Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/2cfbed856bb63f714d0572b5081eed520ee2b8f8.roa
File:                     2cfbed856bb63f714d0572b5081eed520ee2b8f8.roa (raw, json)
Hash identifier:          p3tLQUxxbCjaQ0qnWQOScn9UjdIQwz+mJj2L5Wt+KWw=
Subject key identifier:   6A:ED:06:52:E8:7C:84:E7:88:75:B1:18:83:DF:39:7B:D8:80:91:DE
Certificate issuer:       /CN=444e0076eea4611dce8c3e39bffef12743fb4711
Certificate serial:       121E06
Authority key identifier: EE:26:82:A5:CE:1B:FE:87:23:F4:04:B2:48:79:20:48:7B:18:9A:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/444e0076eea4611dce8c3e39bffef12743fb4711.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/2cfbed856bb63f714d0572b5081eed520ee2b8f8.roa
Signing time:             Fri 12 Aug 2022 17:52:07 +0000
ROA not before:           Mon 31 Jan 2022 03:00:00 +0000
ROA not after:            Wed 31 Jan 2024 03:00:00 +0000
asID:                     27988
IP address blocks:        189.90.228.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1187334 (0x121e06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444e0076eea4611dce8c3e39bffef12743fb4711
        Validity
            Not Before: Jan 31 03:00:00 2022 GMT
            Not After : Jan 31 03:00:00 2024 GMT
        Subject: CN=2cfbed856bb63f714d0572b5081eed520ee2b8f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d7:bc:9b:df:d9:0f:b4:1a:7a:79:6f:a4:53:
                    46:3e:31:8a:16:81:6e:de:6c:25:11:c0:15:23:39:
                    25:c3:64:3f:bd:d1:1c:1f:6b:42:75:85:2c:60:a6:
                    83:0d:8e:45:07:24:f9:80:88:e9:34:08:2a:10:42:
                    32:ae:06:d3:fe:98:64:8a:d9:e6:20:aa:ba:e1:7a:
                    7a:91:a5:6f:c2:cd:3f:54:82:23:d3:17:20:3e:c3:
                    ac:db:d8:19:44:9e:ab:95:9b:2b:41:e5:e9:a8:75:
                    12:fb:22:0c:b9:b7:2c:81:41:82:56:e3:cb:5d:ac:
                    70:14:c7:92:ea:00:c4:aa:34:84:3d:c0:54:e9:30:
                    f9:05:eb:eb:5a:3e:17:90:83:2e:2b:c2:d3:74:52:
                    7b:be:62:c6:a1:d6:b7:c6:95:71:38:a0:1e:c3:38:
                    f9:c4:bb:77:06:38:9d:01:a0:df:ee:2b:95:4c:b7:
                    20:10:ac:6d:82:89:eb:e9:63:4f:72:cb:87:ef:4e:
                    48:1c:0e:9d:53:23:96:b4:54:8a:2b:9c:4d:d9:63:
                    d7:27:cd:15:f4:f1:5a:9d:63:4c:4f:b9:29:b5:5d:
                    1c:26:1a:94:bc:34:ed:01:0f:0d:c9:3d:fa:cc:45:
                    23:3e:fa:b2:c1:11:6c:ba:06:b2:e7:2b:11:1e:33:
                    b2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:ED:06:52:E8:7C:84:E7:88:75:B1:18:83:DF:39:7B:D8:80:91:DE
            X509v3 Authority Key Identifier:
                keyid:EE:26:82:A5:CE:1B:FE:87:23:F4:04:B2:48:79:20:48:7B:18:9A:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/444e0076eea4611dce8c3e39bffef12743fb4711.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/2cfbed856bb63f714d0572b5081eed520ee2b8f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/444e0076eea4611dce8c3e39bffef12743fb4711.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:e5:84:fa:ee:0c:13:bd:ea:db:1e:6c:7a:5f:a3:15:f7:09:
         e2:ba:97:a2:bc:61:c2:67:6a:49:a9:3e:c6:29:ed:4b:02:cf:
         c3:e6:f2:da:8b:9f:4c:eb:35:b2:83:1a:e5:44:85:d7:a6:5f:
         73:2e:c4:00:e6:17:22:60:53:35:f8:39:39:5b:fc:27:63:f0:
         9b:0e:45:be:d4:1d:62:39:e4:bc:50:29:b0:ad:21:e3:8f:8b:
         1b:50:2d:fc:27:2c:43:7c:0a:9c:b8:a1:18:ed:b2:eb:cd:f4:
         94:0b:81:c1:19:79:60:25:a6:3e:ad:81:f7:e7:c3:20:31:50:
         f0:bd:81:03:60:3b:57:05:b8:b0:34:f0:50:d3:2d:1c:a0:a2:
         1a:62:ef:0e:6c:7d:40:e0:2e:5e:57:e0:18:a5:7a:2f:f3:c5:
         55:96:ce:35:87:c7:27:aa:99:d7:d9:e6:67:d3:9b:fe:cb:4e:
         f9:55:44:a7:e0:26:13:d8:bf:d7:9b:b1:20:b3:2a:a5:f9:0f:
         6b:c6:7b:b5:79:58:f8:e9:a0:fe:91:fe:83:7e:a5:7d:24:f1:
         16:1a:dd:fc:ed:51:ef:90:13:f6:34:89:95:c3:2a:01:f3:b9:
         a3:87:0d:92:28:00:54:ca:3b:38:1d:0c:f1:fa:4f:fc:a0:5b:
         ec:11:8d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----