Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/c7bd75741b4f0329e2d3bd79a3f2100aa78fac9a.roa
File:                     c7bd75741b4f0329e2d3bd79a3f2100aa78fac9a.roa (raw, json)
Hash identifier:          p7S2zv9plpBEYqIW7p/3+XRTZdhUJNF8ejcX42ZS3d0=
Subject key identifier:   80:15:65:8E:9E:87:21:D0:6E:7A:42:30:6A:1C:1E:B5:44:7B:44:66
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       19E3BC
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/c7bd75741b4f0329e2d3bd79a3f2100aa78fac9a.roa
Signing time:             Tue 19 Jul 2022 13:38:16 +0000
ROA not before:           Tue 19 Jul 2022 03:00:00 +0000
ROA not after:            Fri 19 Jul 2024 03:00:00 +0000
asID:                     36040
IP address blocks:        190.210.140.128/27 maxlen: 27
                          2800:40:0:65::/64 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1696700 (0x19e3bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Jul 19 03:00:00 2022 GMT
            Not After : Jul 19 03:00:00 2024 GMT
        Subject: CN=c7bd75741b4f0329e2d3bd79a3f2100aa78fac9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e1:26:43:cf:00:49:82:c3:50:bc:45:81:a7:
                    d3:0b:0a:14:ca:65:12:84:d7:5a:27:2d:b4:d7:44:
                    f1:f2:ea:67:be:24:55:78:19:d8:02:78:06:3b:6f:
                    c3:ad:22:f2:8a:7e:2a:a0:88:7d:ee:fd:ee:fd:47:
                    c4:98:19:20:68:55:c3:9d:99:3d:61:77:2f:3b:cb:
                    ea:4a:fb:8e:a8:e8:7e:01:d7:a8:0e:7a:1f:32:3e:
                    74:58:a9:de:c6:d1:c1:a5:37:1e:90:bd:9a:70:14:
                    39:7f:9c:06:cc:71:35:fd:e4:59:e1:94:40:2e:f2:
                    ee:21:35:76:dd:c7:ea:43:79:ba:f1:da:8f:07:f0:
                    f2:ec:97:5e:3c:7b:a6:fe:15:e3:4f:c8:ff:12:39:
                    dd:de:f0:60:cd:cb:28:92:ed:7c:6e:4b:bd:09:c7:
                    fc:1f:fc:cb:ac:79:30:8d:1a:50:f2:56:7d:6c:2c:
                    da:3f:a5:01:e1:44:6a:46:11:96:ef:cb:92:47:f1:
                    e4:bd:29:d8:66:25:03:1f:70:f4:e0:73:92:b3:1b:
                    fa:18:fc:d2:92:85:61:34:2c:f4:c6:f3:0b:f0:e9:
                    49:7d:02:9f:c5:74:3d:48:32:9a:9b:67:bc:f3:71:
                    ed:db:c5:03:ef:62:da:a9:d4:f3:6a:a8:1d:4b:55:
                    7a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:15:65:8E:9E:87:21:D0:6E:7A:42:30:6A:1C:1E:B5:44:7B:44:66
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/c7bd75741b4f0329e2d3bd79a3f2100aa78fac9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.140.128/27
                IPv6:
                  2800:40:0:65::/64

    Signature Algorithm: sha256WithRSAEncryption
         88:f0:eb:b5:cd:7d:5d:aa:72:f8:ee:44:e4:4a:42:04:2e:97:
         9a:83:e1:58:3c:55:81:44:ac:f4:a3:39:b6:fa:31:23:76:91:
         c9:cb:7b:7f:4a:aa:fb:6c:a8:e2:3a:6d:30:29:ba:89:56:32:
         4b:0c:cf:09:93:9d:f1:37:3d:69:5f:0b:d4:a9:96:51:9c:09:
         fd:82:ed:a6:8d:35:d4:33:db:b8:b7:16:6f:7c:fa:e2:72:98:
         fb:9e:ca:b6:29:55:31:4f:8e:2a:d4:ff:39:d2:ae:98:dc:9b:
         64:83:f2:c9:fb:d5:39:2b:84:fd:72:27:6d:a7:e2:89:a2:15:
         27:b5:fc:8c:b7:99:88:9f:3f:93:fe:29:52:5b:ce:35:ca:06:
         ed:06:35:51:b8:10:f9:0e:73:b0:6d:38:89:df:a6:a8:9e:7b:
         c9:ef:87:ff:80:88:01:94:cf:94:9a:89:19:6e:f2:5e:55:84:
         14:c6:b7:01:29:85:1b:28:dd:30:52:18:57:05:ce:11:1d:74:
         cc:3a:42:57:3a:f7:90:0f:e4:72:7f:05:a3:de:9d:f6:87:6f:
         9e:1b:28:5a:57:b7:7d:25:5e:0b:d4:8d:77:13:94:60:c4:02:
         e8:c7:fe:53:a9:fb:1d:10:c7:68:82:1b:7d:74:0a:90:fc:48:
         6a:a1:16:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----