Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/39b5143bebc87269b454b896c9b5bfbfc9e71150.roa
File:                     39b5143bebc87269b454b896c9b5bfbfc9e71150.roa (raw, json)
Hash identifier:          R1l8NJDhxyOAMvyej3d6ZQygTBOrtKZ9hQ272JVTRyg=
Subject key identifier:   B7:17:63:3D:3B:8F:D2:03:C9:4B:22:45:C1:4A:0D:25:9E:79:1A:49
Certificate issuer:       /CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
Certificate serial:       03B663
Authority key identifier: 86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/39b5143bebc87269b454b896c9b5bfbfc9e71150.roa
Signing time:             Thu 05 May 2022 11:53:04 +0000
ROA not before:           Thu 05 May 2022 03:00:00 +0000
ROA not after:            Wed 05 May 2027 03:00:00 +0000
asID:                     262186
IP address blocks:        189.85.42.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243299 (0x3b663)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
        Validity
            Not Before: May  5 03:00:00 2022 GMT
            Not After : May  5 03:00:00 2027 GMT
        Subject: CN=39b5143bebc87269b454b896c9b5bfbfc9e71150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:06:46:4c:8f:20:40:c1:78:6e:1f:5d:33:2c:
                    2e:52:84:78:95:55:d8:94:9a:93:54:ee:07:66:81:
                    51:63:51:5d:b9:5a:52:f3:45:a9:0c:9d:f8:1c:c5:
                    70:e0:4b:73:cb:d1:f9:8c:b0:20:5b:18:94:08:d0:
                    b0:40:52:16:ff:14:8b:cc:0b:c2:91:10:0b:7b:d4:
                    b4:f6:25:58:72:ac:d2:1b:32:09:3f:f9:2d:04:5f:
                    4a:cf:d6:6e:a2:39:ec:c1:e2:a0:ec:9f:35:23:8b:
                    de:17:bd:24:44:67:af:a6:33:e7:21:c2:94:5b:25:
                    fd:b5:e2:41:2e:f8:70:5a:31:a0:e9:37:9c:55:5e:
                    25:dd:f2:b4:24:aa:92:45:c8:3a:c9:b1:bb:e4:29:
                    b4:b8:8f:61:3e:32:69:d7:bb:bd:cd:26:ab:b8:fd:
                    4f:3a:ed:3f:27:26:ab:28:57:15:8b:68:c7:76:9c:
                    04:d5:e4:4a:41:66:3f:bd:33:1d:9e:ea:4b:6f:08:
                    ee:0c:8c:ae:68:83:71:fb:20:b0:d9:27:e3:ef:81:
                    11:69:ee:d6:bd:ce:72:db:e7:77:48:83:19:a2:60:
                    6e:23:ab:60:52:39:3e:d1:c9:9d:8c:21:cb:8e:40:
                    8c:4b:b6:8d:b6:e6:fa:20:ae:aa:ba:06:f7:d0:2c:
                    e8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:17:63:3D:3B:8F:D2:03:C9:4B:22:45:C1:4A:0D:25:9E:79:1A:49
            X509v3 Authority Key Identifier:
                keyid:86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/39b5143bebc87269b454b896c9b5bfbfc9e71150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/c5ef86124a38f3fc46e85e51e01411db37fdb204.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:9a:91:8b:bb:55:61:3c:8c:1b:0e:75:f0:15:18:dd:70:14:
         74:d9:d2:b7:5d:18:0a:fd:f4:d7:ac:86:a2:36:f0:e0:6c:eb:
         50:f7:79:23:86:f7:60:a1:ff:a7:78:4d:33:ff:36:39:a7:c8:
         7f:57:0c:33:a0:e8:0f:44:a4:0d:fa:46:e2:f9:24:f8:ec:c1:
         85:5f:80:44:ae:9b:25:19:9d:ec:47:65:fa:a1:84:8b:be:5c:
         80:13:e9:71:9d:ec:25:b6:4c:32:93:76:23:74:cd:65:09:53:
         34:8b:62:59:20:d9:0a:ed:21:f5:71:c3:d3:49:ba:92:64:f9:
         69:f0:ec:dc:cf:9b:84:a8:a0:d7:44:b4:02:95:f9:69:9c:7d:
         07:a9:31:21:61:38:f4:2c:e5:16:0e:92:64:b1:91:c5:a5:66:
         60:0a:e0:1f:3e:f0:5e:23:3c:e9:3f:8e:fe:da:d4:5a:d4:b8:
         73:fb:53:5e:60:0e:1c:c8:47:68:fc:b4:b0:c1:4e:ee:d7:be:
         c2:8b:9a:c9:42:a4:f1:e0:f2:46:4b:6d:62:36:ce:be:73:9a:
         13:4f:b2:7f:bd:b6:55:c1:38:77:8f:0a:57:75:2b:ba:f2:0b:
         10:b8:5d:78:53:3d:d3:bf:c3:c2:1d:9e:90:b6:56:de:3d:2b:
         62:cb:7a:05
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDA7ZjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM1
ZWY4NjEyNGEzOGYzZmM0NmU4NWU1MWUwMTQxMWRiMzdmZGIyMDQwHhcNMjIwNTA1
MDMwMDAwWhcNMjcwNTA1MDMwMDAwWjAzMTEwLwYDVQQDEygzOWI1MTQzYmViYzg3
MjY5YjQ1NGI4OTZjOWI1YmZiZmM5ZTcxMTUwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkgZGTI8gQMF4bh9dMywuUoR4lVXYlJqTVO4HZoFRY1FduVpS
80WpDJ34HMVw4Etzy9H5jLAgWxiUCNCwQFIW/xSLzAvCkRALe9S09iVYcqzSGzIJ
P/ktBF9Kz9ZuojnsweKg7J81I4veF70kRGevpjPnIcKUWyX9teJBLvhwWjGg6Tec
VV4l3fK0JKqSRcg6ybG75Cm0uI9hPjJp17u9zSaruP1POu0/JyarKFcVi2jHdpwE
1eRKQWY/vTMdnupLbwjuDIyuaINx+yCw2Sfj74ERae7Wvc5y2+d3SIMZomBuI6tg
Ujk+0cmdjCHLjkCMS7aNtub6IK6qugb30CzoJwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLcXYz07j9IDyUsiRcFKDSWeeRpJMB8GA1UdIwQYMBaAFIZWaXKATb3tFH/z
oDjCtpWtwshrMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzVlZjg2
MTI0YTM4ZjNmYzQ2ZTg1ZTUxZTAxNDExZGIzN2ZkYjIwNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTkxYzAxZmUtNWUwMi00MjgwLWIyYzMtZTNiZTFm
MjBjMDZkLzM5YjUxNDNiZWJjODcyNjliNDU0Yjg5NmM5YjViZmJmYzllNzExNTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xOTFjMDFmZS01ZTAyLTQyODAtYjJjMy1lM2Jl
MWYyMGMwNmQvYzVlZjg2MTI0YTM4ZjNmYzQ2ZTg1ZTUxZTAxNDExZGIzN2ZkYjIw
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL1VKjANBgkqhkiG9w0BAQsFAAOCAQEAHZqRi7tVYTyMGw51
8BUY3XAUdNnSt10YCv3016yGojbw4GzrUPd5I4b3YKH/p3hNM/82OafIf1cMM6Do
D0SkDfpG4vkk+OzBhV+ARK6bJRmd7Edl+qGEi75cgBPpcZ3sJbZMMpN2I3TNZQlT
NItiWSDZCu0h9XHD00m6kmT5afDs3M+bhKig10S0ApX5aZx9B6kxIWE49CzlFg6S
ZLGRxaVmYArgHz7wXiM86T+O/trUWtS4c/tTXmAOHMhHaPy0sMFO7te+wouayUKk
8eDyRkttYjbOvnOaE0+yf722VcE4d48KV3UruvILELhdeFM907/Dwh2ekLZW3j0r
Yst6BQ==
-----END CERTIFICATE-----