Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30dec7b1-98c9-40e1-b13e-1b20c016eaba/c40266561bfd482fc96587e7a1418eb9be5e8227.roa
File:                     c40266561bfd482fc96587e7a1418eb9be5e8227.roa (raw, json)
Hash identifier:          A5Q5wTWFEMc3i7kHXeGxCe+Hb5ditdgSGzweyMWxFx8=
Subject key identifier:   A3:F5:33:2D:AB:C2:A2:12:9E:65:48:C4:9B:F5:CA:99:D8:AF:E4:38
Certificate issuer:       /CN=fc4cfd946a0eeb5645e4de745f0b1bd955372749
Certificate serial:       08206C
Authority key identifier: A4:03:9C:2C:3E:1E:90:3F:57:08:3D:A1:81:A3:16:49:3A:CC:E3:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc4cfd946a0eeb5645e4de745f0b1bd955372749.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30dec7b1-98c9-40e1-b13e-1b20c016eaba/c40266561bfd482fc96587e7a1418eb9be5e8227.roa
Signing time:             Fri 18 Feb 2022 03:58:25 +0000
ROA not before:           Fri 26 Mar 2021 03:00:00 +0000
ROA not after:            Tue 26 Mar 2024 03:00:00 +0000
asID:                     271806
IP address blocks:        190.113.40.0/22 maxlen: 24
                          2803:d010::/32 maxlen: 48

Validation:               Failed, certificate revoked on Mon 25 Mar 2024 08:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 532588 (0x8206c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc4cfd946a0eeb5645e4de745f0b1bd955372749
        Validity
            Not Before: Mar 26 03:00:00 2021 GMT
            Not After : Mar 26 03:00:00 2024 GMT
        Subject: CN=c40266561bfd482fc96587e7a1418eb9be5e8227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:52:73:d2:c2:5b:a5:12:f7:e7:55:d9:e9:ec:
                    73:d7:99:d9:10:40:6e:cc:fe:d3:43:8c:07:e6:4e:
                    40:37:9c:ac:3b:7f:32:25:0d:db:98:7e:96:e2:68:
                    f8:cb:96:a8:56:be:8d:dc:36:65:4a:ef:47:fb:d9:
                    40:b2:8d:8f:49:46:61:c6:12:b8:ab:db:59:ec:a5:
                    42:59:7b:8c:c8:84:92:36:48:8d:e5:37:45:e7:1e:
                    96:e8:a4:48:21:63:3c:50:03:07:19:6b:19:f4:bd:
                    48:1e:60:a0:13:eb:ee:23:dc:3b:4e:44:9b:a1:ab:
                    dd:a5:20:2f:78:1c:0b:dd:67:b5:af:3b:54:ee:1e:
                    df:a8:f1:53:2c:27:8b:99:de:fb:ed:a1:09:b7:93:
                    f4:de:e2:ba:d6:20:b9:06:23:cc:46:ac:66:e0:82:
                    7c:7e:d2:37:02:dc:2d:5e:c9:63:c4:b9:e3:54:56:
                    13:b9:83:bf:49:f7:b2:67:6d:a8:9e:41:1f:2c:f4:
                    8f:7b:0d:76:93:61:37:15:20:58:55:68:74:cf:8d:
                    c1:ed:84:ed:02:14:e0:46:91:71:60:57:4f:8f:f3:
                    07:c1:f4:3c:23:90:5c:fc:df:5a:6c:40:16:83:32:
                    82:ff:4e:47:39:8e:c4:73:66:f9:de:2c:b2:44:49:
                    98:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F5:33:2D:AB:C2:A2:12:9E:65:48:C4:9B:F5:CA:99:D8:AF:E4:38
            X509v3 Authority Key Identifier:
                keyid:A4:03:9C:2C:3E:1E:90:3F:57:08:3D:A1:81:A3:16:49:3A:CC:E3:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc4cfd946a0eeb5645e4de745f0b1bd955372749.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30dec7b1-98c9-40e1-b13e-1b20c016eaba/c40266561bfd482fc96587e7a1418eb9be5e8227.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30dec7b1-98c9-40e1-b13e-1b20c016eaba/fc4cfd946a0eeb5645e4de745f0b1bd955372749.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.40.0/22
                IPv6:
                  2803:d010::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:1a:61:5a:8c:8e:fb:51:c1:3b:ec:1b:26:7d:76:20:e8:2d:
         fe:f1:6a:1b:6f:91:ca:64:99:5b:8e:94:21:8c:d1:5e:51:7b:
         95:e0:f5:ab:5e:8e:59:8f:9f:7c:c8:9c:b4:b7:a6:d7:e0:6d:
         84:ec:b9:67:24:0a:b2:09:12:28:2b:f9:f3:98:a9:ef:0b:23:
         ec:34:64:7a:a7:20:bc:15:39:65:ae:39:7d:25:c6:e8:18:f1:
         51:17:77:7c:d3:d4:07:e4:85:4f:fc:6b:e7:88:c1:67:b1:cb:
         04:a7:8e:d6:47:1d:7c:59:34:aa:02:30:d1:7f:11:8e:f4:5a:
         0d:24:4d:a1:bb:ad:06:60:20:da:e2:fd:e0:e4:2a:ef:62:85:
         bd:d1:e5:7a:c3:5b:d9:c1:4c:b2:d2:5f:b7:9e:78:8b:bc:be:
         df:43:0b:0c:9f:30:bb:d6:af:bd:6f:1e:79:b3:86:f7:68:80:
         a8:3f:39:a0:cf:b0:27:21:fb:2b:65:83:fc:92:e4:4e:32:0e:
         34:32:3b:c5:f8:85:5c:6e:98:b2:08:59:f5:62:99:7f:2f:30:
         c4:d8:ab:1b:1a:81:69:eb:a5:29:30:50:24:10:72:33:2b:6e:
         40:97:2b:ae:b4:d1:75:b8:54:23:6a:0d:76:63:f3:59:f8:a5:
         e9:83:39:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----