Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/190c8856f4247b5aa7552f0e9ca4a7e46ba96b88.roa
File:                     190c8856f4247b5aa7552f0e9ca4a7e46ba96b88.roa (raw, json)
Hash identifier:          wDcEKKFe9hxzWaejuqevMwYeNHGPi27K/6YzBda6/m0=
Subject key identifier:   EA:EF:22:C5:16:8D:20:B5:91:64:0C:01:50:A4:AD:9D:1F:C8:B9:C3
Certificate issuer:       /CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
Certificate serial:       03BC77
Authority key identifier: 86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/190c8856f4247b5aa7552f0e9ca4a7e46ba96b88.roa
Signing time:             Thu 05 May 2022 11:53:45 +0000
ROA not before:           Thu 05 May 2022 03:00:00 +0000
ROA not after:            Wed 05 May 2027 03:00:00 +0000
asID:                     262186
IP address blocks:        189.85.43.0/25 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244855 (0x3bc77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
        Validity
            Not Before: May  5 03:00:00 2022 GMT
            Not After : May  5 03:00:00 2027 GMT
        Subject: CN=190c8856f4247b5aa7552f0e9ca4a7e46ba96b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:66:97:f6:f2:ed:a1:e1:bd:d0:42:d7:93:f0:
                    bb:21:36:eb:23:43:87:23:10:9c:72:c4:53:ec:b2:
                    9d:23:35:cd:75:3b:43:99:1d:fd:ce:c9:6f:16:cd:
                    13:70:39:7d:a2:3f:1e:72:27:a0:d5:15:bc:5f:80:
                    9c:36:78:51:8d:a4:bb:3d:f3:9a:ce:2a:ab:5b:b0:
                    a0:8a:3e:18:f2:da:10:5d:60:62:4c:59:9b:21:62:
                    59:70:49:aa:80:67:e7:67:8c:91:5e:de:97:30:76:
                    97:0d:98:b2:3b:8e:6e:04:d3:e6:62:e9:86:21:3d:
                    9c:11:73:39:1c:e0:40:53:8c:2e:f9:63:db:9c:fc:
                    b6:72:15:06:6c:18:5d:fc:6a:50:ee:eb:27:a5:7a:
                    0c:d6:06:b3:8d:c8:61:f6:3d:8f:af:53:0b:3c:6b:
                    c7:13:00:bb:22:06:f2:ee:98:fb:89:8c:50:fc:72:
                    f9:72:81:5a:88:9d:fa:7d:31:97:7f:af:f0:cd:ea:
                    c0:00:c3:80:96:10:c2:ca:7c:13:83:df:08:80:ab:
                    9b:64:a0:c9:16:7a:c2:5b:f1:63:90:6b:4e:7b:a0:
                    3b:c5:d9:12:8b:11:e2:bc:66:20:55:eb:e1:c5:e5:
                    6d:03:b5:da:b9:1e:ac:a8:7f:2f:94:95:c8:06:e9:
                    29:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EF:22:C5:16:8D:20:B5:91:64:0C:01:50:A4:AD:9D:1F:C8:B9:C3
            X509v3 Authority Key Identifier:
                keyid:86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/190c8856f4247b5aa7552f0e9ca4a7e46ba96b88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/c5ef86124a38f3fc46e85e51e01411db37fdb204.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.43.0/25

    Signature Algorithm: sha256WithRSAEncryption
         3c:f2:75:08:17:1c:2f:61:ea:33:bc:f4:59:c5:9e:44:40:37:
         fa:b5:a8:8d:c6:7c:f7:e6:8e:4f:0a:1a:18:66:bb:a5:19:ad:
         da:7c:a1:f7:4e:1c:10:31:02:3b:f3:6f:0c:cc:42:d4:a2:83:
         0e:76:d6:80:e3:6f:44:a8:88:19:57:33:51:c0:15:e6:b9:5c:
         5a:50:c3:41:a2:3b:91:8b:19:ea:48:65:9a:e0:68:89:ec:2f:
         02:cb:19:6e:24:37:10:16:88:4b:8b:c8:0d:b8:d7:77:37:5b:
         a3:a3:bf:22:6b:cf:46:9d:ba:c4:95:b3:c6:66:4c:da:bd:de:
         07:1d:1b:e4:c5:b3:f6:76:75:df:0c:dd:74:3d:d8:14:37:a2:
         c2:0e:fd:e1:8a:c7:f0:44:64:63:6f:fc:f2:62:13:0e:47:f0:
         a4:db:47:63:f8:62:44:b7:84:fe:46:67:f6:bb:3f:e0:67:dc:
         05:95:ba:58:7f:6b:31:5e:1f:7c:1f:bb:3f:10:c0:f9:20:18:
         69:ae:5e:39:47:fd:a2:6c:d7:6b:c4:58:18:6b:f1:1f:95:f6:
         82:67:4f:19:1b:2d:b8:d7:f3:2c:85:ce:b0:2b:d8:ad:b0:ce:
         41:12:b8:8f:1b:44:9e:16:3e:58:6b:4b:c4:f2:6f:91:33:06:
         b1:2c:e3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----