Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/109e0bda-90a6-47bf-aff9-fce3fa714347/27dcf1c771afaac36b031a0b9c900e0f58a2ffcf.roa
File:                     27dcf1c771afaac36b031a0b9c900e0f58a2ffcf.roa (raw, json)
Hash identifier:          rmi7yUszsZ5SNO3xsectP6Y7TNZQFC7f7Js49Vgp8Ao=
Subject key identifier:   85:23:7A:0C:65:20:17:B9:00:5E:E1:6A:55:50:B4:D8:2C:86:E3:75
Certificate issuer:       /CN=5b63dc77edcd15d60f85c19a2d4c558d2ecf4791
Certificate serial:       036721
Authority key identifier: 02:05:5F:F5:2B:76:FF:06:D0:40:8B:1C:BC:C3:30:00:78:DA:5A:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b63dc77edcd15d60f85c19a2d4c558d2ecf4791.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/109e0bda-90a6-47bf-aff9-fce3fa714347/27dcf1c771afaac36b031a0b9c900e0f58a2ffcf.roa
Signing time:             Thu 08 Sep 2022 13:24:08 +0000
ROA not before:           Thu 08 Sep 2022 13:24:04 +0000
ROA not after:            Sun 08 Sep 2024 13:24:04 +0000
asID:                     262186
IP address blocks:        179.49.160.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223009 (0x36721)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b63dc77edcd15d60f85c19a2d4c558d2ecf4791
        Validity
            Not Before: Sep  8 13:24:04 2022 GMT
            Not After : Sep  8 13:24:04 2024 GMT
        Subject: CN=27dcf1c771afaac36b031a0b9c900e0f58a2ffcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f0:84:95:e0:49:c2:06:56:58:12:2a:7a:ec:
                    31:90:94:67:22:56:ab:df:60:bc:85:00:2a:bb:62:
                    a1:8f:43:56:b6:69:9d:e5:23:27:f2:62:7a:49:30:
                    13:07:7a:91:45:0c:e1:c0:04:78:6c:e3:25:12:60:
                    4d:08:fb:65:25:7d:1e:88:19:3f:b4:92:97:16:ca:
                    f9:4d:be:94:69:44:43:89:09:c1:b1:a2:40:e9:a5:
                    29:f2:5c:4e:8e:b1:d6:1b:cc:88:ce:06:97:f2:6f:
                    b0:3f:0a:d9:e8:89:c0:29:05:e8:74:09:27:c9:22:
                    ce:69:48:f8:fa:e8:99:12:4f:0e:6f:e2:ad:d4:d3:
                    92:5c:b0:f8:fa:0b:89:9b:ae:cf:d1:13:25:07:aa:
                    13:bf:87:1a:58:ab:b1:ac:c7:36:45:f6:03:0f:8f:
                    6e:2a:43:1c:71:24:66:25:43:bc:58:56:1d:59:1c:
                    ae:5f:1a:4a:b3:17:99:bb:49:ff:17:01:1a:7c:6a:
                    30:04:a2:de:3b:68:7c:51:b8:4c:89:87:3e:68:09:
                    23:39:2b:c9:03:7b:4b:6f:b6:74:44:3f:09:65:b3:
                    ed:aa:b1:92:45:ea:a6:d1:68:e1:d4:fc:8a:5b:d7:
                    87:0c:62:8d:8c:13:63:58:54:e5:95:77:64:f1:bc:
                    88:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:23:7A:0C:65:20:17:B9:00:5E:E1:6A:55:50:B4:D8:2C:86:E3:75
            X509v3 Authority Key Identifier:
                keyid:02:05:5F:F5:2B:76:FF:06:D0:40:8B:1C:BC:C3:30:00:78:DA:5A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b63dc77edcd15d60f85c19a2d4c558d2ecf4791.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/109e0bda-90a6-47bf-aff9-fce3fa714347/27dcf1c771afaac36b031a0b9c900e0f58a2ffcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/109e0bda-90a6-47bf-aff9-fce3fa714347/5b63dc77edcd15d60f85c19a2d4c558d2ecf4791.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:e9:d3:b8:a7:60:34:80:de:de:a4:cd:d1:8e:36:47:a8:68:
         1a:99:11:cb:00:25:8b:4e:4c:23:6b:0a:5b:9c:5a:ff:24:f2:
         e2:a2:b4:9b:5b:e3:d2:24:ab:c9:60:e3:f8:62:18:e5:56:5b:
         df:3f:41:fb:34:48:49:3d:9b:2b:68:e5:61:64:28:73:da:1e:
         76:d6:a5:f6:49:3c:ea:e6:7a:3d:e9:b2:60:01:8b:f1:5e:9f:
         2b:6a:ec:f2:ac:db:a8:a5:a5:19:3e:78:09:1f:77:0a:ff:f4:
         95:ac:16:af:d5:bd:d6:58:3d:6b:75:df:93:af:c4:4e:a1:67:
         43:14:bf:27:b5:55:aa:62:b5:12:3e:ed:c3:39:b9:a8:15:d9:
         33:4c:6b:47:ac:62:35:15:c7:82:9e:88:d0:51:3c:88:fc:bc:
         58:ec:b9:3e:74:cc:4c:7c:56:3b:db:44:77:83:53:18:ab:6c:
         25:06:12:15:ac:a4:f4:f2:98:a0:53:4b:4e:de:4a:be:5b:62:
         e8:82:1e:32:d4:c3:25:a2:28:fb:47:bf:d0:07:c8:d6:4f:94:
         cd:c1:db:5e:9d:f2:40:f2:49:29:04:5e:32:c6:67:da:16:de:
         d5:a0:64:cb:4f:4a:83:47:a2:d3:08:cd:3a:8a:44:f7:25:1d:
         0d:67:33:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----