Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/e7da2aed71b4e3feb8ec2b3b052214f8b0102788.roa
File:                     e7da2aed71b4e3feb8ec2b3b052214f8b0102788.roa (raw, json)
Hash identifier:          0IFW275YjtnjOvz3Z1Khy70Q0yQ/6i0bCReAIZT4hJE=
Subject key identifier:   12:09:63:CC:A9:E0:3A:7C:66:70:38:41:67:F0:E1:21:77:B1:5A:A8
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       158FD4
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/e7da2aed71b4e3feb8ec2b3b052214f8b0102788.roa
Signing time:             Sat 27 Nov 2021 02:56:38 +0000
ROA not before:           Tue 27 Apr 2021 03:00:00 +0000
ROA not after:            Thu 27 Apr 2023 03:00:00 +0000
asID:                     14080
IP address blocks:        190.144.192.0/19 maxlen: 19
                          181.49.224.0/19 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1413076 (0x158fd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Apr 27 03:00:00 2021 GMT
            Not After : Apr 27 03:00:00 2023 GMT
        Subject: CN=e7da2aed71b4e3feb8ec2b3b052214f8b0102788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fa:3c:05:cb:db:f8:d5:07:9e:8f:3f:a1:17:
                    28:00:89:0a:31:78:e4:e2:0f:1d:f8:0b:0e:51:cc:
                    69:0b:bc:8c:55:c3:d0:93:2a:57:6a:7c:94:97:56:
                    bf:9f:48:fd:59:1c:74:46:ff:26:26:86:13:d5:40:
                    4e:87:f1:ef:67:57:27:63:b8:8a:ac:f7:f0:4b:c6:
                    ee:42:04:7b:24:89:83:46:31:3b:8e:32:f3:81:75:
                    40:4e:9b:ba:0f:e4:c5:de:bf:4e:93:3d:b0:85:b4:
                    b8:da:ad:46:0e:d9:3c:15:0a:a3:d1:28:71:df:dc:
                    63:44:27:c6:f6:61:bc:4c:32:c1:34:5f:fc:31:8a:
                    cf:43:a4:72:42:7d:85:6f:38:73:18:3d:a1:39:58:
                    de:77:05:6e:a4:a7:02:7a:8d:44:ec:a1:1d:78:8c:
                    4e:46:d1:7b:71:f8:7e:d4:c5:36:19:04:06:e3:40:
                    62:f9:16:71:68:b0:24:c0:3c:53:bf:b7:a5:ca:e1:
                    fe:36:5d:f6:15:2c:26:72:58:73:4e:10:18:32:90:
                    e1:2d:e1:3b:5c:f2:f9:05:c0:f0:c3:14:da:ab:7d:
                    83:64:37:23:51:7a:43:ce:21:21:ab:da:f9:1b:c5:
                    a2:e4:fe:67:0a:46:19:89:7a:86:65:f3:58:38:a6:
                    58:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:09:63:CC:A9:E0:3A:7C:66:70:38:41:67:F0:E1:21:77:B1:5A:A8
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/e7da2aed71b4e3feb8ec2b3b052214f8b0102788.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.49.224.0/19
                  190.144.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         81:05:56:f8:2e:25:2d:a2:1e:31:a9:ef:4d:09:1e:27:69:e5:
         65:a2:df:bf:f8:f9:5e:ab:a2:74:ff:38:c9:7e:3d:8e:54:5d:
         65:1c:c8:34:f6:e5:c2:56:d1:d3:38:25:b6:5b:e6:0e:cd:82:
         64:92:6a:dd:95:91:7e:9d:a7:21:25:cc:93:2a:9d:43:64:6e:
         c2:4f:72:0f:5c:0b:3f:fc:15:a7:d3:d1:3a:60:97:d3:9b:f1:
         6c:cf:43:1a:85:01:37:74:4e:09:ca:68:a7:af:71:ac:cf:29:
         74:08:fd:00:af:20:f1:73:94:1a:67:d9:c5:f7:70:f3:db:f2:
         21:8a:36:c5:54:c8:cf:a4:a3:0a:18:45:6c:b7:fd:4b:37:3c:
         8d:84:88:9d:69:a1:eb:d0:ab:9a:f5:33:a5:b5:f9:b1:49:e4:
         83:d4:c8:4b:83:19:fa:83:17:e3:ab:19:7b:7f:55:ea:74:c8:
         43:e3:18:0b:66:81:74:fe:90:c7:fd:14:f5:d3:ef:d7:e5:f2:
         76:91:78:cc:cb:b0:70:4f:7f:e9:62:80:ef:1a:a0:29:5a:a4:
         55:fe:f7:57:06:1e:5d:fd:54:2f:36:6b:e7:5d:4f:07:6b:cc:
         a6:de:44:6a:ff:2b:3d:82:ba:76:f2:2f:72:75:5c:80:ea:d9:
         b9:41:a6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----