Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/a41f6091bf841d7a26cdf9c9ac954243cc93c930.roa
File:                     a41f6091bf841d7a26cdf9c9ac954243cc93c930.roa (raw, json)
Hash identifier:          aQTRmJQAX9uJQhg6U24p9IW3m/Ub0NU+uk/Uu40Dn9E=
Subject key identifier:   CD:98:C8:2B:2D:C8:3B:03:4C:FD:97:F5:35:87:FA:13:07:19:9C:9B
Certificate issuer:       /CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
Certificate serial:       0324D1
Authority key identifier: 86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/a41f6091bf841d7a26cdf9c9ac954243cc93c930.roa
Signing time:             Wed 20 Apr 2022 22:14:17 +0000
ROA not before:           Wed 20 Apr 2022 03:00:00 +0000
ROA not after:            Sat 20 Apr 2024 03:00:00 +0000
asID:                     262186
IP address blocks:        189.85.40.0/22 maxlen: 25

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206033 (0x324d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
        Validity
            Not Before: Apr 20 03:00:00 2022 GMT
            Not After : Apr 20 03:00:00 2024 GMT
        Subject: CN=a41f6091bf841d7a26cdf9c9ac954243cc93c930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fd:b9:51:e9:5c:e1:68:3f:fa:9f:95:0f:fb:
                    8e:61:45:41:4d:13:52:4a:18:41:46:03:f8:81:22:
                    7b:b6:55:c4:5c:6f:16:e9:78:11:38:64:9f:0c:2a:
                    76:65:03:71:fe:be:e2:68:8d:c6:35:95:b2:5a:73:
                    3f:46:7a:42:e8:93:65:49:13:32:50:e3:ea:c3:17:
                    e4:07:52:40:9d:ed:68:0d:41:37:59:76:7c:5c:24:
                    4b:1b:48:f0:19:cd:50:81:f8:a3:a7:45:a1:20:8d:
                    2c:eb:35:e9:3a:ac:ff:0d:a7:ce:51:53:8d:e8:47:
                    7a:8a:dd:50:6d:ce:f5:83:55:f1:17:d1:32:8a:59:
                    37:34:e5:c0:cd:1f:1b:ba:b2:1b:f1:a4:90:c2:dd:
                    ba:ec:ae:ff:42:1a:66:49:06:88:0a:06:99:40:60:
                    8a:6d:b2:d0:a1:48:3c:37:df:d3:43:35:c9:8a:0a:
                    9f:21:4c:c0:90:4d:dd:50:5c:48:4f:8e:7c:c6:cc:
                    b1:ef:1f:11:5c:9e:a5:da:da:e4:4e:e4:e5:86:9b:
                    b6:4c:58:13:fa:46:a0:f8:19:c0:4d:55:02:47:4a:
                    83:7a:5f:e8:88:1b:76:07:5b:e3:53:db:33:f6:86:
                    6f:02:7f:c2:bc:25:01:41:e2:20:ef:0b:22:89:9d:
                    aa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:98:C8:2B:2D:C8:3B:03:4C:FD:97:F5:35:87:FA:13:07:19:9C:9B
            X509v3 Authority Key Identifier:
                keyid:86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/a41f6091bf841d7a26cdf9c9ac954243cc93c930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/c5ef86124a38f3fc46e85e51e01411db37fdb204.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:39:9a:f3:50:8e:a9:0a:39:87:4e:c4:11:67:76:f8:c2:69:
         4d:32:11:dc:1e:67:33:3b:df:1f:19:06:d7:d0:f1:84:64:5f:
         bc:6d:5b:75:ab:4c:37:d3:a9:9c:9b:41:1d:01:a2:d2:a7:bb:
         27:02:e8:07:2e:e8:c2:3e:d4:83:83:e2:f9:af:a0:00:ae:91:
         c1:0d:2d:46:a4:ae:84:26:eb:96:82:49:1d:e3:47:7e:e3:87:
         77:52:b3:17:f5:3b:da:e0:cf:de:a2:0a:3e:d9:b7:4e:99:f2:
         4e:9f:20:fc:ed:d3:9d:51:b7:b6:d1:38:ea:f5:0e:12:cc:cb:
         07:33:c4:88:c8:60:c8:16:3d:c0:d3:c0:1e:50:3a:03:bc:ec:
         01:0c:db:74:89:2e:c7:c2:38:38:c6:9a:d8:96:2a:97:ab:bb:
         b3:27:a7:e0:cc:1c:0a:25:9e:e3:44:75:0b:72:3b:2a:14:f7:
         b2:9b:40:bc:0c:d6:8a:1f:45:28:67:e3:34:f3:69:ee:c6:c7:
         d5:db:84:b7:cf:b6:85:69:b0:47:6f:7f:aa:fc:c5:f2:b9:5c:
         b9:8e:3f:92:81:f3:04:13:5c:bd:9f:94:80:39:be:ae:e6:c5:
         6c:76:8e:61:87:16:e1:a1:c6:ed:96:7f:b7:71:6e:46:6f:9c:
         d7:05:88:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----