Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/8f4b9c4a8a7e3865e3d3c01f64a2d3b24a8dcbb8.roa
File:                     8f4b9c4a8a7e3865e3d3c01f64a2d3b24a8dcbb8.roa (raw, json)
Hash identifier:          7o0RFfXk7FeVAwOExzqrY/Bfr62prD683TAvXJxyqoI=
Subject key identifier:   E1:F2:3C:6C:3B:28:BE:06:82:4C:25:78:9C:DB:D3:E4:BE:87:04:F9
Certificate issuer:       /CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
Certificate serial:       039C9E
Authority key identifier: 86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/8f4b9c4a8a7e3865e3d3c01f64a2d3b24a8dcbb8.roa
Signing time:             Thu 05 May 2022 04:16:35 +0000
ROA not before:           Wed 04 May 2022 03:00:00 +0000
ROA not after:            Tue 04 May 2027 03:00:00 +0000
asID:                     272086
IP address blocks:        189.85.40.0/22 maxlen: 32
                          2803:21e0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236702 (0x39c9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
        Validity
            Not Before: May  4 03:00:00 2022 GMT
            Not After : May  4 03:00:00 2027 GMT
        Subject: CN=8f4b9c4a8a7e3865e3d3c01f64a2d3b24a8dcbb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:23:40:47:88:77:94:e2:8b:0d:ce:15:f7:7e:
                    fe:05:a4:72:d9:bb:bf:af:ef:7f:f0:01:aa:fd:90:
                    5d:53:62:42:cd:95:66:bd:f2:8d:a1:55:29:b1:19:
                    66:e7:d9:95:69:51:f0:57:a6:44:7c:2b:86:28:37:
                    b8:72:c5:e4:ad:0e:d6:c5:6f:3a:df:5c:08:9b:42:
                    0c:0c:ea:c0:31:d0:a1:93:15:a8:e1:f6:c1:05:03:
                    22:f0:ca:b8:2f:ef:05:38:2d:b6:1e:d2:df:cb:48:
                    66:00:86:c5:d4:e4:d6:aa:ea:59:05:d7:e4:e5:bf:
                    d7:f4:01:f2:97:32:c5:f1:f0:fc:0b:99:ad:5a:eb:
                    fc:7b:48:38:fe:c4:08:71:68:07:8c:6e:94:18:a0:
                    f6:fd:87:9d:ce:18:82:a5:62:23:4c:d1:3b:c7:a6:
                    fc:8d:68:7a:4c:0c:d5:71:fd:7e:6f:87:55:7a:f5:
                    d6:27:42:dd:76:73:9c:b3:2c:39:4a:f6:06:a3:91:
                    40:6f:8a:14:3d:25:b4:be:3e:07:41:23:32:e4:c9:
                    03:e8:cd:e7:fb:62:60:c2:93:b2:0a:87:02:eb:9e:
                    3f:4b:09:23:c2:fb:5c:b1:f1:5d:2e:91:85:76:70:
                    91:96:2d:6d:ca:27:17:8c:5e:10:9e:c5:38:48:fa:
                    22:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F2:3C:6C:3B:28:BE:06:82:4C:25:78:9C:DB:D3:E4:BE:87:04:F9
            X509v3 Authority Key Identifier:
                keyid:86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/8f4b9c4a8a7e3865e3d3c01f64a2d3b24a8dcbb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/c5ef86124a38f3fc46e85e51e01411db37fdb204.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.40.0/22
                IPv6:
                  2803:21e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:59:f0:0a:ef:4a:60:86:66:56:cf:60:0e:ff:3b:8b:6e:9b:
         1f:db:87:e2:fd:cb:de:b8:55:ea:1e:ac:7f:a6:22:85:f3:c4:
         5b:b3:a3:3c:19:db:77:37:5a:37:01:10:1e:8f:08:b2:b3:68:
         59:81:50:04:72:5a:fc:fa:d9:76:de:13:17:c4:02:57:a0:43:
         6c:20:a3:ab:21:41:62:12:ce:44:3f:9c:8a:87:d5:52:6e:7b:
         10:61:98:ce:7b:52:7d:13:41:15:4e:48:f1:9a:0a:15:f9:73:
         40:af:c9:88:e5:33:b4:08:56:01:8f:cb:74:f4:44:7d:17:91:
         a2:59:a5:1f:79:1c:22:60:f7:38:fb:0f:ef:b6:4e:00:9f:cd:
         e8:a9:80:52:67:f1:6f:04:7b:35:8f:73:d1:9a:60:03:a7:0c:
         4c:d5:4d:d9:45:91:9d:b8:7f:34:d7:0e:94:45:e7:fd:21:0c:
         8a:95:f5:6b:02:e5:62:dc:b3:37:46:65:ad:76:47:2d:e4:45:
         4e:bc:5f:cf:99:3d:dc:51:02:18:a5:30:35:f0:5d:6c:e6:89:
         73:67:d5:9e:1f:2f:de:f7:6c:a0:98:d7:51:75:21:61:68:11:
         4f:b5:16:05:1f:07:51:5d:6f:b7:60:6f:f3:f8:cb:9f:ee:be:
         c8:80:72:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----