Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/49336dc109222591be83ff456218d8fb899e8e4d.roa
File:                     49336dc109222591be83ff456218d8fb899e8e4d.roa (raw, json)
Hash identifier:          oPl5dSETs6yWwVpuhimqKbxXc/BNT7mU61nzlKzgXpM=
Subject key identifier:   60:C7:08:65:FE:E3:6C:42:69:85:6D:4E:17:C3:D9:9F:A9:50:F5:CF
Certificate issuer:       /CN=444e0076eea4611dce8c3e39bffef12743fb4711
Certificate serial:       0BE058
Authority key identifier: EE:26:82:A5:CE:1B:FE:87:23:F4:04:B2:48:79:20:48:7B:18:9A:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/444e0076eea4611dce8c3e39bffef12743fb4711.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/49336dc109222591be83ff456218d8fb899e8e4d.roa
Signing time:             Thu 02 Dec 2021 17:39:09 +0000
ROA not before:           Mon 28 Jun 2021 03:00:00 +0000
ROA not after:            Wed 28 Jun 2023 03:00:00 +0000
asID:                     263801
IP address blocks:        189.90.228.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 778328 (0xbe058)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444e0076eea4611dce8c3e39bffef12743fb4711
        Validity
            Not Before: Jun 28 03:00:00 2021 GMT
            Not After : Jun 28 03:00:00 2023 GMT
        Subject: CN=49336dc109222591be83ff456218d8fb899e8e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fd:e1:0e:f8:00:24:34:79:de:22:84:9c:10:
                    1f:81:e9:08:82:85:0d:18:f4:6a:d6:74:d1:08:3e:
                    0f:93:aa:1f:89:4a:7e:ac:9b:e4:fa:d8:63:79:f4:
                    3b:d7:6f:2e:6e:52:f0:c4:70:01:58:a4:7e:c9:36:
                    d0:3e:3d:47:19:b7:13:af:01:6b:ad:a7:64:74:b0:
                    ee:eb:db:02:9b:8e:bf:1c:db:99:46:0d:f6:58:22:
                    5f:c5:ce:e2:1c:00:25:d9:cf:05:cc:17:63:5e:84:
                    6c:37:2e:0f:83:a5:58:c9:60:77:a0:c7:bb:84:02:
                    77:13:35:e9:b7:4f:59:d8:76:dc:37:03:40:7d:ca:
                    79:de:23:76:81:94:13:a9:6c:b9:8e:6c:bc:06:50:
                    6a:a4:95:53:29:b0:00:7e:ea:ce:2f:f1:61:ad:d8:
                    68:53:3b:22:ed:03:c3:59:0a:be:19:b8:05:76:29:
                    4d:fb:a2:d2:8e:ed:1e:a3:9f:78:4e:69:fd:3a:3d:
                    f4:70:15:b3:57:09:bb:51:f6:2b:00:67:82:bd:d6:
                    d5:bc:08:8e:73:90:40:ee:8b:7c:46:e6:e3:bf:b6:
                    59:99:d7:44:1e:70:13:3f:6e:da:6b:35:b3:0a:0f:
                    14:4d:b3:42:b5:14:3c:d5:43:c1:ce:69:06:cb:b7:
                    df:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C7:08:65:FE:E3:6C:42:69:85:6D:4E:17:C3:D9:9F:A9:50:F5:CF
            X509v3 Authority Key Identifier:
                keyid:EE:26:82:A5:CE:1B:FE:87:23:F4:04:B2:48:79:20:48:7B:18:9A:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/444e0076eea4611dce8c3e39bffef12743fb4711.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/49336dc109222591be83ff456218d8fb899e8e4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/444e0076eea4611dce8c3e39bffef12743fb4711.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:09:74:1e:28:13:e9:96:7c:4b:aa:2c:9d:8b:cc:a9:49:08:
         5a:2d:52:f1:b7:2a:8d:07:eb:d2:c8:f6:6e:8f:8a:62:ec:b6:
         30:c4:d7:df:f7:e6:92:29:bd:0d:54:86:b9:e6:77:bc:c0:c8:
         12:36:79:76:35:c0:f1:ac:37:a4:b9:ab:2c:7b:7b:c6:aa:57:
         99:4f:f7:6b:f5:5c:50:95:ec:75:70:c1:7f:8d:cb:0a:f8:60:
         78:69:ab:a2:b0:12:6e:64:23:17:15:00:bb:40:72:cb:34:f8:
         21:6b:cf:ab:7d:75:61:51:10:97:3a:fa:70:23:d7:a7:28:db:
         66:3b:82:1e:62:58:bc:ca:71:d9:ee:6b:bd:58:b1:1e:46:05:
         ad:12:57:43:2b:63:b6:10:ca:ac:b0:53:7f:8b:1e:a9:fd:a3:
         33:54:5a:6f:eb:d8:4c:f1:9b:80:ae:cc:77:ed:fe:6e:b0:f3:
         a9:9b:9e:4c:60:5a:34:bd:79:48:ad:c8:ac:05:19:c3:9a:3f:
         14:69:51:2c:53:69:6c:9b:f0:8c:cf:ff:08:5c:81:d4:1e:05:
         7d:a3:05:48:fd:02:92:a4:07:35:4f:ab:d7:9b:99:6a:a1:03:
         5f:b4:ab:14:10:0c:2e:52:60:a4:6e:01:3d:f9:c9:95:d4:a2:
         af:83:f0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----