Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/11621cd2c6bad085c50dfc65eeff5f0a058d163e.roa
File:                     11621cd2c6bad085c50dfc65eeff5f0a058d163e.roa (raw, json)
Hash identifier:          KKbZTGlrpix2sHqHXfDOYwHUf27oR9DrmDQCkgyA3ZE=
Subject key identifier:   E2:9D:A5:64:A5:D8:3C:D1:F5:27:E6:58:3F:5B:22:10:DF:5B:CD:79
Certificate issuer:       /CN=5d6739fb330fec46825943b9c33eaee7782d7827
Certificate serial:       1B74A3
Authority key identifier: 4B:02:C6:39:A5:76:D4:A0:43:40:5D:E7:8D:AA:61:84:06:69:2F:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6739fb330fec46825943b9c33eaee7782d7827.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/11621cd2c6bad085c50dfc65eeff5f0a058d163e.roa
Signing time:             Wed 19 Oct 2022 12:33:43 +0000
ROA not before:           Tue 14 Sep 2021 03:00:00 +0000
ROA not after:            Sat 16 Sep 2023 03:00:00 +0000
asID:                     27951
IP address blocks:        179.42.172.0/22 maxlen: 22
                          2803:ac80::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1799331 (0x1b74a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6739fb330fec46825943b9c33eaee7782d7827
        Validity
            Not Before: Sep 14 03:00:00 2021 GMT
            Not After : Sep 16 03:00:00 2023 GMT
        Subject: CN=11621cd2c6bad085c50dfc65eeff5f0a058d163e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3f:93:84:90:1b:b0:e1:04:02:08:8e:48:35:
                    0d:5c:89:eb:2a:d4:b6:c2:02:32:b0:04:ee:bc:d0:
                    90:c2:b8:4d:68:87:8e:89:39:c9:23:36:82:15:bf:
                    14:7a:33:c9:cd:fc:df:53:4a:2c:45:a1:55:92:b0:
                    fe:61:58:de:0e:64:fc:69:7a:02:97:d7:e9:1a:57:
                    6f:46:a9:ca:d1:ec:06:90:85:a7:c8:e3:7c:93:47:
                    1a:cc:e7:6c:1b:2f:04:00:27:d9:e2:21:e7:4c:b2:
                    c0:a6:c9:0e:47:a3:b0:b4:34:33:d6:21:e9:17:19:
                    5e:aa:82:dd:a5:79:1a:be:49:79:88:59:50:4e:cd:
                    0f:ba:da:9b:fe:6e:00:d2:05:66:ef:24:79:da:61:
                    52:bd:05:e2:c0:63:78:c9:1a:c9:58:74:31:77:c7:
                    0a:3c:1d:69:fb:97:44:2f:d3:54:38:b0:f8:8e:c2:
                    1b:db:5f:f1:50:59:ab:c3:ec:3f:bc:c2:a8:62:66:
                    96:2a:e7:49:68:1e:b4:ba:44:9b:59:64:ac:68:a0:
                    f7:73:1e:65:cd:38:7c:47:9c:63:79:c7:1c:88:a7:
                    3f:1f:9a:9a:5e:91:c7:61:ad:89:7a:7e:e8:36:d6:
                    fc:d1:0d:b9:7b:1f:fd:a9:da:8a:9a:d1:6f:31:78:
                    7b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9D:A5:64:A5:D8:3C:D1:F5:27:E6:58:3F:5B:22:10:DF:5B:CD:79
            X509v3 Authority Key Identifier:
                keyid:4B:02:C6:39:A5:76:D4:A0:43:40:5D:E7:8D:AA:61:84:06:69:2F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6739fb330fec46825943b9c33eaee7782d7827.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/11621cd2c6bad085c50dfc65eeff5f0a058d163e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/5d6739fb330fec46825943b9c33eaee7782d7827.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.172.0/22
                IPv6:
                  2803:ac80::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:a5:0f:e5:60:5d:7f:68:8e:d7:95:56:a3:31:11:7a:c1:3f:
         85:41:17:c9:15:7d:b6:47:4f:20:c6:3f:05:33:e5:ce:fe:52:
         2a:a9:ff:18:9c:58:88:5a:7d:17:9f:35:cd:16:42:39:8a:34:
         ea:92:3f:97:f8:fe:83:7f:fe:76:02:02:77:c7:0c:3b:78:81:
         48:c7:d5:e0:20:9e:5f:a0:52:41:62:e5:d0:08:c5:f5:04:f1:
         90:a2:da:eb:84:d1:16:0c:30:61:8b:d9:95:06:09:8e:33:dc:
         80:b0:42:32:00:a7:3d:88:4a:e4:39:c5:32:a9:df:db:1d:0d:
         65:65:8f:cf:be:20:17:55:32:9c:8b:ac:cd:0e:be:a1:b2:c9:
         40:89:f1:0f:3b:eb:98:db:04:46:c4:60:84:ef:5d:3a:78:bc:
         29:73:2d:8c:64:b9:27:7a:8e:fa:5c:02:14:1c:7b:9a:79:f6:
         ab:6d:98:ce:eb:bf:86:a4:8c:26:b3:8e:a9:12:a7:14:26:c8:
         b9:85:cf:51:f7:df:ef:cb:dd:f4:b8:d6:fd:82:e2:07:84:e5:
         b4:6c:30:4d:11:e3:b2:a6:1e:59:e9:65:94:b2:93:50:5c:93:
         46:df:04:fd:e0:93:6e:55:4b:a1:dc:19:19:ed:16:fb:80:b9:
         61:fc:01:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----