Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/106c8b7fa0c83803274c87dafd92c066502a1c41.roa
File:                     106c8b7fa0c83803274c87dafd92c066502a1c41.roa (raw, json)
Hash identifier:          vuy2Q4cgX07rjvzwVgyHTB8dLoVssoORODIcM1mBmjg=
Subject key identifier:   A9:F4:2F:E7:81:58:1C:77:FF:31:3A:B1:63:95:91:32:F4:37:47:91
Certificate issuer:       /CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
Certificate serial:       0D1D99
Authority key identifier: 86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/106c8b7fa0c83803274c87dafd92c066502a1c41.roa
Signing time:             Tue 02 May 2023 21:09:03 +0000
ROA not before:           Mon 01 May 2023 21:09:03 +0000
ROA not after:            Fri 02 May 2025 21:09:03 +0000
asID:                     272086
IP address blocks:        189.85.40.0/23 maxlen: 32
                          2803:21e0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 859545 (0xd1d99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
        Validity
            Not Before: May  1 21:09:03 2023 GMT
            Not After : May  2 21:09:03 2025 GMT
        Subject: CN=106c8b7fa0c83803274c87dafd92c066502a1c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:34:93:5b:75:d5:0d:78:f8:99:f0:55:4d:cb:
                    02:87:ae:43:99:77:3c:ba:0b:c4:c7:cf:c1:ad:54:
                    b0:8c:87:b2:3d:b6:34:e1:a2:4f:be:a1:3a:ee:95:
                    ca:33:ee:b8:cd:6c:af:95:64:95:42:10:4d:e8:60:
                    bf:6f:15:11:69:6b:ca:f9:a0:17:69:17:92:0a:62:
                    6e:2d:af:fc:5f:65:50:f8:8e:62:a8:ba:68:a9:c4:
                    f7:d0:3b:ae:b2:4a:85:29:65:b7:26:6e:5b:36:b3:
                    96:47:74:8b:aa:65:2c:6d:25:db:7a:fc:d9:3d:b7:
                    f3:b7:c7:e6:5c:32:91:63:df:d4:89:25:bb:16:cf:
                    f4:45:83:5c:40:57:ec:50:c5:3b:74:62:a7:19:54:
                    71:ef:e1:f0:63:2d:c4:d3:22:b9:2a:5a:ad:10:68:
                    5f:88:9d:85:92:e5:4c:b7:88:04:a2:65:63:01:0b:
                    65:7f:ca:9a:b2:2c:f6:bb:50:87:8f:16:39:7c:e1:
                    eb:af:d4:c7:0b:3a:89:c2:38:d7:5a:ea:7c:f1:a7:
                    60:5a:fd:f6:0a:5b:78:25:29:61:50:c2:47:db:07:
                    90:da:96:52:15:9d:1f:dd:23:e4:2d:d6:4f:d3:37:
                    87:92:7f:b5:62:57:77:1a:b8:46:81:9f:be:bb:22:
                    c5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F4:2F:E7:81:58:1C:77:FF:31:3A:B1:63:95:91:32:F4:37:47:91
            X509v3 Authority Key Identifier:
                keyid:86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/106c8b7fa0c83803274c87dafd92c066502a1c41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/c5ef86124a38f3fc46e85e51e01411db37fdb204.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.40.0/23
                IPv6:
                  2803:21e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:ea:f0:f2:41:6c:2b:fb:95:47:47:f6:43:a4:8f:95:e6:1f:
         d5:90:84:41:ba:26:9c:7d:90:dc:8b:9c:1a:dd:ec:8d:5f:b1:
         d9:e2:e0:27:c7:ed:80:c9:63:0e:47:e8:71:41:0f:0a:ff:e1:
         b4:6c:a2:4f:0c:22:4f:0d:ab:11:ad:e9:b2:f4:b6:ff:a1:c9:
         e7:c0:ed:a8:dd:4a:79:79:e5:ba:22:d4:15:12:0a:07:0c:e6:
         58:9f:3b:b5:18:37:30:a0:d5:67:b4:71:ed:39:eb:61:a0:b7:
         a6:55:9c:cf:5e:d0:db:a3:87:7a:17:65:db:a2:54:12:37:cc:
         44:ab:45:5e:6d:80:1b:5a:da:8b:35:2f:22:02:f2:d7:8b:c2:
         31:23:3d:e5:70:88:8c:71:04:67:06:eb:77:91:75:82:5b:a6:
         80:13:b2:50:c7:c6:18:87:e5:1d:62:86:24:2f:60:6b:18:fd:
         73:ea:7c:79:2a:48:60:69:4c:78:60:61:51:55:3b:60:36:d8:
         bd:90:4e:16:40:8e:39:a7:f2:ca:66:eb:66:13:d7:28:5a:02:
         d5:9c:98:77:b8:78:5c:f2:23:9a:ba:4a:78:91:a9:41:9b:e4:
         c6:24:71:80:45:82:0e:77:e3:a3:f6:78:f8:8a:55:0d:49:47:
         83:91:2d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----