Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/4d7e7f69ff3f55d3aa9f9d2d7529870675e3aed3.roa
File:                     4d7e7f69ff3f55d3aa9f9d2d7529870675e3aed3.roa (raw, json)
Hash identifier:          VnNYEO7cFM9o0XmswuwDJOfKXHsCH3zxOqB4haE8PMs=
Subject key identifier:   4F:0A:D8:0D:5D:DC:B5:7A:45:85:BE:D9:30:A1:34:52:C2:38:B8:63
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       154745
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/4d7e7f69ff3f55d3aa9f9d2d7529870675e3aed3.roa
Signing time:             Thu 18 Nov 2021 19:29:12 +0000
ROA not before:           Thu 18 Nov 2021 03:00:00 +0000
ROA not after:            Thu 18 Nov 2060 03:00:00 +0000
asID:                     14080
IP address blocks:        186.82.62.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1394501 (0x154745)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Nov 18 03:00:00 2021 GMT
            Not After : Nov 18 03:00:00 2060 GMT
        Subject: CN=4d7e7f69ff3f55d3aa9f9d2d7529870675e3aed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d7:a1:f0:d1:16:a4:ae:63:01:15:a7:1e:91:
                    fa:95:8d:a1:0d:ae:a5:ad:d7:41:c8:11:51:8e:8e:
                    4b:f4:a7:e8:d2:5e:10:9d:fe:18:9a:ca:8e:93:83:
                    f9:5f:bb:bf:2d:48:dd:62:b6:78:0c:a8:67:10:27:
                    53:b9:93:0e:61:3a:e5:e8:fe:29:6d:ad:f8:e4:25:
                    a4:29:36:6f:2f:4c:8a:7f:ea:2d:f0:58:9d:6a:01:
                    84:33:cd:1d:9d:77:c9:83:a6:18:97:91:af:73:7c:
                    f0:83:4e:67:78:0b:45:37:35:b0:4b:f7:bd:e7:41:
                    09:8f:fa:b5:38:53:e0:ff:93:5a:4b:5c:f7:91:09:
                    9d:e8:16:44:01:29:34:fc:13:da:80:bf:35:06:7d:
                    ae:34:cf:eb:66:bf:eb:9a:83:48:e0:4a:47:f3:07:
                    67:f7:29:49:65:b0:d6:cc:83:9c:a3:f0:d6:54:54:
                    8f:99:18:0e:f3:8d:31:52:a3:24:47:32:30:3b:fa:
                    db:ec:0b:26:a2:22:7d:02:5a:0c:5d:12:f2:28:d5:
                    02:ac:1a:68:3a:32:ba:c9:b1:30:bf:e2:6d:9b:4f:
                    18:33:30:20:ca:a6:5c:1b:8e:f6:65:6e:66:61:ad:
                    d5:c8:99:58:a4:16:6d:a7:95:22:19:58:c8:66:3f:
                    4f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0A:D8:0D:5D:DC:B5:7A:45:85:BE:D9:30:A1:34:52:C2:38:B8:63
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/4d7e7f69ff3f55d3aa9f9d2d7529870675e3aed3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.82.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:3e:c9:c2:3c:80:f4:79:4e:c9:2c:eb:31:e8:78:7d:5e:28:
         0f:af:2e:40:0f:59:72:73:e1:c7:68:fa:64:ed:8f:61:4f:db:
         e1:a8:88:da:a8:65:d6:a0:d1:35:1f:ac:38:33:d6:bb:4e:cd:
         0e:cf:a5:97:52:4e:b1:38:82:30:3c:f8:5c:d4:be:28:dd:be:
         c0:36:a6:74:63:c3:ab:f9:9f:cc:3a:fa:09:cf:48:1a:35:20:
         26:58:e3:6f:4e:db:1f:5f:7b:9c:bf:5c:cb:0a:e2:c1:da:05:
         f1:4f:8b:43:88:e4:30:54:fe:1e:b5:32:46:3a:ff:89:48:bf:
         ab:05:27:b0:13:21:87:c0:f0:93:a9:57:f9:d2:62:99:2e:ea:
         06:7e:7d:3a:9d:ec:39:3d:6e:a0:a8:2b:42:0a:15:3f:af:14:
         25:9c:1c:80:0b:1e:db:1b:61:8a:50:ca:f6:ae:ee:2c:aa:8a:
         45:96:ec:88:f8:3f:91:5b:d4:a2:1b:66:fc:2e:d1:7b:4b:60:
         fc:55:03:d2:f8:de:ed:07:df:e6:73:0d:48:66:72:e8:31:35:
         aa:e4:e5:6e:47:b1:08:dc:2a:f6:bd:f1:5c:ff:25:2c:65:41:
         31:a7:d8:2f:f1:00:bd:e7:a1:73:6d:d4:b8:a0:f4:20:83:27:
         1e:2b:89:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----