Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/db31a90d585e6cd3cc174dfa328fda1829360c09.roa
File:                     db31a90d585e6cd3cc174dfa328fda1829360c09.roa (raw, json)
Hash identifier:          vmlZ4glWp05v5x+WovknH0coFdZ+9EdovMoKEhi5jE8=
Subject key identifier:   48:27:C8:D0:87:41:2A:2A:4D:BB:28:6C:0F:D9:0E:32:E6:B5:9C:B2
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       18C3D5
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/db31a90d585e6cd3cc174dfa328fda1829360c09.roa
Signing time:             Thu 17 Feb 2022 16:15:12 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     14080
IP address blocks:        186.80.44.0/24 maxlen: 24
                          186.80.45.0/24 maxlen: 24
                          186.80.46.0/24 maxlen: 24
                          186.80.47.0/24 maxlen: 24
                          186.86.255.0/24 maxlen: 24
                          186.147.142.0/24 maxlen: 24
                          186.147.143.0/24 maxlen: 24
                          190.158.112.0/24 maxlen: 24
                          190.158.113.0/24 maxlen: 24
                          190.158.114.0/24 maxlen: 24
                          190.158.115.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1622997 (0x18c3d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=db31a90d585e6cd3cc174dfa328fda1829360c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ee:e9:bc:b6:88:5c:69:e4:1c:a3:b7:81:4b:
                    f1:85:19:30:33:98:2f:58:2b:08:b2:d5:57:3f:18:
                    cc:18:d8:a7:e0:b4:fa:09:4e:0a:37:f8:b8:e5:1d:
                    95:06:8e:66:75:02:3a:86:35:01:3f:c6:a0:76:62:
                    09:f6:c3:35:56:fd:6d:63:f8:cd:c5:ed:28:39:bb:
                    c7:10:9e:6c:38:cb:c8:71:4e:25:c5:91:48:8c:12:
                    70:cc:65:f3:80:5b:c2:2a:cf:e6:43:cc:1a:d7:fd:
                    88:a5:95:cf:14:23:0c:8a:d3:f7:33:7d:b3:28:af:
                    2a:34:3d:d8:d4:5a:dd:de:11:da:89:e4:50:ff:50:
                    11:b1:7b:65:6e:87:24:7e:71:54:78:2d:64:26:66:
                    95:3e:5e:be:2f:1e:48:8c:f2:27:cc:bb:7e:8d:ce:
                    e7:8c:ad:26:d6:c1:13:62:88:f3:2b:dd:d3:d9:38:
                    46:5e:77:74:07:5a:2c:e9:b5:2b:d8:2e:6d:2e:87:
                    10:26:35:8e:23:4a:10:12:ae:e3:1a:6f:84:85:98:
                    26:1d:7d:6e:90:7f:94:2c:13:b6:25:92:a1:78:02:
                    31:33:e3:68:e6:8d:26:12:52:cb:7d:2c:bf:e4:5d:
                    93:ca:9a:0d:13:ba:81:2a:dd:46:98:e4:2f:80:a3:
                    0a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:27:C8:D0:87:41:2A:2A:4D:BB:28:6C:0F:D9:0E:32:E6:B5:9C:B2
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/db31a90d585e6cd3cc174dfa328fda1829360c09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.80.44.0/22
                  186.86.255.0/24
                  186.147.142.0/23
                  190.158.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:27:19:02:32:83:2d:df:eb:89:ea:04:56:76:0f:38:91:40:
         5b:52:e2:d8:36:23:cd:bf:9f:a2:de:ef:93:cc:f2:39:1d:a4:
         22:18:60:b8:f5:b1:dc:ee:8f:6f:43:17:ca:9b:85:2d:e8:7e:
         4e:7f:4a:af:75:37:df:e7:b8:7b:51:d4:64:60:90:f8:3c:da:
         50:65:df:ef:36:8a:b6:cb:70:87:ed:0a:22:ea:0a:35:0e:5e:
         97:e5:09:92:5e:fe:c8:05:c0:3e:11:49:47:db:83:db:e1:a6:
         3c:a0:7c:6c:64:82:0c:7f:ed:f3:f1:95:ae:17:aa:27:eb:5d:
         d4:fe:a9:81:19:e8:16:43:37:83:d8:ed:05:30:c2:d5:b6:b2:
         eb:78:f5:cb:09:db:f7:be:08:7b:2f:80:8b:61:fe:1a:9b:33:
         41:ad:d3:25:1a:2d:75:06:c7:5b:48:89:78:27:04:ca:b4:c0:
         19:b7:77:79:38:0e:df:f8:ce:65:3d:6e:33:dd:87:a2:2d:ef:
         4e:45:b7:31:38:cf:15:66:9b:c1:e2:75:d5:76:d2:8e:cd:e4:
         00:41:6f:a0:5a:d7:28:35:c4:67:f8:2a:ed:c2:4a:b6:39:b2:
         8a:04:96:a5:9c:30:d3:de:4f:74:4f:06:10:a6:a6:e7:3e:25:
         9e:5f:a5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----