Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7e760a4d-6e09-4bc8-a653-37aebcd512a5/d52b0ca85ab630f4a3d68d056a1488e6bb7a8bc0.roa
File:                     d52b0ca85ab630f4a3d68d056a1488e6bb7a8bc0.roa (raw, json)
Hash identifier:          XpGRq92pJAUOrqJ8RvwFUKEyPYbqURK1aLmApebWisA=
Subject key identifier:   D5:05:1B:ED:9C:8B:69:28:57:7E:29:60:E3:DF:92:D2:BF:88:23:FE
Certificate issuer:       /CN=e7910aba265e3d6933bffbf4bb39ed43b03a2ffb
Certificate serial:       0BE26B
Authority key identifier: 95:A7:49:5D:DB:4D:A4:77:AD:D6:61:D7:05:CB:ED:C0:4B:54:26:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e7910aba265e3d6933bffbf4bb39ed43b03a2ffb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7e760a4d-6e09-4bc8-a653-37aebcd512a5/d52b0ca85ab630f4a3d68d056a1488e6bb7a8bc0.roa
Signing time:             Wed 24 Mar 2021 14:29:39 +0000
ROA not before:           Wed 24 Mar 2021 14:29:39 +0000
ROA not after:            Tue 24 Mar 2026 14:29:39 +0000
asID:                     52295
IP address blocks:        190.211.244.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 778859 (0xbe26b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7910aba265e3d6933bffbf4bb39ed43b03a2ffb
        Validity
            Not Before: Mar 24 14:29:39 2021 GMT
            Not After : Mar 24 14:29:39 2026 GMT
        Subject: CN=d52b0ca85ab630f4a3d68d056a1488e6bb7a8bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:72:0f:b8:cf:f9:29:80:d1:24:b3:d2:37:49:
                    21:7d:35:cb:09:e1:9c:a9:39:b5:c1:c6:0a:e9:71:
                    a7:e9:cc:7e:58:bc:f9:f0:c4:4a:1e:11:33:68:2a:
                    f6:80:e5:2c:b0:59:93:2d:7b:db:8b:81:56:4f:99:
                    c7:0c:27:97:d8:1f:b2:73:a6:2c:22:1c:c2:af:cb:
                    ed:39:76:3f:64:88:e6:79:a5:f2:f2:a4:86:9a:f6:
                    f6:9b:7c:4b:64:b3:78:3a:90:64:f4:9f:08:70:10:
                    9b:54:45:27:3f:77:4c:6b:9f:48:4d:32:83:6c:6a:
                    5b:4a:c3:db:57:8f:48:9f:c7:53:b4:25:a0:3e:b5:
                    7c:00:28:a3:d1:f8:9b:a9:b6:c5:ea:31:b7:a8:69:
                    74:ea:fa:25:55:75:05:28:2b:68:15:7a:bd:6b:99:
                    57:d1:40:e7:2a:18:8f:1e:af:1a:21:45:22:46:db:
                    bd:47:ab:96:81:7f:37:1b:aa:ac:c9:e7:52:1f:14:
                    41:6f:8a:16:f7:29:e8:9a:73:05:90:2f:16:7d:fe:
                    ef:84:e3:8a:0f:f7:13:80:8b:8d:ed:7f:41:9e:7f:
                    7d:d5:5b:8b:e1:07:3c:67:a3:c6:23:6b:7c:6b:3a:
                    f2:53:a2:1f:50:01:de:aa:4e:1d:f9:8e:92:8c:42:
                    8d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:05:1B:ED:9C:8B:69:28:57:7E:29:60:E3:DF:92:D2:BF:88:23:FE
            X509v3 Authority Key Identifier:
                keyid:95:A7:49:5D:DB:4D:A4:77:AD:D6:61:D7:05:CB:ED:C0:4B:54:26:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e7910aba265e3d6933bffbf4bb39ed43b03a2ffb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7e760a4d-6e09-4bc8-a653-37aebcd512a5/d52b0ca85ab630f4a3d68d056a1488e6bb7a8bc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7e760a4d-6e09-4bc8-a653-37aebcd512a5/e7910aba265e3d6933bffbf4bb39ed43b03a2ffb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:a1:6e:98:e3:8d:e5:12:41:7a:87:53:dd:ff:a7:13:08:48:
         25:39:13:7e:72:fb:5c:cd:c6:59:b1:25:4e:49:64:df:63:19:
         3d:82:8e:9e:01:6c:d5:93:ed:7e:5b:f7:54:b1:f5:23:09:9c:
         7f:1f:a9:02:1c:f4:65:dd:0a:4c:84:59:81:a3:2a:e6:d9:6f:
         bb:3e:16:35:92:75:c0:f3:4c:d6:cd:4e:c9:fe:12:01:b4:5e:
         d5:1e:59:a2:7c:c8:8a:70:48:cc:c9:ff:e0:48:a4:8b:90:d8:
         a5:db:fa:6c:b2:ea:1b:73:84:4b:fc:ed:87:3f:38:e0:61:de:
         57:1d:0e:78:b6:fb:b5:c6:b9:0f:9d:21:6e:ef:7c:d4:8f:db:
         9f:54:c0:f1:f9:a6:47:ed:ef:e0:9c:b4:d5:f4:86:9f:56:e3:
         1d:0b:c9:32:42:11:02:fd:1d:82:ea:34:da:dd:46:24:95:8a:
         6f:81:d0:51:a0:e1:89:a8:43:ec:1d:23:86:0d:e2:84:ec:8f:
         23:cf:8f:f3:a1:d3:82:3a:f5:e4:41:fc:8e:0c:7f:af:95:f7:
         9f:6b:dd:d4:ac:cc:d0:8d:72:86:ea:97:bc:b3:5e:13:29:8e:
         47:8f:f8:02:6f:1d:f7:bd:2a:23:33:43:84:10:13:20:30:25:
         31:2d:f2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----