Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/8f56932e3491683641f9ef8a7b575969b3b4299b.roa
File:                     8f56932e3491683641f9ef8a7b575969b3b4299b.roa (raw, json)
Hash identifier:          a/HKokJxyqBboC17iJrpANocMwPrRiWWQSX4a8m8nz8=
Subject key identifier:   5B:6B:3C:B0:66:B4:83:B1:1B:D3:DE:4F:85:09:E1:04:37:CA:6F:DD
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       229FD9
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/8f56932e3491683641f9ef8a7b575969b3b4299b.roa
Signing time:             Wed 08 Feb 2023 01:27:28 +0000
ROA not before:           Thu 22 Apr 2021 03:00:00 +0000
ROA not after:            Thu 27 Apr 2023 03:00:00 +0000
asID:                     14080
IP address blocks:        190.144.192.0/19 maxlen: 19
                          181.49.224.0/19 maxlen: 29
                          186.85.72.0/22 maxlen: 24
                          200.118.0.0/16 maxlen: 24
                          186.145.4.0/22 maxlen: 24
                          190.84.213.0/24 maxlen: 24
                          190.84.214.0/24 maxlen: 24
                          190.158.6.0/24 maxlen: 24
                          190.158.7.0/24 maxlen: 24
                          190.158.10.0/24 maxlen: 24
                          190.158.11.0/24 maxlen: 24
                          190.159.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2269145 (0x229fd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Apr 22 03:00:00 2021 GMT
            Not After : Apr 27 03:00:00 2023 GMT
        Subject: CN=8f56932e3491683641f9ef8a7b575969b3b4299b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8b:7f:e8:31:b3:d5:96:3f:36:2a:00:a2:b8:
                    14:72:02:2a:c3:77:77:f5:d4:cb:11:8c:f2:2f:eb:
                    c6:d1:25:f7:aa:5b:6f:70:c1:a4:41:1f:20:bb:0d:
                    73:fe:08:52:8f:e2:a2:a5:67:39:d8:57:47:07:23:
                    d4:c7:b3:08:1b:95:43:5b:b2:85:7b:62:bc:ce:c6:
                    32:e3:74:9f:35:e8:a3:f9:2a:95:c2:c1:9c:d4:4f:
                    a5:d6:82:1c:42:27:f4:3b:fb:3b:79:cc:c2:a7:1c:
                    61:93:77:cf:21:e5:e2:27:c1:c0:73:06:05:26:3c:
                    70:4c:bf:35:50:f2:61:c2:91:6a:f3:6e:7b:b4:10:
                    9f:a0:3d:4d:a5:e0:60:d8:f9:fc:a3:d6:05:fb:89:
                    ae:b8:97:93:9f:4a:d0:39:75:5c:c7:9a:0c:5e:9f:
                    52:54:aa:3a:45:90:24:fe:ff:e8:e5:b9:30:c5:6e:
                    06:2e:dc:2b:64:12:7c:5d:6e:59:77:7a:ee:22:c1:
                    c7:22:50:67:e4:cf:01:86:22:83:9c:42:f3:0f:be:
                    5f:75:c1:c9:ef:5c:14:4c:80:88:62:4a:d0:88:cb:
                    18:14:a5:d5:19:f5:82:78:2e:82:bd:7c:b2:13:eb:
                    43:5a:c5:37:15:f7:67:b2:56:59:64:87:b5:70:a9:
                    91:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6B:3C:B0:66:B4:83:B1:1B:D3:DE:4F:85:09:E1:04:37:CA:6F:DD
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/8f56932e3491683641f9ef8a7b575969b3b4299b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.49.224.0/19
                  186.85.72.0/22
                  186.145.4.0/22
                  190.84.213.0-190.84.214.255
                  190.144.192.0/19
                  190.158.6.0/23
                  190.158.10.0/23
                  190.159.0.0/16
                  200.118.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         87:49:b8:66:3e:59:64:8c:54:25:3f:16:a2:73:0b:bd:8f:34:
         e5:25:bd:c6:b7:fc:8c:5f:a8:1c:5e:22:0d:b9:10:79:12:e6:
         1d:c5:f2:76:4a:6d:76:d9:02:4b:4f:bb:02:89:c8:0b:3e:90:
         51:3b:f7:cd:1b:8e:40:56:5f:62:c1:39:5c:83:41:aa:3b:52:
         e3:1f:f0:65:ba:ee:86:bc:15:88:c4:13:8b:ea:f3:c1:8b:56:
         3e:e4:17:af:ba:50:fc:d0:ae:23:3e:b5:07:43:e5:75:56:79:
         2b:05:fa:b7:a1:b2:60:9e:8d:1a:70:b4:b0:e0:cb:43:ee:e5:
         bd:bb:4c:42:90:ba:e3:a8:1b:8b:65:cd:2d:6a:0c:f0:fb:28:
         76:e8:7b:ad:6c:56:c6:86:b6:0c:a1:95:d1:f6:42:69:95:cd:
         57:9a:c8:ab:b9:45:59:e3:9e:99:29:be:db:4d:ae:53:63:28:
         ee:f8:79:84:7d:9b:7b:ed:0c:5d:aa:81:e6:db:04:40:c6:af:
         9f:67:f4:9f:b6:de:3b:0f:48:89:bb:59:18:fc:58:28:e8:68:
         be:de:5a:27:7e:f1:d3:29:05:be:3b:a4:fb:6e:a0:ec:46:e4:
         0b:18:2a:1d:4e:ab:f5:80:4e:52:29:5c:cd:d4:f8:ff:ae:5b:
         ff:8c:3b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----