Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/1e91b22dcb40bf90f3698326f6b3e7b84594a31c.roa
File:                     1e91b22dcb40bf90f3698326f6b3e7b84594a31c.roa (raw, json)
Hash identifier:          e7iVipKtgZYaulPismxODC6MO5bbl6m0fQiIRNR1YjI=
Subject key identifier:   91:EB:37:48:A0:0F:A9:0C:FA:1D:F7:34:8F:1F:13:B0:8B:5F:22:E6
Certificate issuer:       /CN=9e7510573b4e2f6f118e04dc9188c5f3ef257302
Certificate serial:       19B1FC
Authority key identifier: 57:62:04:5B:C0:F0:4D:39:AF:ED:B9:CC:C2:E6:DE:8C:11:10:00:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7510573b4e2f6f118e04dc9188c5f3ef257302.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/1e91b22dcb40bf90f3698326f6b3e7b84594a31c.roa
Signing time:             Thu 04 Aug 2022 16:05:16 +0000
ROA not before:           Tue 13 Apr 2021 03:00:00 +0000
ROA not after:            Wed 13 Apr 2050 03:00:00 +0000
asID:                     265788
IP address blocks:        192.141.164.0/22 maxlen: 30
                          2803:7fc0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1683964 (0x19b1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e7510573b4e2f6f118e04dc9188c5f3ef257302
        Validity
            Not Before: Apr 13 03:00:00 2021 GMT
            Not After : Apr 13 03:00:00 2050 GMT
        Subject: CN=1e91b22dcb40bf90f3698326f6b3e7b84594a31c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a7:a7:d1:15:d9:58:00:61:39:6c:6f:77:ea:
                    9a:45:84:2c:3f:fd:80:fb:f1:a5:2d:c6:1d:c6:e6:
                    b6:74:bc:5d:3e:d7:c9:01:60:fc:b2:1b:5c:ed:31:
                    42:c6:57:6b:52:4e:22:15:02:ca:63:b3:eb:42:3e:
                    ac:4b:6f:67:65:35:43:6a:70:bc:15:44:33:6f:d2:
                    fd:53:6c:79:cd:10:23:c0:33:32:aa:b2:4a:15:9b:
                    aa:4c:24:6c:b4:ee:fd:51:f9:fe:1d:c7:be:5d:b1:
                    e5:f6:78:d6:f8:62:08:22:c4:84:02:9a:ca:0a:81:
                    eb:bc:c1:b0:9a:53:dd:31:05:2d:ff:0a:55:34:63:
                    15:58:e1:8b:87:a1:17:a6:ac:ec:34:39:17:7a:2f:
                    b8:b4:ac:32:88:81:c7:b4:f6:91:b2:c0:44:71:41:
                    24:fb:c3:5f:9d:f8:5f:2f:5e:5b:46:78:16:b7:b5:
                    a2:52:bc:35:0e:dc:68:06:26:4d:c7:9d:30:77:a1:
                    fc:f0:04:9b:36:73:c0:0b:af:0f:77:35:b1:50:aa:
                    79:f5:df:29:d4:b0:87:13:7a:b6:5a:fe:e2:09:c9:
                    d8:2b:55:d6:41:4b:bf:81:f9:c2:5e:08:3d:81:93:
                    c1:12:6d:58:19:d4:af:8c:98:f2:20:7f:0a:bc:16:
                    f2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EB:37:48:A0:0F:A9:0C:FA:1D:F7:34:8F:1F:13:B0:8B:5F:22:E6
            X509v3 Authority Key Identifier:
                keyid:57:62:04:5B:C0:F0:4D:39:AF:ED:B9:CC:C2:E6:DE:8C:11:10:00:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7510573b4e2f6f118e04dc9188c5f3ef257302.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/1e91b22dcb40bf90f3698326f6b3e7b84594a31c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/9e7510573b4e2f6f118e04dc9188c5f3ef257302.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.164.0/22
                IPv6:
                  2803:7fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:35:5f:e6:90:1f:a8:7e:27:ea:e5:6a:70:a4:a7:9e:75:23:
         bb:65:69:37:9a:09:d4:43:5b:05:1a:d3:b7:14:ad:60:bb:9f:
         0c:0a:6d:b5:88:09:61:f2:d5:13:58:7f:fb:a3:a6:07:64:0f:
         d7:fb:0e:32:af:ac:b8:ec:8a:9d:a1:b5:20:16:9c:1d:dd:3f:
         7c:8e:63:90:34:ce:e5:f0:f2:84:bd:cd:fd:12:aa:b8:2d:66:
         97:52:f1:8b:c2:df:0c:ce:dd:70:b1:c8:ab:d1:46:b3:f2:ba:
         9d:74:5f:77:87:ab:82:fc:a8:68:d2:56:30:74:a3:63:df:74:
         85:09:51:42:7f:87:a4:83:74:b3:ca:30:d9:f8:85:43:74:10:
         f2:49:58:aa:3d:8a:6d:e3:c4:ca:14:ee:1b:01:8e:20:2f:55:
         9a:6b:40:5d:50:ab:a5:d3:bb:cf:ea:58:ba:b9:b0:7e:5a:6f:
         de:c2:8f:3b:43:41:62:a9:a9:10:9d:00:be:40:e3:82:94:fb:
         5d:96:09:3d:73:d7:f0:05:e4:3d:04:53:29:85:f0:b8:a4:29:
         09:0f:60:56:f7:fc:48:40:17:6a:d2:32:d5:32:84:94:a5:a8:
         ee:d6:df:87:74:96:25:31:ef:0b:3b:60:2c:90:64:5a:a1:d1:
         9f:b0:34:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----