Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/c054a900cf31f10d9c48674841495a6cbc5f89c7.roa
File:                     c054a900cf31f10d9c48674841495a6cbc5f89c7.roa (raw, json)
Hash identifier:          JKiWOzCe6K4U7y0wtNPWsBviQbG4YxX5E/0EMiugcTY=
Subject key identifier:   1B:14:74:EB:D4:D4:A7:BD:63:03:A4:07:89:8C:20:A3:5F:31:92:83
Certificate issuer:       /CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
Certificate serial:       04AB36
Authority key identifier: 86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/c054a900cf31f10d9c48674841495a6cbc5f89c7.roa
Signing time:             Mon 13 Jun 2022 15:47:44 +0000
ROA not before:           Thu 05 May 2022 03:00:00 +0000
ROA not after:            Wed 05 May 2027 03:00:00 +0000
asID:                     262186
IP address blocks:        189.85.43.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305974 (0x4ab36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
        Validity
            Not Before: May  5 03:00:00 2022 GMT
            Not After : May  5 03:00:00 2027 GMT
        Subject: CN=c054a900cf31f10d9c48674841495a6cbc5f89c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a5:2a:7a:46:bc:0f:14:58:38:98:4b:82:f8:
                    a8:89:41:bd:4d:ce:4f:59:a8:20:58:3f:85:8b:a9:
                    3b:09:0e:e0:61:20:eb:62:1d:80:bf:15:9f:51:c2:
                    28:df:67:ee:b0:21:b5:f6:3e:56:78:eb:aa:45:40:
                    46:d4:7c:77:c0:a5:cd:03:99:92:87:d5:96:4c:1c:
                    e1:37:f6:2d:69:86:8a:90:46:b0:03:24:34:d3:f1:
                    fd:45:a2:fd:66:d1:da:2e:7f:e8:13:0e:52:fa:df:
                    bb:b1:38:7b:2d:a1:32:ef:2f:e9:ef:b1:da:30:7b:
                    18:91:7c:c3:00:f2:14:d3:85:b8:de:5e:0a:91:e2:
                    e1:5b:f7:f4:e4:c2:da:66:b3:fe:37:3f:9d:96:7e:
                    c7:89:c0:4d:8d:a6:e8:d6:a5:db:58:d6:29:01:60:
                    dc:93:2b:27:f1:48:b7:4d:ab:8e:e0:8a:44:5e:bc:
                    32:6e:09:3d:49:8f:9b:79:d5:dd:95:1d:82:83:d0:
                    43:5c:e3:89:a9:20:4f:fa:e2:55:48:54:40:42:74:
                    61:9c:f7:7a:f4:68:cc:f0:fa:a0:26:94:e9:48:9e:
                    bd:eb:74:c6:53:09:0c:3d:01:8b:14:1d:04:87:ba:
                    d0:5b:2c:2e:27:cc:14:04:3c:77:6d:72:af:67:85:
                    a3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:14:74:EB:D4:D4:A7:BD:63:03:A4:07:89:8C:20:A3:5F:31:92:83
            X509v3 Authority Key Identifier:
                keyid:86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/c054a900cf31f10d9c48674841495a6cbc5f89c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/c5ef86124a38f3fc46e85e51e01411db37fdb204.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:6a:39:b6:40:57:7c:70:29:1a:20:2c:18:a2:9c:3e:15:52:
         0c:fc:9b:60:2c:d5:20:52:b2:15:8f:76:fe:94:7e:f6:6c:3d:
         02:3b:91:2b:04:6d:83:28:c8:9c:28:e3:7a:a6:8a:fc:38:75:
         20:33:dc:c2:83:21:b0:35:82:33:e7:b3:7a:26:f5:66:95:96:
         74:f1:57:d7:29:e8:a6:83:c7:dd:34:1b:ff:9d:cb:e5:1e:c7:
         2e:fb:c9:df:70:7e:10:a3:b1:f3:b7:17:a2:f3:18:e8:42:b7:
         c2:1d:be:1f:0e:94:1d:52:29:79:4a:05:8b:40:c1:68:4b:2e:
         2a:bb:7a:99:fc:75:84:a0:d1:2e:f6:6e:47:73:ca:20:17:b8:
         3f:8c:0e:5f:23:28:da:64:45:b3:95:8e:47:34:df:75:21:fb:
         74:fc:ff:ae:23:3c:96:27:09:a3:c3:18:a9:60:10:52:18:b8:
         e4:b9:08:3c:d6:1a:9c:b4:70:f8:52:6c:77:01:62:ea:54:f3:
         ba:50:cd:0a:82:bd:ec:84:a0:e3:55:4e:0a:52:bb:b4:91:dd:
         8a:ba:2e:6e:3f:b1:56:8e:a1:22:67:f5:50:cd:f8:ff:1e:0e:
         ca:24:e8:89:89:35:f6:9a:f1:5c:6d:87:e9:ef:38:d2:2c:ab:
         e6:3d:5c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----