Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/fdb895352a3a0bfa60f564566ae218598df37fff.roa
File:                     fdb895352a3a0bfa60f564566ae218598df37fff.roa (raw, json)
Hash identifier:          aSuA5q0gfXXh8IaFlrl0PsxnxI+0q2uz/ztRVgUFrv8=
Subject key identifier:   23:D5:B0:1D:6F:46:5D:D4:22:DF:D3:72:7C:7E:A0:4C:A8:50:AB:B5
Certificate issuer:       /CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
Certificate serial:       0538
Authority key identifier: 86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/fdb895352a3a0bfa60f564566ae218598df37fff.roa
Signing time:             Tue 14 Dec 2021 17:37:39 +0000
ROA not before:           Tue 14 Dec 2021 03:00:00 +0000
ROA not after:            Thu 14 Dec 2023 03:00:00 +0000
asID:                     262186
IP address blocks:        189.85.40.0/22 maxlen: 24
                          2803:21e0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1336 (0x538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
        Validity
            Not Before: Dec 14 03:00:00 2021 GMT
            Not After : Dec 14 03:00:00 2023 GMT
        Subject: CN=fdb895352a3a0bfa60f564566ae218598df37fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:04:f1:7d:7f:f1:65:8d:78:89:1f:9c:c0:1a:
                    20:c4:2b:78:71:cd:b6:1b:93:d3:5d:73:12:e0:36:
                    24:b7:15:92:83:a0:35:17:c9:1c:d5:c4:40:ed:49:
                    fd:0f:c8:fb:eb:55:71:3d:3e:59:57:b5:d8:46:5c:
                    69:84:94:b3:6a:2e:ab:a3:86:29:70:28:21:b7:10:
                    58:65:29:cd:f0:b3:89:03:f8:7d:34:96:e0:f6:db:
                    dd:7f:64:2e:8f:7f:b8:44:3b:14:da:2f:35:b2:84:
                    f4:eb:96:ce:42:c8:d0:d1:bf:7c:80:a7:0a:29:b3:
                    7e:71:bb:82:58:d5:55:30:7e:25:e3:9f:ab:37:d1:
                    6d:72:0c:d2:49:46:06:4b:f3:d5:4d:e8:8b:48:eb:
                    bb:28:3a:1b:2e:4b:19:c4:0f:8e:17:98:e2:8a:8e:
                    65:09:2f:fb:63:22:ca:c4:64:86:b3:f2:92:3d:17:
                    56:f0:3d:22:f3:d8:31:fc:1f:3c:9a:33:6b:37:f4:
                    2a:5c:6b:9b:35:ca:8d:47:51:98:04:86:14:1f:b7:
                    5d:b5:7c:6c:e2:fd:9d:5a:88:dd:d5:25:0c:3c:9f:
                    b9:4b:54:b0:12:d1:66:57:f7:fd:2e:be:04:17:67:
                    a1:46:e0:f6:67:aa:f7:56:0c:11:dc:17:93:eb:02:
                    cf:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D5:B0:1D:6F:46:5D:D4:22:DF:D3:72:7C:7E:A0:4C:A8:50:AB:B5
            X509v3 Authority Key Identifier:
                keyid:86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/fdb895352a3a0bfa60f564566ae218598df37fff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/c5ef86124a38f3fc46e85e51e01411db37fdb204.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.40.0/22
                IPv6:
                  2803:21e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:c3:51:af:05:96:19:3c:c7:35:d6:96:f9:1b:73:6c:1c:51:
         04:d5:ca:ac:ac:85:9f:89:0e:de:73:b9:4c:bf:e8:80:5b:ef:
         55:94:16:b6:26:db:de:82:5d:1e:5c:16:21:72:a6:05:06:c6:
         47:2c:c4:7b:ea:70:ce:80:c8:15:d8:ca:c2:e3:6a:5c:28:29:
         f2:f4:63:f8:2f:7b:cf:ae:38:fe:c1:b8:db:fa:39:b9:45:fb:
         9b:05:da:62:e7:34:d3:9d:a7:c2:63:13:3f:54:6d:3f:90:f2:
         5b:f8:27:ab:ff:9b:1e:bd:18:c4:cb:f3:d0:1c:36:c3:88:f8:
         1b:9d:91:1d:66:d3:74:ff:ed:b5:d6:a8:af:56:d6:b0:38:5f:
         71:e3:7b:06:31:41:f1:92:e0:bb:79:55:7f:51:37:33:ab:7e:
         86:cc:14:0e:d7:54:45:20:7d:80:1b:e0:f2:c6:4a:41:b2:66:
         09:5c:d6:1c:7b:89:29:e6:57:2e:ad:2c:c1:aa:67:c2:b8:2a:
         fc:74:86:b1:64:79:66:9d:15:ad:c4:7b:79:ac:bb:6f:66:b0:
         22:90:9c:14:69:ec:b9:f9:64:5d:92:87:48:b8:f9:7f:ae:32:
         a1:74:54:ab:1b:46:2a:12:92:fe:4f:14:4a:63:b0:1b:db:5e:
         47:f3:3d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----