Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/1912d2bc8dea4bb0c662a4f16dff2469c2601a96.roa
File:                     1912d2bc8dea4bb0c662a4f16dff2469c2601a96.roa (raw, json)
Hash identifier:          GLR+nYFTbbgENc2LhiE+FcW4IMrxBpckkH+e0bmQj2o=
Subject key identifier:   6D:93:08:31:70:D1:C2:89:BC:1E:91:3F:E9:41:2E:93:37:77:20:3F
Certificate issuer:       /CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
Certificate serial:       04CECD
Authority key identifier: 86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/1912d2bc8dea4bb0c662a4f16dff2469c2601a96.roa
Signing time:             Wed 15 Jun 2022 22:21:58 +0000
ROA not before:           Thu 05 May 2022 03:00:00 +0000
ROA not after:            Wed 05 May 2027 03:00:00 +0000
asID:                     272086
IP address blocks:        189.85.41.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315085 (0x4cecd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
        Validity
            Not Before: May  5 03:00:00 2022 GMT
            Not After : May  5 03:00:00 2027 GMT
        Subject: CN=1912d2bc8dea4bb0c662a4f16dff2469c2601a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4a:c6:3b:60:4e:7c:cb:8a:3e:8c:95:f6:16:
                    bc:82:aa:5e:0b:e3:c0:64:d9:a5:c6:11:49:3a:75:
                    08:69:c4:f2:bc:9c:b6:5f:62:72:80:5e:44:e9:71:
                    5e:53:7c:d9:0c:da:27:fd:81:fb:c5:b5:6a:c8:09:
                    97:d6:c4:3d:79:9c:97:55:45:e2:0d:50:35:a9:f0:
                    b1:87:c4:94:48:04:28:ed:3a:c4:c1:5d:20:12:bc:
                    e1:aa:2c:8a:30:42:20:75:70:f2:d0:bd:99:b9:0d:
                    8f:ab:7b:3f:ed:7b:4d:fe:5f:71:a2:48:4e:8e:3d:
                    ea:a3:1e:c7:20:98:2c:f8:43:27:f4:25:28:ac:8c:
                    ed:60:2a:82:19:b3:20:be:c3:7a:db:c1:7a:1b:2d:
                    1a:19:cf:d4:28:bb:0f:5c:60:1f:ce:21:3a:e3:5c:
                    37:88:63:0c:d5:2c:34:d2:75:5b:bb:05:fd:9e:39:
                    d5:e4:a9:f5:ca:ac:50:22:a4:71:30:d2:fe:94:6f:
                    ea:c9:62:88:31:94:8a:bb:49:fc:f8:dc:ad:a7:18:
                    bf:5c:54:ca:d6:f1:cb:7a:7f:ba:9c:f1:de:0e:b7:
                    54:5e:68:5c:7b:68:61:57:31:fb:ec:38:40:d6:5a:
                    11:31:4a:30:0c:90:67:2f:31:9d:a1:e9:ae:cb:de:
                    9c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:93:08:31:70:D1:C2:89:BC:1E:91:3F:E9:41:2E:93:37:77:20:3F
            X509v3 Authority Key Identifier:
                keyid:86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/1912d2bc8dea4bb0c662a4f16dff2469c2601a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/c5ef86124a38f3fc46e85e51e01411db37fdb204.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:07:1f:77:0b:4f:7f:5d:bc:99:01:55:3b:9f:39:9c:64:da:
         2e:e7:d8:76:39:42:10:d5:db:91:8d:be:4e:91:a0:52:11:a8:
         e7:9f:0a:dd:e6:7d:80:a1:58:4f:8b:8b:03:15:d3:5b:ac:3e:
         53:3b:31:9b:0a:3b:06:e2:9c:13:75:36:81:14:44:d1:4e:80:
         9a:83:c9:fc:25:e2:d8:c8:8d:a1:48:28:23:d9:44:9c:dc:05:
         ad:24:87:b9:ae:bb:89:98:bf:79:37:d8:dc:4e:11:dc:41:09:
         ca:14:4a:67:fd:ff:13:4e:50:26:66:da:d2:fe:9d:db:45:93:
         3d:40:b8:5a:c0:a0:73:ff:98:e5:2a:49:c6:cb:9a:11:e1:27:
         db:22:82:b2:96:a2:f0:d3:66:2f:b1:d1:50:65:a2:ab:c0:0e:
         32:d3:9e:94:93:d3:7e:cc:71:d8:0f:b4:ab:30:7f:f3:48:a4:
         db:cb:8a:eb:f2:dc:4a:9a:20:34:46:30:3c:c7:0a:b2:25:81:
         60:13:51:cc:c8:26:d4:bb:1b:57:eb:56:ad:a4:38:5e:0e:ab:
         84:2a:2f:82:17:53:fa:38:0e:e6:9c:37:b1:2d:e5:e4:57:3a:
         b4:ab:15:57:72:a4:47:f3:f1:ba:71:cc:b9:ee:a8:b9:88:77:
         26:60:4e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----