Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/0654fc2a824684568926379fe7dfde474ed5a954.roa
File:                     0654fc2a824684568926379fe7dfde474ed5a954.roa (raw, json)
Hash identifier:          Mk1ywBmKh41+vpC9n6SShLprtF+TGoBnmM349bUrfwQ=
Subject key identifier:   8B:09:9E:C3:1F:59:21:3F:90:7A:C7:05:B5:F9:29:2A:F5:13:D5:34
Certificate issuer:       /CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
Certificate serial:       039638
Authority key identifier: 86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/0654fc2a824684568926379fe7dfde474ed5a954.roa
Signing time:             Wed 04 May 2022 17:35:54 +0000
ROA not before:           Wed 04 May 2022 03:00:00 +0000
ROA not after:            Tue 04 May 2027 03:00:00 +0000
asID:                     262186
IP address blocks:        189.85.40.0/22 maxlen: 32
                          2803:21e0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235064 (0x39638)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
        Validity
            Not Before: May  4 03:00:00 2022 GMT
            Not After : May  4 03:00:00 2027 GMT
        Subject: CN=0654fc2a824684568926379fe7dfde474ed5a954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d4:35:aa:98:e0:35:26:58:59:5a:73:9e:b0:
                    14:64:ea:30:b8:ac:3b:9a:30:a3:04:6c:d0:ae:24:
                    39:2a:22:b9:9b:69:e1:80:a4:85:96:e8:50:b1:c0:
                    54:e0:ef:ec:52:3a:5e:a3:4b:88:02:cc:35:4b:a8:
                    6f:48:d1:0f:cc:5a:09:5c:28:a9:f6:cd:f0:16:25:
                    c4:a8:8c:99:ef:2c:3b:29:5c:11:99:38:58:f3:26:
                    ca:28:30:be:47:e4:42:28:94:df:92:42:23:e2:a9:
                    fa:9c:64:58:2e:bc:60:d8:ac:68:17:3e:f8:05:61:
                    d3:3f:d4:ab:c4:69:23:bc:ff:e0:17:42:20:80:4c:
                    41:cb:c4:6c:bd:38:d1:f0:1b:71:5b:2f:3f:8b:b8:
                    8e:76:51:c5:1e:5e:28:f0:33:b5:3a:95:44:1c:fe:
                    35:62:91:90:85:af:90:52:cb:94:92:12:07:6d:b3:
                    7b:e5:11:c5:7a:46:a5:c7:ad:48:3e:44:20:5f:cf:
                    8d:a7:e8:a4:77:0c:3d:01:ca:24:c2:41:a8:78:49:
                    40:09:3e:a5:7d:d3:00:87:b5:39:01:72:39:d1:4b:
                    88:32:5a:55:1f:8e:7e:80:58:2e:36:d5:9a:6f:d4:
                    10:04:d7:73:9e:37:37:76:bc:b4:0c:90:d5:ec:10:
                    f0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:09:9E:C3:1F:59:21:3F:90:7A:C7:05:B5:F9:29:2A:F5:13:D5:34
            X509v3 Authority Key Identifier:
                keyid:86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/0654fc2a824684568926379fe7dfde474ed5a954.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/c5ef86124a38f3fc46e85e51e01411db37fdb204.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.40.0/22
                IPv6:
                  2803:21e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:17:63:a8:3b:f2:18:80:6c:64:e9:ff:1d:3a:96:a6:ec:b5:
         45:10:88:9f:e6:06:20:93:80:84:ef:30:c5:59:d4:10:d4:43:
         21:bb:22:17:bb:bc:98:dd:72:ca:fc:53:e2:b1:eb:3e:90:28:
         8b:79:f9:e4:10:9b:c2:b8:82:0f:27:e8:a4:d3:30:05:2c:28:
         c6:b7:d2:fe:3e:9c:40:30:0d:59:95:91:39:59:51:2b:40:f0:
         94:b4:0e:09:9d:3e:cb:82:50:34:ac:05:93:c9:97:92:99:48:
         4b:b9:b5:90:ee:ba:92:95:e9:55:32:7f:ca:b6:d8:1b:2a:9c:
         8f:7f:95:c6:7e:e2:fd:34:d9:a6:16:fb:c3:93:92:a3:51:44:
         51:e0:d4:25:b2:45:59:9c:3e:6b:31:0e:ad:f1:ab:cb:5c:c1:
         2f:fc:27:9d:bf:80:7f:f1:f7:5c:54:79:09:a0:9b:0e:46:9c:
         94:b3:e9:b4:87:f1:9c:7e:f8:7b:a7:81:54:c3:93:70:17:54:
         11:a1:c2:ca:05:9e:7f:d7:a0:bd:08:d0:5a:f2:7f:b3:22:74:
         86:54:ec:39:44:c6:5b:e6:af:79:d7:93:6e:5d:3e:d1:95:2b:
         82:77:85:6f:f8:60:b1:d5:12:6a:d9:28:c0:14:52:47:c8:c9:
         b0:d7:e0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----