Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7bf1ac0a-4d1d-4778-a9dc-9bdc1612df0b/7595b92ad692678df3931e86c10e0cbab4b0f99e.roa
File:                     7595b92ad692678df3931e86c10e0cbab4b0f99e.roa (raw, json)
Hash identifier:          28UKf/NhNxJfSstCGc2Vj4ota+4+7tyi5ZlQgAquQFY=
Subject key identifier:   41:48:44:1E:B7:8D:C1:EE:7D:7C:FA:62:25:9C:16:2C:00:D9:8A:72
Certificate issuer:       /CN=15ef5960d1a1653e9afb4b92c680fec5a4cff418
Certificate serial:       0D4CD2
Authority key identifier: 5F:EB:71:D9:E1:FE:32:9D:1B:31:E9:4A:83:C5:E8:B3:B1:A8:36:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ef5960d1a1653e9afb4b92c680fec5a4cff418.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7bf1ac0a-4d1d-4778-a9dc-9bdc1612df0b/7595b92ad692678df3931e86c10e0cbab4b0f99e.roa
Signing time:             Wed 24 Mar 2021 22:51:11 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     265794
IP address blocks:        192.141.40.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871634 (0xd4cd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ef5960d1a1653e9afb4b92c680fec5a4cff418
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=7595b92ad692678df3931e86c10e0cbab4b0f99e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:71:7b:94:4b:5a:12:44:de:60:59:be:b9:50:
                    ea:cc:07:19:97:5f:6f:74:86:21:1f:cc:ff:13:1d:
                    c8:8d:e2:e0:c2:b1:d9:4f:e9:c6:df:13:a2:4c:ab:
                    e9:f5:f4:8a:83:f0:4d:af:82:e4:f5:4c:80:72:58:
                    a6:61:2f:bf:2b:f8:b9:15:04:57:eb:d1:7f:79:b9:
                    13:b1:27:ff:55:87:94:de:d8:5a:64:86:13:89:9d:
                    78:cd:bf:fc:df:bb:11:62:18:4e:42:69:79:b6:58:
                    e9:ad:99:b4:97:f1:f7:d3:fd:95:cb:97:80:32:23:
                    5f:ed:32:d8:87:3d:65:ad:37:86:5a:ad:59:b4:3a:
                    49:cb:f6:36:30:7b:ef:a4:f3:7e:c7:1f:fe:c7:9f:
                    ab:66:09:cb:c4:e9:39:38:b1:f3:5b:81:c8:d9:bb:
                    ad:0f:ca:fe:07:5b:3a:99:1d:28:68:d1:bb:cb:71:
                    19:e4:07:c5:5c:d9:67:b7:a2:55:1b:e9:e7:25:66:
                    7b:31:ad:bf:90:77:bd:85:dd:35:05:34:1e:90:4f:
                    56:59:e0:bc:c2:78:10:8f:19:01:65:e0:3b:82:32:
                    90:0a:10:59:0f:40:d0:d6:51:fa:ab:e5:e6:6d:43:
                    a7:26:20:30:8a:ec:90:45:e6:08:eb:79:a0:cb:29:
                    d6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:48:44:1E:B7:8D:C1:EE:7D:7C:FA:62:25:9C:16:2C:00:D9:8A:72
            X509v3 Authority Key Identifier:
                keyid:5F:EB:71:D9:E1:FE:32:9D:1B:31:E9:4A:83:C5:E8:B3:B1:A8:36:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ef5960d1a1653e9afb4b92c680fec5a4cff418.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7bf1ac0a-4d1d-4778-a9dc-9bdc1612df0b/7595b92ad692678df3931e86c10e0cbab4b0f99e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7bf1ac0a-4d1d-4778-a9dc-9bdc1612df0b/15ef5960d1a1653e9afb4b92c680fec5a4cff418.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:78:f4:81:3a:ef:78:1d:36:eb:1f:71:d3:11:39:c4:53:99:
         e7:e6:05:b6:12:dd:d1:40:78:fd:9b:6f:c1:69:8e:a0:95:6d:
         da:05:73:65:55:42:0f:37:7d:a8:66:d8:fe:d7:35:4a:67:c4:
         49:cd:a4:14:36:26:55:76:f3:e3:1b:57:da:a2:7b:17:81:bc:
         6f:04:da:b0:62:6e:20:f1:74:71:fd:5a:57:6f:0e:1c:c0:2f:
         75:40:6c:e9:42:d5:2e:88:a3:1c:5e:c2:34:f5:fa:e7:9b:84:
         a7:b2:63:9a:fb:8a:d7:c2:c0:87:6f:d6:10:42:84:40:7e:b3:
         73:5c:f3:3c:ed:68:31:3d:cb:39:68:c1:85:b6:a6:03:52:00:
         68:35:17:c5:53:e8:11:8b:e2:6b:7d:5e:59:a8:21:dd:f1:7c:
         c0:19:91:d5:90:54:91:21:12:29:cb:62:1f:6a:de:41:62:37:
         58:30:d9:21:d5:92:6d:2a:48:5e:9a:41:81:ea:e9:0d:36:9d:
         b9:d6:c3:61:aa:1b:12:a8:6f:1b:96:d0:d0:8b:90:a6:4a:d9:
         be:51:ef:c0:60:c1:5d:40:64:08:fc:7c:28:93:13:42:18:98:
         42:35:41:8f:60:6e:63:00:48:c7:54:6d:a4:c7:77:c3:2c:91:
         40:b4:60:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----