Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/5a4935c2e8110a0e75fb74e951cc903f5bb47e26.roa
File:                     5a4935c2e8110a0e75fb74e951cc903f5bb47e26.roa (raw, json)
Hash identifier:          j0BxuWFdrR2zXe4KrS+WEOjz1XLSh5EHUatji+gH0yg=
Subject key identifier:   DA:9F:E9:09:14:BA:46:BF:99:64:11:F7:58:5A:AA:B3:C8:F5:C5:DB
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       19A75E
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/5a4935c2e8110a0e75fb74e951cc903f5bb47e26.roa
Signing time:             Wed 03 Aug 2022 21:42:20 +0000
ROA not before:           Wed 03 Aug 2022 03:00:00 +0000
ROA not after:            Sat 03 Aug 2024 03:00:00 +0000
asID:                     265705
IP address blocks:        190.27.136.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1681246 (0x19a75e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Aug  3 03:00:00 2022 GMT
            Not After : Aug  3 03:00:00 2024 GMT
        Subject: CN=5a4935c2e8110a0e75fb74e951cc903f5bb47e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2e:69:05:3a:f3:0e:21:33:cb:b8:13:c8:39:
                    7b:70:e2:39:6d:df:36:46:53:cc:94:46:38:5e:34:
                    f1:aa:d1:c8:99:81:9d:b6:df:72:f2:77:61:6a:86:
                    63:d5:1c:83:46:28:b5:d9:d2:f6:fd:17:3a:ae:da:
                    62:9e:13:ef:30:8e:ed:7b:60:6b:42:ee:b7:a9:3a:
                    d9:90:60:5f:21:6a:47:84:3f:5d:56:06:7d:5d:68:
                    5e:02:5e:c5:9d:6d:29:1c:44:4a:1a:2a:d2:d3:9e:
                    2b:27:c5:12:4e:6d:2f:2d:c3:b9:45:41:01:10:57:
                    53:1d:ca:00:3e:4a:81:39:52:03:1a:17:25:90:47:
                    5c:1a:5b:68:57:d4:25:27:41:9f:a1:b1:5f:4c:71:
                    53:4a:06:2a:18:e6:a2:53:bb:b4:21:71:68:cf:be:
                    8b:f0:87:22:bc:0f:ea:7b:94:57:e6:7d:ec:38:01:
                    54:bb:f1:a7:9a:9d:8d:75:21:2a:3a:8e:3d:75:14:
                    bd:f4:3a:95:65:f7:c9:71:ca:37:33:6f:3e:a2:cf:
                    1d:6c:d9:0c:ac:93:df:e1:b9:50:74:35:7b:ac:10:
                    e2:51:bc:b3:b7:63:03:68:2d:ab:a8:02:5e:03:36:
                    61:87:9e:6e:10:c1:92:b9:f2:92:4c:e4:c7:39:d6:
                    08:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9F:E9:09:14:BA:46:BF:99:64:11:F7:58:5A:AA:B3:C8:F5:C5:DB
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/5a4935c2e8110a0e75fb74e951cc903f5bb47e26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.27.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:4d:04:0c:39:28:4a:98:87:42:d2:54:40:e5:d9:f3:3f:94:
         5c:be:c2:81:d0:3e:a7:d6:61:f3:3d:8e:f7:5f:b9:4f:c4:03:
         b4:49:2c:33:8e:51:b8:85:11:a8:da:ca:bf:18:ac:ce:61:47:
         04:c8:ae:39:8b:cb:d8:cb:53:f0:54:2f:f9:08:6b:52:70:16:
         42:2a:a2:e2:1a:46:4d:57:7a:61:5e:36:23:e1:be:26:1e:20:
         ba:ca:04:3a:7d:c7:ea:27:8e:44:37:43:11:47:03:e0:15:21:
         50:dc:79:7a:94:87:ce:9d:24:30:c1:21:b8:b9:4c:86:ac:82:
         dc:c1:b5:8f:fa:5a:e9:e6:2f:83:0e:4f:d7:7f:76:99:36:e4:
         98:78:46:22:b9:b1:b1:9b:e5:51:cd:87:af:d0:94:68:e9:cd:
         fb:17:0a:30:ca:1e:5c:a0:40:81:ce:5c:d4:7c:16:4a:01:c0:
         3c:69:91:11:2d:67:b9:bd:11:9d:0d:64:eb:4f:f5:f5:4a:bd:
         88:4a:10:f6:9d:62:79:8e:06:e1:3b:92:8e:91:17:33:a4:96:
         76:a4:7c:bc:02:06:d9:d0:28:dd:73:c4:32:6a:20:73:65:75:
         c9:24:72:6c:46:b3:e0:01:4a:8f:0d:1b:51:c1:3d:7e:28:89:
         92:5d:73:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----