Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/c66408b4a46ad13b6930b39aea722e72e8cbb915.roa
File:                     c66408b4a46ad13b6930b39aea722e72e8cbb915.roa (raw, json)
Hash identifier:          cOuGm9bnut2j86RQ/mIdeBvYgZRWQ6QNz8HijB39j7c=
Subject key identifier:   83:37:71:B1:25:06:0E:BB:B3:3C:C0:01:4E:BF:B1:DE:14:27:7D:B0
Certificate issuer:       /CN=1159fdc4276fa3bfc64df717e4ca0a75249cf188
Certificate serial:       1A94E9
Authority key identifier: 2C:D3:D3:7E:8A:EA:10:A8:12:4B:D1:A2:E2:4C:0A:CC:C3:E1:A3:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1159fdc4276fa3bfc64df717e4ca0a75249cf188.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/c66408b4a46ad13b6930b39aea722e72e8cbb915.roa
Signing time:             Wed 28 Sep 2022 13:55:48 +0000
ROA not before:           Wed 28 Sep 2022 13:53:29 +0000
ROA not after:            Sat 28 Sep 2024 13:53:29 +0000
asID:                     272829
IP address blocks:        190.71.85.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1742057 (0x1a94e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1159fdc4276fa3bfc64df717e4ca0a75249cf188
        Validity
            Not Before: Sep 28 13:53:29 2022 GMT
            Not After : Sep 28 13:53:29 2024 GMT
        Subject: CN=c66408b4a46ad13b6930b39aea722e72e8cbb915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:14:5f:78:20:1c:bc:8f:a9:30:05:48:b4:d3:
                    ce:8e:f7:bb:87:d3:59:dd:67:f8:5b:4e:b1:20:8d:
                    c4:fd:40:f8:05:90:c7:61:fe:85:73:a2:8e:5a:6e:
                    51:ac:70:e1:6a:7a:a1:31:83:81:68:b2:df:c9:53:
                    63:e1:85:23:5e:eb:46:77:28:bd:df:9c:14:f1:2e:
                    81:06:6e:f3:35:55:b2:7a:9f:46:59:c2:81:90:ce:
                    3f:23:5d:d5:af:b5:13:67:44:9c:a0:93:ea:fd:02:
                    93:de:67:d4:2b:b2:b2:b1:37:72:44:d4:52:d2:4b:
                    e4:aa:b6:73:fb:bc:9f:26:bf:93:78:84:f7:2f:af:
                    65:a5:a4:0b:5e:fe:30:a7:77:b6:f5:73:c0:cd:1c:
                    b3:97:96:24:d9:0f:d3:dc:0b:2f:80:f6:a5:d3:89:
                    66:72:dd:51:cc:a8:68:da:1d:21:c4:b7:55:d2:ad:
                    74:af:b5:8d:be:51:a3:e0:c7:af:86:bd:6c:55:5b:
                    9d:26:5a:8d:0e:ea:ee:42:3f:7e:b8:46:d3:a7:ea:
                    59:e5:3f:e0:58:09:57:a9:4e:ec:61:4b:ff:ec:61:
                    ca:f6:8e:4f:a1:f1:3e:f9:e4:db:c4:51:11:1e:45:
                    99:8b:77:27:df:e1:92:6a:95:11:2e:b8:52:b0:8e:
                    44:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:37:71:B1:25:06:0E:BB:B3:3C:C0:01:4E:BF:B1:DE:14:27:7D:B0
            X509v3 Authority Key Identifier:
                keyid:2C:D3:D3:7E:8A:EA:10:A8:12:4B:D1:A2:E2:4C:0A:CC:C3:E1:A3:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1159fdc4276fa3bfc64df717e4ca0a75249cf188.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/c66408b4a46ad13b6930b39aea722e72e8cbb915.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/1159fdc4276fa3bfc64df717e4ca0a75249cf188.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.71.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:1a:88:75:7a:1e:44:0f:88:1c:46:13:74:ae:ff:84:c8:a6:
         85:6d:b6:b0:4c:2d:33:6c:5d:b4:b9:6b:24:53:e7:32:53:5a:
         46:38:96:3e:2a:08:0b:fd:87:13:79:03:d0:a2:bd:32:92:f6:
         c8:79:f2:01:00:89:80:e5:2e:f7:6b:86:20:93:77:a7:61:08:
         d2:04:78:04:17:6b:e3:8d:de:b3:4b:d2:3a:d4:63:32:04:62:
         18:e3:80:41:df:40:13:f1:3e:4e:be:60:7d:f3:84:86:8a:8b:
         c0:1d:50:92:7a:7d:6e:29:c4:76:2c:d8:8e:f9:ef:5d:31:6b:
         e1:e3:91:0c:8f:ea:8f:c8:3a:22:f7:63:58:bf:0f:49:0d:48:
         41:85:ed:23:cc:eb:58:5c:12:29:9c:55:d7:c9:9b:17:49:a3:
         a3:d1:b5:9d:6a:38:98:a1:24:36:90:41:47:60:61:d8:c8:ef:
         f5:f6:c5:e1:58:0c:90:2f:3b:45:a0:96:b1:11:22:51:e2:b5:
         e1:74:04:2e:8d:ba:01:a9:f4:09:18:e6:ee:28:bb:c3:5d:69:
         a9:47:85:01:59:30:21:4f:7e:ae:19:c2:be:b8:5f:9f:53:17:
         b6:6a:b1:96:17:80:0c:12:07:61:ff:e7:f3:48:c3:53:f6:f7:
         03:bf:71:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----