Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/ca071e1006b887798cce6a014c760c573cec196b.roa
File:                     ca071e1006b887798cce6a014c760c573cec196b.roa (raw, json)
Hash identifier:          gtn9HqGgowEHBMYyLz1EIqHcXik3t8hc/oFWCg4jpzI=
Subject key identifier:   06:3C:F2:B1:94:98:80:66:83:F2:21:D5:27:75:47:96:1D:AB:1D:43
Certificate issuer:       /CN=9e7510573b4e2f6f118e04dc9188c5f3ef257302
Certificate serial:       19DB23
Authority key identifier: 57:62:04:5B:C0:F0:4D:39:AF:ED:B9:CC:C2:E6:DE:8C:11:10:00:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7510573b4e2f6f118e04dc9188c5f3ef257302.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/ca071e1006b887798cce6a014c760c573cec196b.roa
Signing time:             Mon 08 Aug 2022 19:23:56 +0000
ROA not before:           Tue 13 Apr 2021 03:00:00 +0000
ROA not after:            Wed 13 Apr 2050 03:00:00 +0000
asID:                     265788
IP address blocks:        192.141.164.0/22 maxlen: 24
                          2803:7fc0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1694499 (0x19db23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e7510573b4e2f6f118e04dc9188c5f3ef257302
        Validity
            Not Before: Apr 13 03:00:00 2021 GMT
            Not After : Apr 13 03:00:00 2050 GMT
        Subject: CN=ca071e1006b887798cce6a014c760c573cec196b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f2:0c:48:cd:9b:33:c6:63:18:cd:f5:c3:57:
                    40:64:83:de:79:55:d0:32:9b:fc:79:3a:22:26:af:
                    24:e8:7a:69:0c:a6:59:42:47:00:b5:d0:e4:33:8d:
                    60:63:a8:af:c4:b8:66:fa:a6:bc:a5:39:dd:49:9f:
                    91:da:f7:cd:97:b3:e2:4b:59:e4:1d:f3:9e:fe:da:
                    a6:25:e1:16:3d:02:af:2a:2c:80:c5:05:35:13:34:
                    8f:8d:ec:ad:d0:cf:8b:7d:27:79:a3:63:60:fa:88:
                    46:eb:37:d2:71:12:5c:7c:24:18:a0:46:02:36:4c:
                    a6:11:8a:c6:39:fb:e3:6f:10:c0:9f:f8:b9:cd:93:
                    b1:93:09:b0:e2:6c:ed:7c:a5:62:65:f4:ae:47:6b:
                    cf:2e:33:b3:05:72:56:59:63:54:a1:4a:d3:52:49:
                    7e:a8:b4:cf:69:da:3f:02:09:b1:45:70:ab:0e:e7:
                    0f:ca:f0:4a:24:33:04:00:bf:8e:27:a8:82:9a:4f:
                    91:93:a7:12:5c:89:75:22:6e:c2:77:eb:ec:a6:0c:
                    b1:3f:23:3a:33:e6:66:6e:aa:ee:99:c5:71:e0:5a:
                    59:ee:a8:06:a6:c1:c5:cb:89:d6:55:51:62:75:a9:
                    9e:7c:44:70:f0:67:d6:e5:cc:d1:f9:8e:e6:a4:ea:
                    df:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3C:F2:B1:94:98:80:66:83:F2:21:D5:27:75:47:96:1D:AB:1D:43
            X509v3 Authority Key Identifier:
                keyid:57:62:04:5B:C0:F0:4D:39:AF:ED:B9:CC:C2:E6:DE:8C:11:10:00:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7510573b4e2f6f118e04dc9188c5f3ef257302.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/ca071e1006b887798cce6a014c760c573cec196b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/9e7510573b4e2f6f118e04dc9188c5f3ef257302.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.164.0/22
                IPv6:
                  2803:7fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:29:6b:c4:6a:df:6d:e0:45:cc:7a:ca:4c:b1:8f:e2:a9:4b:
         43:0b:9c:8b:14:6a:5f:8d:0d:d9:6c:8e:71:d6:02:8f:ff:b9:
         24:c0:9c:d1:8f:65:54:1c:a2:e0:86:6c:86:dc:80:0e:ae:9f:
         9e:95:7a:dd:64:51:0c:db:a2:55:0f:1e:12:d2:3e:98:75:0e:
         66:0c:4f:df:ba:18:80:eb:28:ab:29:59:10:c6:46:e3:81:01:
         36:4c:94:6c:a5:cc:f8:a0:82:81:74:0d:5e:f7:96:23:e0:04:
         52:d5:10:c5:02:c8:f1:50:36:d8:df:aa:01:b3:26:7b:ec:3b:
         16:09:2a:69:30:35:bc:60:53:f2:70:76:48:7a:ed:28:de:73:
         bd:43:ab:87:86:40:da:9f:35:e0:f0:8f:26:8d:38:35:c2:f6:
         d3:f9:42:c1:9d:18:30:d3:42:68:83:d7:e1:26:bd:c1:82:b8:
         b5:dd:49:18:65:ce:06:03:ef:e6:fb:fc:ce:86:fe:c9:d3:74:
         8d:80:45:a1:bc:4d:d7:ca:f7:58:d7:05:8c:bd:25:d1:84:f9:
         da:86:ac:dd:82:76:fb:1f:4d:59:1d:d9:9f:3f:d8:83:e0:f7:
         e2:5a:ff:3e:a7:09:c1:a2:2d:2e:fb:3a:56:7f:f3:cf:e9:7c:
         96:3c:b2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----