Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/596b7ced2c8aa17a488b2063caff7a1188461b43.roa
File:                     596b7ced2c8aa17a488b2063caff7a1188461b43.roa (raw, json)
Hash identifier:          EUhm18pKo1mmiEd02tat4lrZNss17dBR7fbDTpsfy+U=
Subject key identifier:   23:0D:7C:ED:6B:57:CC:39:2B:21:F4:26:2E:65:4A:61:87:C6:1D:D8
Certificate issuer:       /CN=9e7510573b4e2f6f118e04dc9188c5f3ef257302
Certificate serial:       15383E
Authority key identifier: 57:62:04:5B:C0:F0:4D:39:AF:ED:B9:CC:C2:E6:DE:8C:11:10:00:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7510573b4e2f6f118e04dc9188c5f3ef257302.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/596b7ced2c8aa17a488b2063caff7a1188461b43.roa
Signing time:             Thu 03 Feb 2022 23:43:19 +0000
ROA not before:           Tue 13 Apr 2021 03:00:00 +0000
ROA not after:            Sat 13 Apr 2030 03:00:00 +0000
asID:                     265788
IP address blocks:        192.141.164.0/22 maxlen: 24
                          2803:7fc0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1390654 (0x15383e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e7510573b4e2f6f118e04dc9188c5f3ef257302
        Validity
            Not Before: Apr 13 03:00:00 2021 GMT
            Not After : Apr 13 03:00:00 2030 GMT
        Subject: CN=596b7ced2c8aa17a488b2063caff7a1188461b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:05:de:51:4c:6a:22:30:91:33:82:3a:39:23:
                    e2:6c:ac:3c:d3:0a:06:20:6e:2e:37:69:38:87:8f:
                    bb:b0:bd:63:08:84:7d:dd:79:d5:48:fe:88:c8:f2:
                    c0:93:7c:48:4f:91:26:e7:46:39:f7:20:49:c5:c0:
                    71:30:54:d6:5f:f9:6e:e9:7a:eb:03:48:b5:97:d6:
                    77:60:2b:8c:e5:fa:fe:80:6c:14:4f:ad:2f:9e:79:
                    de:11:cd:a6:0a:76:25:55:e5:ad:0d:7b:d6:0c:3b:
                    b3:3d:df:fe:69:3a:45:44:32:56:48:22:46:eb:3f:
                    bf:a3:bb:96:da:3a:4f:38:df:5c:4b:f3:0a:6d:e4:
                    ff:8e:32:40:da:2c:0b:8a:b4:4b:8c:eb:50:95:26:
                    f8:e3:11:3d:54:f9:6f:24:92:bc:b7:35:ac:09:d1:
                    cb:c0:5d:d3:6c:b9:f3:f7:7a:3d:38:c3:6b:d1:a9:
                    84:fa:9e:7f:7c:09:28:9a:12:81:49:2e:40:c1:ca:
                    ec:3b:6d:67:92:7c:ad:25:36:22:0b:cd:95:fa:02:
                    73:e7:71:9b:eb:f7:a1:a7:44:e5:7a:cc:af:c4:a7:
                    19:c1:51:da:5c:33:59:57:4f:40:32:18:52:db:fe:
                    df:c1:70:19:86:d1:b7:a3:87:d1:8c:ff:3c:7f:b4:
                    80:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:0D:7C:ED:6B:57:CC:39:2B:21:F4:26:2E:65:4A:61:87:C6:1D:D8
            X509v3 Authority Key Identifier:
                keyid:57:62:04:5B:C0:F0:4D:39:AF:ED:B9:CC:C2:E6:DE:8C:11:10:00:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7510573b4e2f6f118e04dc9188c5f3ef257302.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/596b7ced2c8aa17a488b2063caff7a1188461b43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/9e7510573b4e2f6f118e04dc9188c5f3ef257302.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.164.0/22
                IPv6:
                  2803:7fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:88:fd:32:36:74:f4:1e:d8:4e:ef:d6:5c:98:89:76:bb:45:
         45:b7:9b:25:f3:51:5c:45:69:8e:76:51:3a:c2:fa:d9:6f:5a:
         1f:76:10:91:37:81:5f:6a:86:c9:7d:fb:5e:18:19:1b:06:54:
         e3:68:80:a0:0a:73:7f:fe:37:7c:56:27:43:a5:87:98:08:cc:
         5b:82:93:3d:1b:ed:f6:c1:47:46:ae:4d:d4:84:5f:0c:f8:51:
         8f:83:63:1e:ea:5b:87:3f:af:fc:95:47:78:6b:c3:3c:94:69:
         e7:8e:48:10:01:5e:49:a1:26:97:f8:95:57:a6:59:57:30:80:
         d1:15:5d:c0:6f:99:69:ca:8f:e0:7e:0c:85:54:4d:cb:4e:ec:
         a1:04:48:d4:2b:98:cc:af:ef:fb:03:20:c5:ea:3c:cb:05:da:
         e2:9b:64:a5:7e:66:01:00:e6:4f:d1:f4:b0:7e:4a:2f:ae:d6:
         ee:43:f6:06:9c:53:0f:97:1e:a1:d1:5e:37:d7:bc:41:95:5d:
         e0:3a:50:5a:12:00:69:4d:a2:af:23:aa:a3:be:7f:1f:92:6e:
         50:42:0a:d1:58:75:5f:97:09:5d:0b:36:28:8b:53:15:c8:e6:
         6f:1e:17:eb:91:73:8f:74:dc:94:2f:e2:e7:6a:c6:27:d0:85:
         95:da:0c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----