Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/27a87dc68a368ce4cbd38d5f701433baeb690d0d.roa
File:                     27a87dc68a368ce4cbd38d5f701433baeb690d0d.roa (raw, json)
Hash identifier:          Vj2ecM+ZKrVCZiKuJbMxQL7xsqtow/Den6v/2SgqSMc=
Subject key identifier:   77:4A:B3:A6:67:BB:19:B8:55:66:09:77:F1:46:BB:8D:BB:D5:8B:86
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       17944E
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/27a87dc68a368ce4cbd38d5f701433baeb690d0d.roa
Signing time:             Tue 11 Jan 2022 12:28:34 +0000
ROA not before:           Tue 11 Jan 2022 03:00:00 +0000
ROA not after:            Thu 11 Jan 2024 03:00:00 +0000
asID:                     14080
IP address blocks:        181.48.0.0/13 maxlen: 24
                          190.85.240.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1545294 (0x17944e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Jan 11 03:00:00 2022 GMT
            Not After : Jan 11 03:00:00 2024 GMT
        Subject: CN=27a87dc68a368ce4cbd38d5f701433baeb690d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:52:df:1e:aa:be:40:50:3f:9c:be:18:f5:5d:
                    42:ad:42:53:ff:91:15:d3:70:ae:da:c7:56:fa:54:
                    85:4a:85:f9:fb:19:64:fd:b4:db:09:4d:76:67:f5:
                    3d:ef:6b:ad:2a:e2:91:bd:87:19:c4:57:3f:44:4a:
                    08:fa:ba:4c:41:68:de:f4:92:d0:e3:9b:b1:df:c7:
                    03:83:63:98:88:8b:16:ca:2a:b8:fb:38:4a:23:8d:
                    e1:cc:c5:5e:6a:5f:b3:ce:5e:06:6e:41:95:87:78:
                    30:f9:a0:13:f3:1d:d3:20:0a:07:45:fb:f3:2f:96:
                    e0:c8:fe:80:f2:73:59:2b:a5:b8:2d:b9:89:a0:43:
                    11:1f:7a:74:ba:b7:80:92:67:36:49:4c:db:ec:ca:
                    82:c6:4d:b0:78:94:24:79:17:37:25:b0:13:db:5b:
                    69:69:9c:6f:ae:68:a6:29:c1:e1:42:92:6c:c0:2a:
                    2f:03:42:70:48:3e:23:be:d2:3c:04:b5:ef:3d:f5:
                    2f:6f:1a:73:19:f7:ba:b9:bd:13:e5:31:86:31:a4:
                    39:5d:e4:d1:d4:75:c4:e8:ae:a0:55:9e:72:00:84:
                    16:67:08:5f:ea:a6:f1:84:b7:5c:68:81:8e:a6:1b:
                    e8:bc:31:ca:6f:f2:72:4f:5e:3f:03:cd:de:0e:34:
                    4b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4A:B3:A6:67:BB:19:B8:55:66:09:77:F1:46:BB:8D:BB:D5:8B:86
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/27a87dc68a368ce4cbd38d5f701433baeb690d0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.48.0.0/13
                  190.85.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6b:28:e4:7a:5f:7c:a9:e3:86:ed:78:21:c3:39:56:bd:b8:85:
         6f:fb:c9:e0:37:2a:b1:c3:35:bd:31:6f:93:71:79:97:38:1d:
         1a:a3:75:6e:77:da:25:d9:1c:ef:75:e5:55:bc:66:93:70:f4:
         b7:78:cc:76:46:28:69:72:77:8b:60:3a:03:f2:62:84:ed:11:
         eb:3d:d2:54:bb:5c:89:f6:07:55:aa:15:04:c2:21:61:89:9d:
         f0:95:7c:31:d7:17:99:ea:2c:e6:72:77:a8:68:51:42:63:1b:
         a7:36:22:44:2a:55:c7:d2:83:4b:48:8a:97:4f:97:30:6f:6a:
         9f:f3:cc:c8:69:97:87:5f:4f:bf:18:ae:9b:6c:14:e1:2d:06:
         a1:f7:16:be:6a:6e:38:20:f0:47:e4:38:f5:40:05:f7:bb:79:
         58:51:b4:fd:a5:28:6c:82:85:1b:8b:29:06:91:63:88:ef:86:
         54:92:43:e9:27:25:22:70:4c:7a:c8:4d:ba:72:ad:04:bb:8a:
         c5:2f:e7:e6:c7:82:b7:72:ba:1c:c9:78:eb:b8:17:f0:a2:f5:
         f8:fe:4a:71:dd:28:b4:e1:96:fb:db:41:70:b6:d5:fc:85:20:
         07:57:83:d5:bf:6c:ca:c8:e2:0e:34:d9:0a:54:17:aa:1e:a1:
         01:6a:dd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----