Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0660d337-0aef-454c-a658-62d790871876/30d46dc7129eca9b0632dd89ea8af309495e5678.roa
File:                     30d46dc7129eca9b0632dd89ea8af309495e5678.roa (raw, json)
Hash identifier:          a83kwAbRq/Ycsx5O6XfbLF57ljfXIAcecAVV68j1DoI=
Subject key identifier:   59:CF:EE:32:76:4C:A8:74:49:16:1B:7E:7C:E7:45:AF:77:A6:6F:ED
Certificate issuer:       /CN=daf03b5f2aa056a2e408167aec0955b11e79bf2b
Certificate serial:       0620F9
Authority key identifier: 82:BB:7F:17:20:E8:F3:5F:E0:95:09:12:C7:88:B6:62:F6:26:CF:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/daf03b5f2aa056a2e408167aec0955b11e79bf2b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0660d337-0aef-454c-a658-62d790871876/30d46dc7129eca9b0632dd89ea8af309495e5678.roa
Signing time:             Fri 14 May 2021 12:45:36 +0000
ROA not before:           Fri 14 May 2021 03:00:00 +0000
ROA not after:            Sun 14 May 2023 03:00:00 +0000
asID:                     262231
IP address blocks:        190.103.144.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401657 (0x620f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daf03b5f2aa056a2e408167aec0955b11e79bf2b
        Validity
            Not Before: May 14 03:00:00 2021 GMT
            Not After : May 14 03:00:00 2023 GMT
        Subject: CN=30d46dc7129eca9b0632dd89ea8af309495e5678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:61:de:5a:34:3b:5f:10:9c:a8:92:da:1d:b4:
                    a8:c0:45:f3:9e:db:8c:f2:32:5a:2d:5b:29:22:a1:
                    54:33:cb:d0:55:6e:d3:6c:6a:a0:69:4f:ea:37:92:
                    29:ca:96:70:48:ad:a7:d7:b2:7d:48:11:2c:cc:52:
                    c7:f8:52:f0:6b:d9:f7:9e:c4:33:b9:41:82:67:45:
                    fd:94:96:4d:fa:b3:b0:cb:99:5c:4a:7f:4d:f7:38:
                    4f:fc:09:da:ba:fc:93:6c:8f:2e:d3:28:83:4e:28:
                    38:6c:83:ba:af:49:e2:3e:0c:ae:97:0d:2f:c9:ac:
                    b5:a4:5a:f6:0b:16:6f:81:6b:a8:16:ae:d8:fe:f5:
                    47:7e:d6:4b:6f:6a:b3:b4:55:27:38:f4:35:84:33:
                    26:4e:7f:e0:7d:45:5c:03:84:73:9c:84:b3:f8:f7:
                    15:a5:fd:e5:c9:cd:9d:80:77:cd:0a:af:d8:9b:39:
                    77:f2:96:47:e0:6d:77:f8:f9:50:66:3b:27:d9:44:
                    a9:b3:41:ac:41:e9:86:d7:d0:5a:c5:76:d8:f4:8b:
                    38:6b:e5:4e:20:05:23:dd:d8:f1:28:fd:38:24:63:
                    82:e6:37:8a:38:a1:d8:70:71:50:a0:d0:d0:3d:57:
                    13:1b:d3:af:59:e4:16:c5:bb:b4:49:5f:5f:a8:d6:
                    e1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CF:EE:32:76:4C:A8:74:49:16:1B:7E:7C:E7:45:AF:77:A6:6F:ED
            X509v3 Authority Key Identifier:
                keyid:82:BB:7F:17:20:E8:F3:5F:E0:95:09:12:C7:88:B6:62:F6:26:CF:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/daf03b5f2aa056a2e408167aec0955b11e79bf2b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0660d337-0aef-454c-a658-62d790871876/30d46dc7129eca9b0632dd89ea8af309495e5678.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0660d337-0aef-454c-a658-62d790871876/daf03b5f2aa056a2e408167aec0955b11e79bf2b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:be:76:3c:5f:c9:48:51:1f:81:a0:b1:ce:b5:4d:5e:39:85:
         7f:37:6d:5f:07:6d:c2:2a:35:e1:ef:c7:bf:e1:ac:b2:b1:6e:
         59:be:fc:1b:f5:a3:10:79:ea:9b:1b:fd:61:20:2a:58:a5:fa:
         cc:c9:d7:c7:88:93:12:63:88:15:29:f0:1b:3e:48:13:61:49:
         aa:06:9d:0b:50:ab:c3:f3:a4:b2:4a:72:b1:50:fe:cf:4b:8f:
         a9:3a:6a:64:f8:92:64:96:59:62:30:ba:27:93:1e:10:a3:57:
         6c:76:8b:2a:a2:fd:4d:07:db:35:5f:17:5f:dc:6d:29:6b:5c:
         7d:30:5a:ea:1d:94:64:a3:3b:a2:79:15:d2:6c:cd:3f:3d:78:
         97:ba:96:bd:42:7b:09:52:48:5b:36:a3:bc:98:ab:2a:1f:aa:
         f7:21:75:46:1c:25:69:17:01:db:8e:ca:80:79:d4:d8:5a:e5:
         9e:fc:d1:fe:78:51:1c:64:53:e8:c2:e3:9a:ed:5c:12:85:e9:
         72:80:7a:29:95:69:c4:05:54:57:90:ad:a6:8c:c8:b5:dc:08:
         7b:77:a7:2a:8b:d1:d8:5c:d7:fb:64:a4:e7:15:25:28:6e:3f:
         46:b3:29:a4:77:cc:74:8e:8f:94:de:b2:24:fc:2d:70:2e:57:
         fc:a3:90:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----