Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27c8e655-a65b-480e-923f-a4701e583973/fa78dde3b8b09889b56414abe19ae0abb741b642.roa
File:                     fa78dde3b8b09889b56414abe19ae0abb741b642.roa (raw, json)
Hash identifier:          dasrXpIbUsbmBQvGL275ucYshgt6/mIAY0bzj6xxoE4=
Subject key identifier:   0E:A4:A0:2E:A7:D7:DD:6A:7A:57:A3:77:A5:DD:FA:FD:D5:17:B4:2E
Certificate issuer:       /CN=f199c15e83abff54c59af8a67e18495cb989d953
Certificate serial:       128B46
Authority key identifier: 42:B3:74:40:2E:D5:88:86:4D:ED:8F:6A:6D:76:3F:DF:67:8C:DE:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f199c15e83abff54c59af8a67e18495cb989d953.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27c8e655-a65b-480e-923f-a4701e583973/fa78dde3b8b09889b56414abe19ae0abb741b642.roa
Signing time:             Wed 06 Oct 2021 16:10:21 +0000
ROA not before:           Wed 06 Oct 2021 03:00:00 +0000
ROA not after:            Fri 06 Oct 2023 03:00:00 +0000
asID:                     265768
IP address blocks:        190.112.32.0/21 maxlen: 21
                          2803:94c0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1215302 (0x128b46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f199c15e83abff54c59af8a67e18495cb989d953
        Validity
            Not Before: Oct  6 03:00:00 2021 GMT
            Not After : Oct  6 03:00:00 2023 GMT
        Subject: CN=fa78dde3b8b09889b56414abe19ae0abb741b642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:31:dc:bc:aa:5a:64:1a:b1:88:0a:25:56:9f:
                    da:0f:65:c4:b4:b1:0a:3f:51:a9:9d:79:19:77:82:
                    94:42:42:b0:48:f1:fd:91:57:db:68:13:66:83:5c:
                    3e:4c:a7:37:69:04:ee:b7:48:88:41:95:ab:5e:a5:
                    50:10:5d:41:74:d5:8b:58:06:69:89:c0:f0:de:1c:
                    bb:c8:05:1f:34:e2:63:f4:49:57:5d:c7:bd:ec:cb:
                    c8:16:e6:ff:6e:68:12:96:10:39:f5:31:8e:58:22:
                    15:a1:31:1d:12:59:2a:2b:f8:df:4b:74:ba:a6:82:
                    e3:2f:8c:9c:fe:dd:96:2b:52:37:88:25:dd:7d:4a:
                    39:7c:b6:a1:9a:98:b0:17:cb:9f:6d:8a:23:47:f3:
                    af:95:58:7f:97:20:59:c2:47:af:5c:bf:27:d8:8f:
                    fc:ab:3a:00:98:31:fe:b8:f0:e9:d2:05:8b:d9:c4:
                    d6:31:c6:6a:eb:e1:71:39:64:5d:e8:4d:e4:4f:59:
                    1d:f7:14:3c:34:96:b8:b3:ef:38:8e:18:80:11:55:
                    c7:48:af:cf:e4:cb:03:51:64:84:3d:de:ce:fa:32:
                    00:60:00:0f:ec:7a:80:44:4f:1d:f2:a7:8f:94:b2:
                    27:53:6d:06:b8:37:91:b1:a3:93:77:d3:1f:53:c9:
                    03:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A4:A0:2E:A7:D7:DD:6A:7A:57:A3:77:A5:DD:FA:FD:D5:17:B4:2E
            X509v3 Authority Key Identifier:
                keyid:42:B3:74:40:2E:D5:88:86:4D:ED:8F:6A:6D:76:3F:DF:67:8C:DE:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f199c15e83abff54c59af8a67e18495cb989d953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27c8e655-a65b-480e-923f-a4701e583973/fa78dde3b8b09889b56414abe19ae0abb741b642.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27c8e655-a65b-480e-923f-a4701e583973/f199c15e83abff54c59af8a67e18495cb989d953.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.32.0/21
                IPv6:
                  2803:94c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:01:9e:31:dc:6c:70:47:09:5a:af:d6:32:6f:4c:5c:a2:7a:
         0f:b0:10:48:b1:a5:55:b7:44:ea:03:94:28:aa:39:55:cf:48:
         57:6a:bf:d0:1c:7f:66:fa:77:fb:39:d3:df:f5:50:76:a5:53:
         19:06:80:56:9d:48:b3:4a:97:e9:9d:38:44:4a:8a:f1:db:2a:
         63:f2:15:58:10:d4:e6:cd:49:77:63:ab:c9:4a:2b:f9:4a:5f:
         73:d9:bf:81:43:31:34:88:86:99:76:41:55:bc:be:44:25:2d:
         4f:d4:79:40:ce:a5:9b:e6:bf:9a:85:1b:e9:6a:5d:d0:b2:88:
         6d:d1:4b:6f:9f:83:c9:ab:e8:1e:6c:8d:5b:a4:58:7c:8f:c7:
         dd:40:32:7e:23:ae:89:60:34:56:b7:d3:50:2c:3e:95:97:5f:
         c3:23:fb:73:f7:1a:eb:e7:b8:cb:07:df:90:e9:16:91:1a:58:
         a5:91:12:af:4b:aa:cf:1f:d4:6b:10:ed:19:f5:2d:98:a4:37:
         0d:4f:d8:32:12:d3:7d:54:69:c5:c1:ae:67:73:ed:0b:9b:58:
         7d:73:7e:ab:bc:35:87:94:bb:bb:ac:0f:a1:a6:43:56:c2:d3:
         8d:76:6b:53:bc:b3:1e:f9:07:84:6b:f8:95:97:13:3a:da:9c:
         60:4d:64:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----