Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/8410e3d774b025d4ef48c84cbe81b8f9bf74f744.roa
File:                     8410e3d774b025d4ef48c84cbe81b8f9bf74f744.roa (raw, json)
Hash identifier:          0cWLPSoeN2BfoP9x6mSiHs0oiNUmf9ru/iQZrBobt9s=
Subject key identifier:   35:0E:DE:65:BE:F2:8D:71:76:6C:0E:D7:8E:3D:13:AD:EE:29:BC:6D
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       1C92FF
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/8410e3d774b025d4ef48c84cbe81b8f9bf74f744.roa
Signing time:             Thu 24 Nov 2022 16:26:02 +0000
ROA not before:           Tue 02 Aug 2022 03:00:00 +0000
ROA not after:            Sat 03 Aug 2024 03:00:00 +0000
asID:                     265705
IP address blocks:        190.27.136.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1872639 (0x1c92ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Aug  2 03:00:00 2022 GMT
            Not After : Aug  3 03:00:00 2024 GMT
        Subject: CN=8410e3d774b025d4ef48c84cbe81b8f9bf74f744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0a:d7:f5:03:95:da:c7:1c:75:cf:d8:d7:e5:
                    c2:d1:37:81:6f:ba:4b:54:6c:58:70:09:7f:fa:17:
                    76:fd:50:ce:da:d4:fc:6e:ab:d4:4f:90:a5:27:40:
                    97:c6:ae:2b:f0:45:6c:85:64:04:3a:2a:c6:ec:c2:
                    3b:21:1c:93:9c:2a:44:e1:8e:07:c1:8e:ac:ed:72:
                    05:44:24:d1:04:4d:0a:ff:d8:d3:26:24:42:ae:ba:
                    a1:cf:fb:e2:bb:85:6e:7b:7c:b7:7e:cf:7c:ff:e7:
                    27:53:cb:30:87:21:f6:0e:bb:c0:fa:14:eb:41:8b:
                    16:e3:9b:df:7b:58:eb:24:2d:e9:0f:5b:aa:4d:b6:
                    5a:16:73:b5:b8:14:06:26:e1:5a:15:48:05:3b:7d:
                    72:47:02:68:41:25:52:4a:27:5f:0c:17:45:b5:3c:
                    60:3e:75:0c:47:13:1b:f2:c9:24:b0:4e:a9:72:60:
                    9a:30:54:3d:dd:18:2e:32:d4:72:91:a8:aa:7a:63:
                    da:f9:c2:ff:e8:4d:a9:81:62:4a:81:71:72:05:69:
                    5b:39:44:c2:9c:9e:fc:87:ec:72:c2:4a:ba:7b:32:
                    a7:94:b9:b5:7e:6f:6d:9e:cc:f7:1a:46:9d:10:01:
                    89:99:9b:74:21:63:f0:df:65:32:39:d9:b8:a2:bf:
                    bd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:0E:DE:65:BE:F2:8D:71:76:6C:0E:D7:8E:3D:13:AD:EE:29:BC:6D
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/8410e3d774b025d4ef48c84cbe81b8f9bf74f744.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.27.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:87:e9:ae:4d:cc:43:e9:22:3b:f5:eb:9e:6e:0e:1e:3e:f2:
         b9:49:e7:6c:a3:62:19:92:39:8d:93:59:2b:31:da:a0:d8:08:
         fc:90:78:ce:97:f6:44:55:cb:1e:f8:a3:5a:60:d7:1d:67:e0:
         3d:ae:91:ca:1c:ac:6d:dd:aa:11:b9:fb:86:80:e1:01:be:6a:
         8e:d3:d0:fe:53:b4:ed:17:6d:f9:55:db:99:9b:8b:dd:8e:bd:
         96:52:83:c2:70:ac:46:92:e1:30:e7:28:67:2f:64:a8:65:1f:
         de:24:25:d3:fa:0e:34:0e:3d:b6:df:60:24:a6:59:08:cf:30:
         2a:c4:b5:5a:78:b1:eb:9e:58:a5:ba:c7:33:63:1b:2f:59:9b:
         01:b7:16:9b:0f:7f:88:0b:00:a4:b5:75:4a:0c:b5:6c:16:15:
         9c:3a:41:80:ae:01:ec:af:c0:e5:dd:4f:c0:6e:38:82:80:3c:
         06:06:56:bb:8d:d3:9f:f9:0b:4e:1f:5c:39:be:12:cb:7e:33:
         41:0b:0a:c1:21:3b:11:83:ca:a4:61:e1:18:bf:74:03:ef:6d:
         b2:14:33:07:87:fd:94:47:73:f8:d1:0d:d6:d2:d3:80:c6:49:
         50:6c:e9:53:7c:ba:e9:74:2a:69:0d:ce:5a:1e:bd:3f:03:64:
         4f:1d:70:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----