Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c5d0b1ab3c8fb0b33f32f1dc660b69ff51b1e8a6.roa
File:                     c5d0b1ab3c8fb0b33f32f1dc660b69ff51b1e8a6.roa (raw, json)
Hash identifier:          6H8E7lKS1u0YXK6UPqzvMJcAcnuOfXCy+YdNYaslyww=
Subject key identifier:   1E:79:9E:02:2C:35:D6:B7:08:8A:65:BA:B6:39:D5:F7:86:4D:6B:E7
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       2155E8
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c5d0b1ab3c8fb0b33f32f1dc660b69ff51b1e8a6.roa
Signing time:             Thu 22 Dec 2022 13:45:57 +0000
ROA not before:           Sun 25 Apr 2021 03:00:00 +0000
ROA not after:            Thu 27 Apr 2023 03:00:00 +0000
asID:                     14080
IP address blocks:        190.144.192.0/19 maxlen: 19
                          181.49.224.0/19 maxlen: 29
                          186.85.72.0/22 maxlen: 24
                          200.118.0.0/16 maxlen: 24
                          186.145.4.0/22 maxlen: 24
                          190.84.213.0/24 maxlen: 24
                          190.84.214.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2184680 (0x2155e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Apr 25 03:00:00 2021 GMT
            Not After : Apr 27 03:00:00 2023 GMT
        Subject: CN=c5d0b1ab3c8fb0b33f32f1dc660b69ff51b1e8a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e7:b7:ad:3b:a8:1e:df:a3:1e:77:39:ab:10:
                    64:bc:9f:d8:e1:b7:82:ad:61:42:98:f0:8c:b5:97:
                    38:2a:83:1b:eb:83:46:eb:31:0c:a9:cb:e7:59:a6:
                    b5:ea:a3:55:98:d4:0f:75:a6:28:d6:19:5f:e0:ac:
                    b4:88:c9:62:68:2f:57:70:ff:1c:e1:4f:8a:cc:05:
                    dc:d6:13:03:f0:f4:6a:19:3f:cd:01:7d:f5:1b:86:
                    fd:b8:c1:f0:90:ea:0f:65:68:54:09:73:68:45:4e:
                    9f:59:4b:5a:40:d2:2b:5c:d3:f7:f4:c7:9c:84:c4:
                    50:a7:40:b5:20:8e:91:3b:2d:b5:7f:a0:c7:cb:bc:
                    1a:c8:ab:24:9e:32:a4:85:85:da:9a:25:ac:e1:f7:
                    78:15:98:dc:d2:c5:e5:97:d7:20:98:0b:bc:f2:7c:
                    b8:6f:cf:1e:ce:cd:db:4e:5b:74:c7:2f:ec:16:15:
                    ef:e5:9f:b6:bb:f7:71:10:71:e8:75:29:37:19:99:
                    83:86:e7:3f:44:e0:21:06:01:75:69:03:f9:2e:9a:
                    cb:9c:c1:c6:7b:5d:1e:eb:4f:1c:2b:3d:db:0b:cf:
                    8d:05:6e:39:6d:33:79:ab:53:f8:4f:e2:63:3f:6b:
                    ca:34:ac:a0:e8:b6:9c:92:c5:7d:ba:fb:e6:13:11:
                    34:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:79:9E:02:2C:35:D6:B7:08:8A:65:BA:B6:39:D5:F7:86:4D:6B:E7
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c5d0b1ab3c8fb0b33f32f1dc660b69ff51b1e8a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.49.224.0/19
                  186.85.72.0/22
                  186.145.4.0/22
                  190.84.213.0-190.84.214.255
                  190.144.192.0/19
                  200.118.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1c:a1:9f:ab:a8:bb:b6:f3:0b:b9:d4:c2:8f:67:b7:f1:60:a5:
         b0:e8:0b:0e:fc:94:1d:1a:bd:b5:50:ec:24:de:56:55:aa:7f:
         8e:ea:64:a1:ba:60:75:f2:af:ff:9d:ba:6f:a0:ca:00:76:4b:
         bb:52:c7:0b:0b:42:ef:c1:87:1a:95:db:6a:e8:f3:94:b5:50:
         9c:b6:b4:28:50:6b:4c:b0:57:99:cc:50:25:5f:27:eb:44:87:
         e2:db:86:44:45:3f:9f:67:ce:38:a9:11:f7:0b:c7:6f:44:82:
         d0:21:0f:87:dc:bc:bf:78:78:16:5d:8e:a8:13:eb:f1:54:c6:
         24:ce:40:87:fd:05:50:ba:00:70:57:53:fa:58:49:1f:6b:2f:
         4d:ce:7e:18:c0:5f:21:8e:77:fd:da:b3:e3:db:e1:4a:9b:96:
         b1:69:36:5d:e2:16:24:34:b1:aa:75:15:5f:cb:00:bc:fb:e6:
         63:5f:45:08:37:ad:30:b7:06:eb:1a:b1:d6:41:6b:81:82:85:
         1e:f3:a9:95:fd:18:d6:96:3b:71:71:f6:a0:4f:fc:65:73:88:
         21:36:4e:74:94:2f:28:57:62:84:6e:1b:be:6b:bc:fc:3c:f9:
         8f:c1:fd:05:f4:99:73:2f:60:53:34:25:2b:82:e7:dc:0d:2d:
         ce:2c:e3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----