Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/bbbd5c0b14010fb4108f477a199cf71d0b0cc631.roa
File:                     bbbd5c0b14010fb4108f477a199cf71d0b0cc631.roa (raw, json)
Hash identifier:          WUgv8Kb457ijZCPV+VsnUovUc5b/K3YYjg3bLBkcVlg=
Subject key identifier:   14:19:38:6C:00:18:07:C4:29:C2:2C:E9:55:39:F2:AC:A6:8D:AE:1A
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       22599D
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/bbbd5c0b14010fb4108f477a199cf71d0b0cc631.roa
Signing time:             Thu 26 Jan 2023 15:40:27 +0000
ROA not before:           Fri 23 Apr 2021 03:00:00 +0000
ROA not after:            Thu 27 Apr 2023 03:00:00 +0000
asID:                     14080
IP address blocks:        190.144.192.0/19 maxlen: 19
                          181.49.224.0/19 maxlen: 29
                          186.85.72.0/22 maxlen: 24
                          200.118.0.0/16 maxlen: 24
                          186.145.4.0/22 maxlen: 24
                          190.84.213.0/24 maxlen: 24
                          190.84.214.0/24 maxlen: 24
                          190.158.6.0/24 maxlen: 24
                          190.158.7.0/24 maxlen: 24
                          190.158.10.0/24 maxlen: 24
                          190.158.11.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2251165 (0x22599d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Apr 23 03:00:00 2021 GMT
            Not After : Apr 27 03:00:00 2023 GMT
        Subject: CN=bbbd5c0b14010fb4108f477a199cf71d0b0cc631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4b:66:42:02:db:98:89:b5:98:72:1a:1d:44:
                    d5:77:a3:0d:ab:c6:74:35:6b:be:32:22:ca:76:99:
                    ef:99:a1:b8:e5:ff:84:8a:85:d5:24:77:11:38:06:
                    dc:3a:f3:ae:18:8c:54:e0:69:19:ac:52:92:1d:2b:
                    b4:15:ea:4d:e4:a6:a3:c5:20:33:64:8c:86:b0:3f:
                    5f:f4:a8:fd:5d:8c:e0:21:6f:d1:a3:41:17:51:31:
                    fc:4c:cd:70:c5:60:1f:78:44:b2:7a:25:bc:80:dc:
                    9b:75:bd:60:0d:c0:72:cc:75:8c:e2:ee:9a:77:c6:
                    69:20:88:37:3e:f5:40:8a:d3:1a:1a:99:6a:ae:30:
                    cd:a8:0b:89:f1:1b:ee:65:cb:a7:f4:07:ea:ae:c2:
                    f8:a3:52:99:86:38:fb:a2:b9:bf:93:87:3a:5b:92:
                    27:e3:dc:e8:18:a3:c3:7b:54:80:ed:a7:69:4a:3f:
                    f2:04:14:00:da:69:60:87:29:fe:75:4b:cf:27:84:
                    a5:8c:7d:ad:bb:de:ba:69:1e:4d:70:10:aa:05:cd:
                    99:e1:fb:f3:79:47:6d:62:33:3b:d9:c9:1c:2f:ab:
                    b6:bd:f4:c1:d7:21:29:ab:31:5c:39:42:f5:dc:d8:
                    16:22:d2:0c:82:ee:ef:27:6b:c9:58:22:53:f0:3e:
                    83:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:19:38:6C:00:18:07:C4:29:C2:2C:E9:55:39:F2:AC:A6:8D:AE:1A
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/bbbd5c0b14010fb4108f477a199cf71d0b0cc631.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.49.224.0/19
                  186.85.72.0/22
                  186.145.4.0/22
                  190.84.213.0-190.84.214.255
                  190.144.192.0/19
                  190.158.6.0/23
                  190.158.10.0/23
                  200.118.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         79:14:66:ad:c5:30:a1:cc:3f:25:99:4d:f1:95:82:88:be:8b:
         5f:18:2f:24:16:36:65:e2:c1:16:00:a5:9e:7f:f0:52:9e:93:
         aa:73:31:27:cc:85:fe:c4:e5:74:10:14:0d:18:db:53:ef:0a:
         59:e0:0a:7f:81:2d:16:03:b2:8a:b5:dd:3a:64:5a:1a:9c:ec:
         cb:ae:4c:ba:5d:5d:fb:e3:93:ee:02:7d:f8:02:d9:c5:55:90:
         a8:19:a2:ad:c7:e1:86:ed:d3:18:ea:1b:1d:c3:59:00:ee:b0:
         3d:9e:be:1f:73:7f:1e:b8:00:28:91:3f:d4:1c:20:3b:95:a0:
         59:08:ee:2a:16:0a:51:94:9c:08:f4:1e:86:da:f8:06:62:61:
         a3:43:72:4c:9c:39:a7:f7:ac:95:f3:26:a6:f8:0a:a8:16:d3:
         13:70:fc:94:d7:fd:fb:99:b1:80:56:9a:c6:11:75:c2:42:57:
         4a:43:06:91:7b:7a:d5:85:66:a5:52:c9:97:19:63:0e:1a:03:
         16:2e:ac:cd:aa:0f:7b:15:84:0f:71:aa:0b:d1:48:42:01:8c:
         de:75:92:b8:6a:58:74:6c:f1:c4:d8:0b:e6:a6:5c:13:1f:af:
         37:2f:14:06:2a:6f:8b:4e:8c:cb:e5:c2:d9:7e:6a:b2:8b:97:
         c4:eb:ca:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----