Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/e40de70363877b4583ca4e62a6657fce6f923dd4.roa
File:                     e40de70363877b4583ca4e62a6657fce6f923dd4.roa (raw, json)
Hash identifier:          3ar0iqMCfQljqHKz5rkZvy0vNZiSwnDG6gDe8Iu3yW0=
Subject key identifier:   AF:36:1C:F2:A9:CD:82:58:75:F0:B5:19:65:25:FE:F6:6C:84:79:18
Certificate issuer:       /CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
Certificate serial:       03ADED
Authority key identifier: 86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/e40de70363877b4583ca4e62a6657fce6f923dd4.roa
Signing time:             Thu 05 May 2022 11:52:29 +0000
ROA not before:           Thu 05 May 2022 03:00:00 +0000
ROA not after:            Wed 05 May 2027 03:00:00 +0000
asID:                     262186
IP address blocks:        189.85.41.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241133 (0x3aded)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
        Validity
            Not Before: May  5 03:00:00 2022 GMT
            Not After : May  5 03:00:00 2027 GMT
        Subject: CN=e40de70363877b4583ca4e62a6657fce6f923dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:db:02:f4:1e:f3:4a:cb:08:92:24:00:63:bd:
                    17:65:e0:5a:3c:1e:f2:92:b1:3d:0a:13:05:35:36:
                    d9:c9:a0:4d:71:3e:73:b0:4b:0b:7a:ea:8e:18:df:
                    be:f6:30:6f:03:a5:a2:56:4d:9e:a6:b0:50:01:78:
                    7c:1a:d3:ef:33:7c:4f:45:04:8c:39:01:1b:07:84:
                    04:14:d2:8f:34:53:0f:63:1c:8c:c0:00:c2:0b:78:
                    9a:31:e0:af:c1:d1:20:19:be:34:c1:ad:a4:f4:26:
                    1c:f0:87:ee:ef:9c:e1:3a:b0:76:46:92:74:0e:de:
                    fd:21:27:ed:e2:0e:a0:c9:ce:af:ca:19:f8:48:1d:
                    fc:09:e0:96:74:a8:78:9a:f1:ff:0d:12:eb:0a:72:
                    36:8c:d0:19:cb:20:7c:62:31:6a:e0:3a:00:34:b2:
                    7d:ea:3e:10:f8:f2:18:4c:f6:4a:fe:50:37:2e:68:
                    77:ee:30:8f:00:55:43:03:9d:f2:b8:cd:17:fb:cf:
                    48:ef:a9:51:7c:c9:bd:e3:b6:a7:2d:a3:74:9c:0a:
                    82:2b:7a:50:aa:ca:17:4f:1a:6f:f6:a6:b1:09:41:
                    f7:fd:1b:3a:d2:5f:0a:f1:93:b2:ad:b6:9f:6b:68:
                    f9:83:e4:17:a9:09:09:7a:fa:b3:07:69:2e:74:af:
                    f6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:36:1C:F2:A9:CD:82:58:75:F0:B5:19:65:25:FE:F6:6C:84:79:18
            X509v3 Authority Key Identifier:
                keyid:86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/e40de70363877b4583ca4e62a6657fce6f923dd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/c5ef86124a38f3fc46e85e51e01411db37fdb204.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:4b:c8:93:83:c9:96:28:eb:8e:20:58:f8:05:4f:50:40:52:
         ac:f3:cd:c6:6a:32:c4:51:69:52:dd:2c:48:3a:ba:26:b7:da:
         7c:3f:51:aa:da:f3:7b:1c:9c:eb:68:4d:63:1b:c6:6e:7d:7b:
         cd:0a:de:39:a2:c9:fa:04:ba:c1:2c:00:ba:ae:fa:85:76:68:
         04:b5:62:3d:ab:e1:1a:26:1f:39:93:aa:52:c8:ca:55:09:37:
         69:9c:70:50:3e:6b:7d:18:a9:0f:c5:89:89:20:93:72:fb:73:
         7e:92:e9:0a:69:8a:54:e5:68:87:74:91:11:ca:0b:c8:fd:f2:
         ed:43:a6:cf:cf:cb:fd:78:2e:82:29:07:87:82:34:8f:82:d0:
         17:c2:41:44:5a:91:35:ff:d2:c5:5e:03:5a:0b:59:dd:7d:13:
         f5:56:41:6e:54:a8:c2:d6:1a:54:39:ef:c7:86:98:dd:04:78:
         b8:f1:dd:f9:7b:a8:c9:5d:fd:79:6e:02:bb:de:c6:8b:f7:40:
         bc:0e:83:aa:f4:34:e6:ed:27:2a:df:da:41:bf:df:4f:8f:72:
         c6:66:e2:e1:f6:8f:82:ef:76:7e:42:a5:23:c2:b4:fd:b8:de:
         d8:77:7f:70:c6:0e:69:69:b9:a1:e6:8b:71:da:a7:f7:5b:0a:
         29:d7:7c:1e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDA63tMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM1
ZWY4NjEyNGEzOGYzZmM0NmU4NWU1MWUwMTQxMWRiMzdmZGIyMDQwHhcNMjIwNTA1
MDMwMDAwWhcNMjcwNTA1MDMwMDAwWjAzMTEwLwYDVQQDEyhlNDBkZTcwMzYzODc3
YjQ1ODNjYTRlNjJhNjY1N2ZjZTZmOTIzZGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAidsC9B7zSssIkiQAY70XZeBaPB7ykrE9ChMFNTbZyaBNcT5z
sEsLeuqOGN++9jBvA6WiVk2eprBQAXh8GtPvM3xPRQSMOQEbB4QEFNKPNFMPYxyM
wADCC3iaMeCvwdEgGb40wa2k9CYc8Ifu75zhOrB2RpJ0Dt79ISft4g6gyc6vyhn4
SB38CeCWdKh4mvH/DRLrCnI2jNAZyyB8YjFq4DoANLJ96j4Q+PIYTPZK/lA3Lmh3
7jCPAFVDA53yuM0X+89I76lRfMm947anLaN0nAqCK3pQqsoXTxpv9qaxCUH3/Rs6
0l8K8ZOyrbafa2j5g+QXqQkJevqzB2kudK/2wwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFK82HPKpzYJYdfC1GWUl/vZshHkYMB8GA1UdIwQYMBaAFIZWaXKATb3tFH/z
oDjCtpWtwshrMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzVlZjg2
MTI0YTM4ZjNmYzQ2ZTg1ZTUxZTAxNDExZGIzN2ZkYjIwNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTkxYzAxZmUtNWUwMi00MjgwLWIyYzMtZTNiZTFm
MjBjMDZkL2U0MGRlNzAzNjM4NzdiNDU4M2NhNGU2MmE2NjU3ZmNlNmY5MjNkZDQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xOTFjMDFmZS01ZTAyLTQyODAtYjJjMy1lM2Jl
MWYyMGMwNmQvYzVlZjg2MTI0YTM4ZjNmYzQ2ZTg1ZTUxZTAxNDExZGIzN2ZkYjIw
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL1VKTANBgkqhkiG9w0BAQsFAAOCAQEAE0vIk4PJlijrjiBY
+AVPUEBSrPPNxmoyxFFpUt0sSDq6JrfafD9Rqtrzexyc62hNYxvGbn17zQreOaLJ
+gS6wSwAuq76hXZoBLViPavhGiYfOZOqUsjKVQk3aZxwUD5rfRipD8WJiSCTcvtz
fpLpCmmKVOVoh3SREcoLyP3y7UOmz8/L/XgugikHh4I0j4LQF8JBRFqRNf/SxV4D
WgtZ3X0T9VZBblSowtYaVDnvx4aY3QR4uPHd+XuoyV39eW4Cu97Gi/dAvA6DqvQ0
5u0nKt/aQb/fT49yxmbi4faPgu92fkKlI8K0/bje2Hd/cMYOaWm5oeaLcdqn91sK
Kdd8Hg==
-----END CERTIFICATE-----