Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/f3799457b8928370a9238ced1fb1677e7e6d5e9d.roa
File:                     f3799457b8928370a9238ced1fb1677e7e6d5e9d.roa (raw, json)
Hash identifier:          QlkSvmoqp8tjX5To7LwUWTm0yoDzEOyBDmOipDriqPo=
Subject key identifier:   52:A9:EE:DD:EC:3C:A7:45:10:5E:FD:F9:74:D4:A3:23:33:F0:8E:9A
Certificate issuer:       /CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
Certificate serial:       038E4D
Authority key identifier: 86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/f3799457b8928370a9238ced1fb1677e7e6d5e9d.roa
Signing time:             Wed 04 May 2022 13:41:55 +0000
ROA not before:           Wed 04 May 2022 03:00:00 +0000
ROA not after:            Tue 04 May 2027 03:00:00 +0000
asID:                     262186
IP address blocks:        189.85.40.0/22 maxlen: 25
                          2803:21e0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233037 (0x38e4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
        Validity
            Not Before: May  4 03:00:00 2022 GMT
            Not After : May  4 03:00:00 2027 GMT
        Subject: CN=f3799457b8928370a9238ced1fb1677e7e6d5e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:96:db:29:53:fb:17:6f:92:4b:c2:de:ae:fd:
                    9d:01:6d:3c:cd:24:dd:30:9f:5d:b0:2e:3c:15:e5:
                    11:33:2e:82:d7:ad:d8:e1:47:a2:5f:8e:bc:bf:37:
                    88:f8:f7:0d:de:03:ef:69:29:97:9e:9f:55:ae:08:
                    a3:45:a6:4b:ce:c1:14:a1:50:f9:88:f6:40:ff:73:
                    3c:0a:4f:83:9d:de:90:20:9a:30:0a:fe:bb:04:69:
                    fb:ab:23:e0:f9:cd:ff:54:40:0e:11:b3:c8:eb:6d:
                    c7:b0:04:3b:c8:b4:46:bb:5c:0f:45:da:9c:1a:a1:
                    b2:54:e4:72:fe:8b:ac:04:88:35:fd:89:10:5d:c1:
                    5b:02:de:27:f0:70:c0:6e:73:01:b8:5d:f8:2d:60:
                    25:cb:9c:ce:e1:94:eb:11:c2:98:11:5f:8a:9e:d4:
                    00:7a:c7:6e:74:4e:57:f7:07:6e:2d:e1:8a:81:84:
                    46:59:ed:62:97:58:b3:5f:2b:90:f4:fd:f9:4b:bc:
                    c1:39:6c:ad:ef:6c:14:81:62:d8:3e:f0:56:51:a2:
                    39:72:9f:4a:16:f8:b3:b1:38:ed:4e:ca:78:f9:39:
                    12:05:8b:2c:e7:4b:35:07:3b:35:ba:70:f7:9a:b7:
                    ad:51:6b:f5:39:69:a0:0a:76:a2:22:eb:c7:ef:7f:
                    b0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A9:EE:DD:EC:3C:A7:45:10:5E:FD:F9:74:D4:A3:23:33:F0:8E:9A
            X509v3 Authority Key Identifier:
                keyid:86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/f3799457b8928370a9238ced1fb1677e7e6d5e9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/c5ef86124a38f3fc46e85e51e01411db37fdb204.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.40.0/22
                IPv6:
                  2803:21e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:e8:a1:e9:33:03:91:10:54:8a:30:49:af:88:49:64:9e:86:
         fd:68:68:18:cb:70:62:1e:f2:f8:1c:26:ac:7e:e6:40:5c:aa:
         50:d7:ca:75:45:92:e7:db:2c:d5:81:19:ab:b6:60:83:f3:b0:
         00:e0:90:1d:83:59:ec:f8:b2:a0:a6:e7:48:32:41:b0:57:2b:
         7a:b3:82:c8:51:55:87:f5:f8:85:e6:94:b9:f7:1b:03:1b:82:
         f5:34:b7:7a:0d:43:10:22:98:7c:d7:56:a2:6a:d7:e8:4c:27:
         77:79:7d:ea:67:a4:13:b4:4a:76:91:1b:f0:e4:e8:ff:ca:de:
         62:69:4d:3e:ab:39:21:16:31:69:a4:1e:b7:44:37:d8:5a:5a:
         53:ae:f8:7f:2b:58:cd:ed:58:f7:3c:ae:6d:17:8f:db:84:38:
         f9:18:1e:f5:2f:88:2b:d9:62:5d:7d:65:84:e9:4d:f8:9e:49:
         9e:b4:aa:ba:9c:3c:cf:57:42:5c:9b:7c:84:2b:cf:bd:32:97:
         28:31:57:8b:37:1c:c2:19:5e:ff:c3:b1:df:ae:16:69:b0:b8:
         fd:12:50:2d:5f:b4:3c:f4:aa:23:e8:df:ae:48:08:65:04:35:
         77:ca:28:5d:22:11:d1:54:c9:e9:46:d6:1f:2e:17:76:47:ce:
         92:ab:c4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----