Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/305a0e5e-4150-4b7f-9b1b-ec4c9f91044d/9d2d83449431e28a44017809e0914c9763d497a1.roa
File:                     9d2d83449431e28a44017809e0914c9763d497a1.roa (raw, json)
Hash identifier:          anMOwgcsqIt3VVjYuy6UtsDW4A4Ffn9XBHSwC7eOJBY=
Subject key identifier:   97:D4:BA:C0:D6:4B:23:E4:9E:F3:E6:D0:5D:3C:0C:87:34:44:9B:EE
Certificate issuer:       /CN=d35667f119be50e7c8247352710f35b1468508d8
Certificate serial:       04CF
Authority key identifier: E2:58:BA:2D:16:D8:FC:7D:5D:CC:5F:2C:06:56:D9:CD:D6:B9:58:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d35667f119be50e7c8247352710f35b1468508d8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/305a0e5e-4150-4b7f-9b1b-ec4c9f91044d/9d2d83449431e28a44017809e0914c9763d497a1.roa
Signing time:             Fri 16 Jul 2021 20:04:44 +0000
ROA not before:           Fri 16 Jul 2021 03:00:00 +0000
ROA not after:            Sun 16 Jul 2023 03:00:00 +0000
asID:                     269897
IP address blocks:        190.112.136.0/22 maxlen: 24
                          2803:ce0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1231 (0x4cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d35667f119be50e7c8247352710f35b1468508d8
        Validity
            Not Before: Jul 16 03:00:00 2021 GMT
            Not After : Jul 16 03:00:00 2023 GMT
        Subject: CN=9d2d83449431e28a44017809e0914c9763d497a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:89:66:15:3b:04:c1:10:eb:46:24:89:fb:9c:
                    a7:e1:be:5f:07:fe:a5:39:5a:80:09:a6:e7:36:65:
                    fe:34:5a:02:17:4b:bc:bc:5d:06:1d:f0:14:f6:43:
                    90:b3:43:17:25:12:86:c2:38:de:bf:ca:36:fb:88:
                    66:a7:ab:1f:95:56:62:6c:8e:49:62:6a:db:6f:4b:
                    d2:4c:3a:c9:b4:98:c5:ae:3b:9d:93:31:7b:65:be:
                    73:e1:2c:6f:63:c5:08:48:33:8c:dc:43:f6:cf:4f:
                    29:72:70:8e:14:fa:a3:3b:a7:e2:8d:4e:e1:27:45:
                    1b:ba:b2:d7:52:0d:54:68:93:a8:73:5a:4e:99:c7:
                    f6:40:75:94:2d:b0:04:f9:16:15:ba:3b:e2:99:5a:
                    4c:4c:f8:88:96:96:45:6a:7b:13:25:d9:26:17:e1:
                    ad:ca:f8:dd:72:2d:81:09:25:1b:f5:2e:a5:47:49:
                    f0:4d:87:fa:d6:cc:5e:74:af:b5:a9:ac:31:8a:3e:
                    10:ec:ce:95:28:b8:14:d2:b4:8a:72:84:e8:03:16:
                    a9:02:0f:f1:cf:67:b1:c9:da:57:7b:ea:06:ef:e8:
                    34:ce:d6:10:5a:52:3e:6a:8e:9c:fa:cf:48:e1:ce:
                    d2:5e:b9:21:e3:04:3b:c8:3d:b4:20:62:0b:49:5c:
                    49:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D4:BA:C0:D6:4B:23:E4:9E:F3:E6:D0:5D:3C:0C:87:34:44:9B:EE
            X509v3 Authority Key Identifier:
                keyid:E2:58:BA:2D:16:D8:FC:7D:5D:CC:5F:2C:06:56:D9:CD:D6:B9:58:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d35667f119be50e7c8247352710f35b1468508d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/305a0e5e-4150-4b7f-9b1b-ec4c9f91044d/9d2d83449431e28a44017809e0914c9763d497a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/305a0e5e-4150-4b7f-9b1b-ec4c9f91044d/d35667f119be50e7c8247352710f35b1468508d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.136.0/22
                IPv6:
                  2803:ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:6a:38:9e:07:a1:8f:87:d1:c0:9e:5c:52:55:e1:17:e4:77:
         f8:3b:00:cd:1c:c2:d2:1a:1c:7c:3d:fa:b5:0f:bb:7a:9a:38:
         62:31:65:76:7c:2e:16:59:4f:14:db:e7:48:be:9f:33:49:ba:
         05:bf:bd:eb:cc:7d:08:86:df:c4:09:c8:ee:7e:8f:5f:2d:b6:
         31:89:7c:f8:07:7f:04:c1:8d:43:7a:b0:66:e2:0d:69:15:a9:
         fc:ed:d1:cb:7d:f8:a3:1b:f5:4a:88:4d:fb:4f:b1:12:b4:cc:
         a0:47:bf:bf:af:da:05:d5:3f:18:25:34:79:b9:87:84:76:ec:
         38:ac:2f:5d:40:ab:98:9f:78:4e:0b:1a:dc:4f:ff:45:80:6d:
         f0:f5:bd:79:75:83:61:9f:b7:20:39:75:4b:ea:66:01:b4:81:
         db:d5:69:d3:48:49:db:90:34:52:09:a9:2a:8a:50:41:02:8c:
         88:a8:90:63:6b:3a:82:a6:2a:c8:82:83:db:29:b5:c8:78:78:
         57:a7:f4:d5:d0:14:f3:24:be:87:d6:66:22:51:4d:0f:1c:30:
         e5:da:09:ac:4f:da:24:e7:19:1c:05:69:4a:ab:c8:25:0d:e1:
         07:04:aa:18:08:09:d9:67:b9:cd:54:ac:9c:83:a5:fb:69:d8:
         a6:ae:6f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----