Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1414009e-0591-4a9e-9f5e-c3d021bda559/c0ffdb6a8d9ab04288dde8ec18aefb6e77866eb2.roa
File:                     c0ffdb6a8d9ab04288dde8ec18aefb6e77866eb2.roa (raw, json)
Hash identifier:          vvJfS3t86N4PVoz3N+OGrjab/bgTnt5ItgDSscgthHs=
Subject key identifier:   4F:E5:9D:8C:1C:32:26:D1:69:5A:BC:36:D0:A9:1A:03:0D:98:A8:8A
Certificate issuer:       /CN=614313966e4aafe32412b5d11f342cf235b5cdd6
Certificate serial:       035C
Authority key identifier: 59:3C:C0:4A:38:47:BD:41:BC:E9:E6:8B:4E:A8:A4:6F:D3:0E:38:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/614313966e4aafe32412b5d11f342cf235b5cdd6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1414009e-0591-4a9e-9f5e-c3d021bda559/c0ffdb6a8d9ab04288dde8ec18aefb6e77866eb2.roa
Signing time:             Sat 31 Jul 2021 18:28:52 +0000
ROA not before:           Sat 31 Jul 2021 03:00:00 +0000
ROA not after:            Mon 31 Jul 2023 03:00:00 +0000
asID:                     271881
IP address blocks:        190.113.56.0/22 maxlen: 24
                          2803:dc10::/32 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860 (0x35c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614313966e4aafe32412b5d11f342cf235b5cdd6
        Validity
            Not Before: Jul 31 03:00:00 2021 GMT
            Not After : Jul 31 03:00:00 2023 GMT
        Subject: CN=c0ffdb6a8d9ab04288dde8ec18aefb6e77866eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e7:32:a0:ea:e3:82:0c:cf:17:2d:e1:d0:6f:
                    32:19:a7:58:6a:e3:06:c7:71:be:ae:17:45:35:81:
                    da:47:0d:a8:15:b9:df:e7:54:42:2a:49:c1:49:5d:
                    3e:ad:ba:47:c2:b7:34:d6:4a:d5:bb:28:87:a0:63:
                    2b:8e:63:fb:41:5e:66:da:bb:7c:1e:79:72:96:10:
                    bd:c2:6e:ea:08:3b:22:7f:f9:dd:53:9b:18:7f:a7:
                    23:f0:1a:0f:e8:ed:41:af:9b:0d:3c:49:d8:42:79:
                    af:b1:0a:e9:35:30:cd:a4:28:a3:8c:30:25:93:43:
                    8a:27:af:39:5c:5d:49:f3:f2:e4:dd:4f:3a:cc:d4:
                    78:5c:76:a9:fc:62:64:90:fa:c6:8f:cd:00:8d:8d:
                    7c:b8:c6:bb:f8:8f:1b:7a:58:67:09:22:c6:97:ba:
                    03:f2:a2:47:be:a6:54:9e:c7:cb:f2:99:cc:28:64:
                    9e:35:aa:f9:f2:d9:3b:15:27:a5:85:83:9d:95:a4:
                    99:41:2a:c9:ba:0e:ce:18:63:a8:1a:e7:51:8a:ae:
                    69:91:ea:be:8c:83:71:22:50:88:9b:4f:4e:e3:a9:
                    0b:9a:a4:04:89:7d:be:85:9b:12:f3:80:1d:eb:f6:
                    f5:e1:51:2e:36:18:f1:6c:c8:41:cf:7e:43:d2:fb:
                    9f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E5:9D:8C:1C:32:26:D1:69:5A:BC:36:D0:A9:1A:03:0D:98:A8:8A
            X509v3 Authority Key Identifier:
                keyid:59:3C:C0:4A:38:47:BD:41:BC:E9:E6:8B:4E:A8:A4:6F:D3:0E:38:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/614313966e4aafe32412b5d11f342cf235b5cdd6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1414009e-0591-4a9e-9f5e-c3d021bda559/c0ffdb6a8d9ab04288dde8ec18aefb6e77866eb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1414009e-0591-4a9e-9f5e-c3d021bda559/614313966e4aafe32412b5d11f342cf235b5cdd6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.56.0/22
                IPv6:
                  2803:dc10::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:b7:75:ad:bd:ef:cc:d4:11:44:81:1e:a0:64:5c:3c:9d:66:
         98:06:5d:8f:a4:d1:31:3f:d3:93:df:b5:92:e9:63:0d:09:5d:
         00:10:a8:cf:b1:1b:28:40:08:b0:fd:86:8c:d8:d3:2e:c0:41:
         e4:d0:ca:45:a7:dc:cf:09:8b:5b:de:8a:8e:7d:8a:4c:c6:75:
         08:d6:56:c1:ab:41:f0:fd:59:07:76:2d:8d:07:5c:1a:d7:16:
         30:2b:f5:f4:45:e5:bf:38:af:6b:74:07:2b:87:b0:cb:d7:17:
         64:36:c8:4b:5e:5e:3c:23:4b:99:5b:81:1b:02:2a:2c:9a:c3:
         33:9a:6c:0f:7b:ba:f4:15:df:92:7a:93:33:91:12:08:c2:e4:
         db:eb:99:13:24:65:69:bc:ca:96:c9:de:af:09:c7:2b:b4:9d:
         3f:55:e7:ed:c9:ca:72:23:19:ac:72:51:b8:8d:a2:ff:63:c1:
         43:91:52:66:97:58:00:b9:18:55:e3:f6:3b:28:d4:b1:13:5a:
         df:96:d5:6c:c1:0a:3b:e8:62:91:f1:5f:a2:0f:1e:d8:98:b8:
         72:b7:fa:6f:99:4b:fc:86:19:3f:b2:64:0a:90:36:24:e0:bb:
         f3:72:05:1d:5c:a0:7f:f1:67:1b:af:76:15:a7:45:43:0a:f1:
         e8:56:d6:66
-----BEGIN CERTIFICATE-----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