7:47:8a:38:59:a8:36:6b:66:81:98:c4:64:a4:37:
         97:2f:82:ec:87:02:cc:ad:93:9d:ab:a7:2c:d4:e4:c8:53:57:
         38:e5:bb:c9:d0:2d:6e:00:e6:55:8a:5b:ed:39:c5:3c:90:b6:
         6d:09:2b:85:26:d9:3a:9f:e4:c1:ab:84:fc:d3:62:10:25:a0:
         07:27:0d:bc:63:10:53:72:93:84:a6:4e:96:35:dd:ff:46:cf:
         85:29:c0:9d:55:6c:e8:f4:8e:5d:b6:2b:a0:7a:1b:e4:0b:d1:
         3b:1b:5e:67:36:37:76:6e:2f:8e:39:fe:38:40:35:4f:1e:bf:
         42:bc:f0:88:ab:1b:73:5c:7c:39:17:0d:0a:2c:60:09:5d:47:
         1c:73:d5:53:86:66:a3:6e:16:36:8c:d1:53:e9:5a:14:4e:34:
         28:6f:ed:ad:29:24:fc:d7:73:8b:60:b1:a3:d1:fb:35:3b:73:
         8f:e7:f2:a8:0d:75:33:87:13:72:5a:97:d7:24:e2:a5:e8:02:
         d7:4a:c1:c3:4e:c9:09:43:55:74:7e:24:01:b0:b1:42:63:29:
         91:3f:bb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----