Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0fcffc85-d48b-4191-b53d-96c1bc8b7318/e3b8604616cabd6363cdf03f5bb315237566cc2b.roa
File:                     e3b8604616cabd6363cdf03f5bb315237566cc2b.roa (raw, json)
Hash identifier:          NuO1Hsn+gWGeeUbTB3216SfynhmUQGf7cohcZZ6orxw=
Subject key identifier:   37:F1:D2:0C:5B:95:77:FD:D3:3A:97:0F:2C:F3:9E:02:C5:48:32:A2
Certificate issuer:       /CN=b825aea653e97a291ec1350029e2e92dfa3c3746
Certificate serial:       0589
Authority key identifier: 76:2A:EA:61:EA:DD:F2:8C:6B:1E:CE:73:79:7A:C1:27:3D:E9:09:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b825aea653e97a291ec1350029e2e92dfa3c3746.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0fcffc85-d48b-4191-b53d-96c1bc8b7318/e3b8604616cabd6363cdf03f5bb315237566cc2b.roa
Signing time:             Wed 15 Jun 2022 14:39:12 +0000
ROA not before:           Wed 15 Jun 2022 03:00:00 +0000
ROA not after:            Sat 15 Jun 2024 03:00:00 +0000
asID:                     269997
IP address blocks:        181.192.100.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1417 (0x589)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b825aea653e97a291ec1350029e2e92dfa3c3746
        Validity
            Not Before: Jun 15 03:00:00 2022 GMT
            Not After : Jun 15 03:00:00 2024 GMT
        Subject: CN=e3b8604616cabd6363cdf03f5bb315237566cc2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ff:b9:39:43:de:04:b3:3e:21:b2:d0:be:f4:
                    a7:0e:06:47:a7:ab:1c:7c:c2:7f:1d:d8:ab:5f:fc:
                    df:b1:5c:2b:44:27:49:b4:ff:7f:f3:e5:59:df:5a:
                    68:ee:ce:93:d6:e5:ce:82:94:86:63:b8:b2:10:40:
                    59:a6:eb:0e:0c:dc:73:1e:cc:95:44:5f:54:00:f7:
                    b3:85:eb:f7:c1:8e:ea:ba:19:1c:db:8d:4e:f3:ec:
                    f3:a9:cc:3e:71:da:12:13:60:3e:84:82:05:9b:91:
                    5b:75:22:64:77:71:f1:84:49:65:de:62:f4:ff:e2:
                    30:93:0d:d2:ca:e2:a7:e0:8b:88:e2:2d:fc:e9:49:
                    0e:f1:8d:84:c1:c6:1c:7a:73:24:78:a9:ea:42:95:
                    01:96:bf:f1:18:d6:7c:48:30:54:4d:9b:a4:bd:36:
                    60:27:d4:e5:6d:87:7c:f4:ba:b9:ee:8f:52:b0:d4:
                    ed:1a:85:24:34:bc:e4:26:54:45:7a:92:90:67:a1:
                    4c:93:a6:68:f6:4d:51:26:3b:fa:03:6d:8c:e1:20:
                    36:38:64:f5:7e:4c:61:05:b7:e5:20:1e:d4:2e:16:
                    b4:1a:cd:ad:83:b1:93:cc:87:4b:24:49:ad:78:ae:
                    50:19:08:d4:ac:b9:55:61:4a:c3:bd:c1:49:d3:a4:
                    e0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F1:D2:0C:5B:95:77:FD:D3:3A:97:0F:2C:F3:9E:02:C5:48:32:A2
            X509v3 Authority Key Identifier:
                keyid:76:2A:EA:61:EA:DD:F2:8C:6B:1E:CE:73:79:7A:C1:27:3D:E9:09:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b825aea653e97a291ec1350029e2e92dfa3c3746.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0fcffc85-d48b-4191-b53d-96c1bc8b7318/e3b8604616cabd6363cdf03f5bb315237566cc2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0fcffc85-d48b-4191-b53d-96c1bc8b7318/b825aea653e97a291ec1350029e2e92dfa3c3746.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:01:8d:ec:55:17:9d:3e:c6:b9:55:7a:36:a0:c1:99:68:27:
         3d:14:bf:7d:d3:bb:b6:e2:a2:cc:06:09:aa:ac:1e:46:16:91:
         76:fc:3f:91:b1:75:60:0a:94:72:4c:f6:86:af:f9:65:fc:37:
         c5:01:55:63:34:39:0e:1f:3c:f5:04:17:c1:01:e1:fd:70:51:
         f0:3b:43:72:61:5e:2c:8b:1e:36:8d:cf:22:f6:71:55:3a:48:
         73:a0:d9:27:6e:9e:cc:94:16:b1:ac:9e:4a:84:76:96:3a:cb:
         87:93:86:72:fd:5d:e2:5c:74:df:42:21:f3:c8:7c:d7:79:aa:
         b1:e4:4a:7f:00:c8:14:52:40:f9:f9:6b:15:11:b3:88:55:97:
         51:02:75:dc:e8:4d:65:dd:13:06:d7:0f:b3:34:98:41:29:8c:
         e4:ed:b9:97:16:1a:c1:05:02:96:e7:30:e2:18:3a:41:75:ce:
         aa:2f:cb:10:07:29:89:a3:ab:d1:8d:17:71:47:47:cd:38:f0:
         7a:40:6b:ac:34:cb:9e:a9:b6:4f:31:f6:3e:da:a6:2b:6c:e7:
         3c:85:f2:f0:d8:05:f7:bd:a8:79:ff:00:ae:42:5f:50:b9:b5:
         4a:33:b0:95:8a:84:c6:57:f8:24:b7:92:4c:9d:0d:a4:0b:36:
         72:32:7b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----