Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44968b5a-09e3-4839-bbf2-95503818643e/92a3395f9222728be8d06f962304228f9f700ea0.roa
File:                     92a3395f9222728be8d06f962304228f9f700ea0.roa (raw, json)
Hash identifier:          eJ3kABFVhvlpcpJ+fTCtf8M7D3aLfKlLttu/qWLpA2E=
Subject key identifier:   59:1F:A2:41:27:7D:A6:4E:93:58:46:DE:05:36:BD:06:DD:6C:EA:CD
Certificate issuer:       /CN=a016a5c461a1f289e43e8833d657227c9b30df0c
Certificate serial:       0B332A
Authority key identifier: DC:90:D4:05:40:1A:AC:99:BF:76:42:3E:82:55:17:BF:51:28:34:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a016a5c461a1f289e43e8833d657227c9b30df0c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44968b5a-09e3-4839-bbf2-95503818643e/92a3395f9222728be8d06f962304228f9f700ea0.roa
Signing time:             Tue 03 May 2022 12:41:48 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     269979
IP address blocks:        187.0.40.0/23 maxlen: 24
                          2803:8ee0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 733994 (0xb332a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a016a5c461a1f289e43e8833d657227c9b30df0c
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=92a3395f9222728be8d06f962304228f9f700ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:9a:67:56:95:72:22:5c:0a:83:98:91:63:
                    df:21:27:50:a6:69:e4:ab:1d:dc:fc:95:84:fd:10:
                    29:32:3a:b1:ed:d6:d7:c9:a4:5f:86:dd:20:61:a8:
                    e2:9e:e6:5b:fe:3e:f2:9d:49:0f:ad:2a:1a:91:d8:
                    a7:af:06:56:a7:1c:75:48:ba:75:5f:e7:d6:87:a2:
                    bb:9c:1d:d3:14:dc:6c:f2:e4:25:73:13:0b:d3:59:
                    2c:7e:71:cd:35:0f:6e:63:3f:ee:e6:64:80:01:f1:
                    a7:dd:9f:24:6e:3b:f4:a9:3c:55:e2:95:90:88:6a:
                    73:0a:8c:e5:c8:9b:9a:9a:bf:fe:18:d4:ef:c8:9e:
                    77:e5:fd:6d:4d:7b:36:61:5f:6f:c0:d4:30:3b:3b:
                    7f:44:fa:00:b9:e3:2a:65:07:ed:f7:24:66:16:88:
                    32:6e:4c:73:e1:0b:d0:ff:92:8b:98:c8:80:54:35:
                    d5:59:fa:aa:e7:2c:7b:4e:c9:64:58:ba:bc:fc:ea:
                    9a:d1:91:ff:27:0a:9d:52:d5:cb:f2:7a:a2:27:af:
                    20:94:64:f6:38:9a:61:70:0c:2f:6f:c7:5c:a8:36:
                    98:9b:2e:9a:4d:b6:f5:b9:f3:43:c3:fd:af:f8:a2:
                    d5:f1:c6:04:65:d3:b5:22:4e:9c:a2:55:fa:82:e6:
                    0d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1F:A2:41:27:7D:A6:4E:93:58:46:DE:05:36:BD:06:DD:6C:EA:CD
            X509v3 Authority Key Identifier:
                keyid:DC:90:D4:05:40:1A:AC:99:BF:76:42:3E:82:55:17:BF:51:28:34:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a016a5c461a1f289e43e8833d657227c9b30df0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44968b5a-09e3-4839-bbf2-95503818643e/92a3395f9222728be8d06f962304228f9f700ea0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44968b5a-09e3-4839-bbf2-95503818643e/a016a5c461a1f289e43e8833d657227c9b30df0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.40.0/23
                IPv6:
                  2803:8ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:c6:16:bc:ee:a9:c4:c4:83:ff:87:3b:71:cd:58:8e:e4:6e:
         65:6a:6d:44:64:99:aa:70:f4:3a:48:1d:47:a1:c1:44:50:fb:
         c9:35:5e:f2:10:4d:02:44:61:eb:0f:52:9a:5b:a6:33:b8:0f:
         bf:09:fc:70:b7:91:67:eb:eb:11:3f:d6:2a:11:93:c0:18:ce:
         2d:f4:cd:e2:bc:62:d5:cc:0f:f2:cb:83:30:f8:69:98:11:4c:
         66:1c:8d:9a:67:8b:80:0f:8a:3a:01:dc:cb:19:58:bd:75:f0:
         cd:50:bd:36:21:b6:c1:64:10:0b:93:29:26:45:7f:50:6e:ee:
         d1:cf:fa:cc:5f:ba:11:e5:3e:f2:e9:be:fd:65:fa:83:41:f8:
         cb:a7:77:a5:f7:c3:42:6b:7d:08:e2:11:b1:0c:03:48:76:45:
         88:61:46:b3:1b:2b:0c:c8:2e:2c:86:1f:65:5c:f0:eb:c6:38:
         2b:1e:0a:cc:a1:c5:80:dd:92:06:ed:f7:48:4e:0b:1c:f8:80:
         52:25:99:d3:51:e6:9b:93:36:91:b7:93:d9:56:ad:90:fb:30:
         d9:99:ee:34:58:f2:c9:50:32:c4:0c:21:87:79:0d:8d:4a:47:
         88:a4:0f:f3:23:8e:89:94:ac:46:53:dd:9d:07:a3:e6:00:59:
         07:06:ff:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----