Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/2a1cea8749717912f05c22289329f1dd49538d7c.roa
File:                     2a1cea8749717912f05c22289329f1dd49538d7c.roa (raw, json)
Hash identifier:          6jidsCajcZtGYFNxHSKDA5hrs6HOwr8uNww/MwiRIK4=
Subject key identifier:   D4:07:FD:84:67:63:02:C2:85:A3:CF:05:C2:66:68:54:DE:E3:93:5D
Certificate issuer:       /CN=444e0076eea4611dce8c3e39bffef12743fb4711
Certificate serial:       0DCDDC
Authority key identifier: EE:26:82:A5:CE:1B:FE:87:23:F4:04:B2:48:79:20:48:7B:18:9A:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/444e0076eea4611dce8c3e39bffef12743fb4711.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/2a1cea8749717912f05c22289329f1dd49538d7c.roa
Signing time:             Fri 18 Feb 2022 17:57:23 +0000
ROA not before:           Mon 31 Jan 2022 03:00:00 +0000
ROA not after:            Wed 31 Jan 2024 03:00:00 +0000
asID:                     263801
IP address blocks:        189.90.228.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 904668 (0xdcddc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444e0076eea4611dce8c3e39bffef12743fb4711
        Validity
            Not Before: Jan 31 03:00:00 2022 GMT
            Not After : Jan 31 03:00:00 2024 GMT
        Subject: CN=2a1cea8749717912f05c22289329f1dd49538d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3b:f9:cc:31:ad:bd:42:b4:e8:4a:1c:6d:17:
                    7f:8e:31:21:96:e9:15:20:cd:c3:6a:b7:cc:89:96:
                    78:f6:8c:3a:a3:2f:5e:76:17:c4:21:54:b1:77:6b:
                    21:12:63:a0:95:81:87:cd:e0:71:ae:95:3e:d7:4e:
                    34:ed:94:0d:04:f3:57:95:7b:1f:c1:ca:47:15:02:
                    75:4e:a6:dd:f7:7d:a7:ba:1b:ad:20:a5:fb:91:92:
                    c5:61:fc:da:b3:2c:82:8b:18:79:fb:41:d1:80:de:
                    cd:a7:cb:b8:d6:c9:38:bf:bc:41:67:59:95:b9:ae:
                    3d:6a:34:13:96:63:99:2f:e1:f4:56:90:7a:4b:ab:
                    b7:27:77:d2:46:ad:45:6a:c6:de:63:d0:96:4f:73:
                    5e:2a:03:67:43:2e:7b:2f:2f:41:c8:de:03:89:93:
                    8f:e7:aa:05:f1:43:ac:be:67:08:bf:41:0d:7b:ad:
                    f6:ca:e8:0b:92:2c:d8:39:e6:8c:04:d6:79:8d:1a:
                    a1:9b:e2:11:a9:69:c5:05:2e:a9:6e:7d:26:0e:4b:
                    8e:76:ea:c7:1a:f2:e7:f9:03:6d:bc:06:63:a2:4b:
                    97:5e:f1:73:70:e2:2c:f2:78:69:0b:f2:14:e8:b0:
                    43:22:23:39:12:86:b5:60:50:ed:68:aa:3c:b3:39:
                    5e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:07:FD:84:67:63:02:C2:85:A3:CF:05:C2:66:68:54:DE:E3:93:5D
            X509v3 Authority Key Identifier:
                keyid:EE:26:82:A5:CE:1B:FE:87:23:F4:04:B2:48:79:20:48:7B:18:9A:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/444e0076eea4611dce8c3e39bffef12743fb4711.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/2a1cea8749717912f05c22289329f1dd49538d7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/444e0076eea4611dce8c3e39bffef12743fb4711.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:7b:bd:43:af:0c:f7:52:a3:68:b3:bb:90:d0:9d:32:02:c2:
         0d:5d:3b:ff:dd:a6:2b:68:41:c5:89:d7:af:c1:25:84:cb:3e:
         5a:57:d4:02:25:8c:f1:ef:7d:cb:eb:f3:54:68:a3:19:04:00:
         ea:32:e2:46:fc:44:42:6e:34:85:cf:ff:fa:f0:fb:f4:a2:a3:
         5e:3d:30:80:3b:b2:62:34:f4:bd:69:72:a0:85:16:11:ce:11:
         46:cd:14:cb:f5:e5:39:2b:47:6e:dc:61:f6:52:ca:7e:8b:f8:
         08:26:95:4a:f0:99:39:ba:6f:b7:50:33:ae:9f:69:11:0d:2d:
         86:d7:7f:86:49:48:20:2f:05:3d:4e:9e:9b:dd:0e:9e:d3:ac:
         90:9b:03:6f:46:98:ad:08:5b:62:b6:41:70:ee:b8:8a:62:a7:
         6f:5e:ed:9c:fb:1d:5d:3a:6b:15:ff:fc:f5:cd:58:7e:27:0a:
         d2:a0:8b:f5:aa:f8:93:8f:3b:b0:60:cb:f8:68:d8:be:85:98:
         7a:98:7f:bf:ba:88:0d:7f:98:b3:3a:3e:bf:e8:9f:f2:02:15:
         61:78:fd:77:b9:d6:c1:14:32:63:35:e5:5b:30:4c:13:74:9c:
         f6:67:4c:c5:ac:c1:88:1e:67:a1:2c:c6:35:e9:32:3d:52:da:
         30:d2:3a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----