Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/be2217b13b01184877fc4f22b2ae06651c010d4c.roa
File:                     be2217b13b01184877fc4f22b2ae06651c010d4c.roa (raw, json)
Hash identifier:          Qb7YWdTsZAayqWlCq62H0/ig3YOFzr4fVIxfcXqnqW4=
Subject key identifier:   98:68:67:27:B9:93:54:AB:B9:60:50:C9:D9:25:34:B9:9E:DD:3E:8A
Certificate issuer:       /CN=619037b36cd18d11904cb9935ece4cb8ee755731
Certificate serial:       0BD96E
Authority key identifier: 35:66:10:B7:BB:39:08:4B:FC:26:DF:D1:C8:D4:2A:71:EC:52:82:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/619037b36cd18d11904cb9935ece4cb8ee755731.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/be2217b13b01184877fc4f22b2ae06651c010d4c.roa
Signing time:             Mon 13 Jun 2022 13:04:14 +0000
ROA not before:           Mon 13 Jun 2022 13:04:13 +0000
ROA not after:            Sun 13 Jun 2027 13:04:13 +0000
asID:                     269905
IP address blocks:        190.112.168.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 776558 (0xbd96e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=619037b36cd18d11904cb9935ece4cb8ee755731
        Validity
            Not Before: Jun 13 13:04:13 2022 GMT
            Not After : Jun 13 13:04:13 2027 GMT
        Subject: CN=be2217b13b01184877fc4f22b2ae06651c010d4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ac:a8:46:67:52:6b:87:12:db:2d:1b:e8:79:
                    52:a1:44:2b:1a:42:b5:0d:e3:5c:00:ca:b6:6c:89:
                    6c:3d:0f:10:52:a6:60:54:64:07:dc:d0:70:9d:5e:
                    31:e3:56:97:db:9b:82:37:87:aa:7a:76:8d:c1:e2:
                    7b:d5:bd:1a:ea:93:ac:61:1e:85:99:2a:10:da:63:
                    a4:f5:59:e5:f5:35:f6:00:da:1f:35:86:c1:40:62:
                    de:93:ff:9f:fd:e0:a3:0c:db:d6:ea:ff:bc:ba:29:
                    a9:5e:27:aa:07:ac:4f:df:a0:d0:f8:f3:b5:ce:45:
                    72:59:f1:13:32:5b:a2:e0:95:5f:d8:e9:9d:54:34:
                    f9:d8:06:01:4b:42:19:a2:59:df:c3:94:01:9b:1a:
                    cc:be:b9:93:9d:a1:0e:0c:d0:63:ce:20:f0:b6:0f:
                    bc:83:cf:65:6a:9c:ff:b8:02:fa:a1:33:45:b8:82:
                    7d:06:0a:2e:81:f4:7d:5a:c9:15:40:1d:9e:b8:74:
                    d0:9d:bb:32:a9:7b:2d:80:dc:0e:4b:cf:69:d7:8b:
                    cb:a4:50:57:c2:7d:54:b7:ab:2f:7b:08:ce:3f:dc:
                    cd:61:5a:22:42:44:73:84:a2:ad:7b:b1:8f:92:97:
                    7e:03:d1:a6:af:5c:70:7c:76:72:6d:e6:5d:e0:01:
                    68:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:68:67:27:B9:93:54:AB:B9:60:50:C9:D9:25:34:B9:9E:DD:3E:8A
            X509v3 Authority Key Identifier:
                keyid:35:66:10:B7:BB:39:08:4B:FC:26:DF:D1:C8:D4:2A:71:EC:52:82:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/619037b36cd18d11904cb9935ece4cb8ee755731.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/be2217b13b01184877fc4f22b2ae06651c010d4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/619037b36cd18d11904cb9935ece4cb8ee755731.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:f7:f9:89:59:9c:1e:94:c2:07:dc:bb:7c:a0:53:ff:b8:1a:
         d0:f5:bf:de:14:70:9e:62:e1:88:c6:ff:10:f4:0d:6e:63:5a:
         8c:63:a7:11:bc:bc:a6:8a:01:28:86:5d:d0:d3:5c:31:ca:fe:
         41:97:e0:ef:eb:40:83:e9:59:60:92:50:dd:f0:1e:d8:fe:1a:
         28:b5:78:34:e1:86:c5:15:e2:49:b4:97:08:cb:6d:8d:27:e7:
         0c:64:76:90:2f:bb:66:c9:8a:ae:f1:cd:6d:d2:7c:7b:59:b5:
         19:ef:32:57:0f:88:65:85:11:4f:fd:d6:6e:0d:82:eb:f7:c5:
         54:52:21:68:ab:74:fe:32:15:4a:0b:37:f4:00:ff:d4:b6:86:
         10:cd:63:b3:4d:06:66:11:e8:84:d9:34:82:3b:02:2f:9a:6c:
         86:f3:ed:c7:da:5a:46:00:ef:5a:41:ce:5d:20:ec:0a:25:9c:
         41:0c:f8:9c:8c:51:0d:62:6f:0a:d7:10:be:df:7e:25:37:59:
         c6:48:86:7d:ad:2a:f0:23:65:16:06:e0:eb:c9:fa:8b:7b:e0:
         1c:18:c9:f2:a5:56:b4:c2:77:ac:a1:f9:11:a1:39:1d:9e:fe:
         3e:2d:bc:ef:fc:38:92:06:11:41:7e:4f:d3:84:79:83:eb:7e:
         2f:19:65:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----