Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/a8a59f0b20310c4354861b44dfcc40004b5b0299.roa
File:                     a8a59f0b20310c4354861b44dfcc40004b5b0299.roa (raw, json)
Hash identifier:          1yv+vgWXVSoIx6lBFrDWkdAlsMg4CMl0RGVt/Yb8KO0=
Subject key identifier:   9D:4F:B9:7C:C8:F9:98:73:3E:2E:3F:6C:6D:08:A3:3F:4E:D4:72:1A
Certificate issuer:       /CN=4714a8fc89277634ae57cdaf4d814514cd61f656
Certificate serial:       15B487
Authority key identifier: 25:F3:6F:92:FF:31:91:9D:EA:9D:E8:18:EE:46:83:9A:1E:6E:17:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4714a8fc89277634ae57cdaf4d814514cd61f656.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/a8a59f0b20310c4354861b44dfcc40004b5b0299.roa
Signing time:             Tue 24 May 2022 15:50:19 +0000
ROA not before:           Tue 24 May 2022 03:00:00 +0000
ROA not after:            Mon 24 May 2027 03:00:00 +0000
asID:                     26619
IP address blocks:        179.50.88.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1422471 (0x15b487)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4714a8fc89277634ae57cdaf4d814514cd61f656
        Validity
            Not Before: May 24 03:00:00 2022 GMT
            Not After : May 24 03:00:00 2027 GMT
        Subject: CN=a8a59f0b20310c4354861b44dfcc40004b5b0299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:01:9c:70:41:31:67:5c:6a:fe:ee:10:53:
                    11:ed:c9:b0:1c:19:f2:2f:2e:21:17:51:25:89:2e:
                    21:4e:b0:d3:20:c3:ff:93:70:2b:50:0c:a6:c0:f1:
                    e6:1b:4a:d3:c8:e7:17:7e:8a:02:3a:7e:e6:d3:39:
                    fc:c1:02:b1:af:20:f7:b4:6b:da:4d:48:a2:e0:56:
                    61:e7:71:47:04:49:59:bf:f4:c5:e9:06:3b:a8:e6:
                    4c:c3:bd:ab:98:d1:32:cb:06:b6:c3:ea:20:4a:2a:
                    34:48:87:a1:e1:29:65:9a:c1:25:e8:6c:62:1f:e2:
                    f1:63:89:7f:b1:ef:69:00:68:cc:eb:98:ad:84:ed:
                    08:e1:96:22:89:4d:fe:79:01:d5:75:21:fc:fe:16:
                    51:6a:c2:91:9d:8e:b8:b0:c3:fd:a8:78:93:aa:6e:
                    69:7d:87:01:c3:8d:04:10:88:7e:43:7f:02:01:a5:
                    70:2b:2a:71:f6:33:ef:62:e8:39:d3:6d:ad:85:eb:
                    75:e4:0c:6a:0b:12:96:6c:1a:ec:e4:93:4c:1f:1f:
                    da:17:83:07:8b:32:a8:cc:6d:c6:b3:e2:fb:e4:1a:
                    04:e7:7d:d8:a3:df:bf:07:c0:10:48:cb:32:42:a1:
                    e4:ba:34:a0:e1:8b:90:0f:2d:e3:77:f9:d3:f9:ef:
                    e4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4F:B9:7C:C8:F9:98:73:3E:2E:3F:6C:6D:08:A3:3F:4E:D4:72:1A
            X509v3 Authority Key Identifier:
                keyid:25:F3:6F:92:FF:31:91:9D:EA:9D:E8:18:EE:46:83:9A:1E:6E:17:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4714a8fc89277634ae57cdaf4d814514cd61f656.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/a8a59f0b20310c4354861b44dfcc40004b5b0299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/4714a8fc89277634ae57cdaf4d814514cd61f656.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         08:7c:d7:ec:66:72:9e:16:86:94:a7:ce:3b:6a:39:05:e6:6e:
         36:fc:9e:cc:fa:0e:0c:cb:d0:69:1a:24:0b:a6:c1:18:27:61:
         84:25:08:39:b9:9d:06:26:44:f7:00:ca:76:cf:c7:7e:4b:03:
         e3:31:7c:26:82:40:21:1d:b4:7e:a4:ca:24:77:4d:34:b1:53:
         92:c1:ce:86:67:40:ad:5c:61:fa:b4:cf:70:16:63:4d:a3:f8:
         72:2b:88:93:59:4d:b5:4d:5f:8f:4d:4c:36:d3:34:d4:97:20:
         20:47:40:0c:bd:22:c0:18:f5:eb:1b:ae:cc:df:01:84:3f:c4:
         c5:1b:fb:b7:13:11:4e:69:09:32:2e:92:14:82:49:58:0b:d5:
         6d:4c:79:dc:40:36:1a:4d:1d:c6:2f:21:92:3c:02:9a:34:00:
         5d:4b:a6:57:d8:cb:34:92:54:cb:60:96:30:7b:c1:53:ad:04:
         af:4e:fc:b5:57:0e:fa:bd:8c:7d:a6:d6:2b:da:f3:bc:e5:7a:
         de:d2:4f:d4:84:57:2e:b9:5d:5a:18:79:aa:4e:1f:8e:89:a7:
         63:ed:1e:b1:b8:6f:5a:19:f2:31:22:8e:d3:e7:c9:9c:d0:7b:
         2b:31:39:f2:b6:ec:c3:90:d1:23:8a:03:77:05:48:e3:04:0f:
         7f:6d:f5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----