Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/ac4b2df0f07ae32cb4a9a59bed7b000cbe4a01bf.roa
File:                     ac4b2df0f07ae32cb4a9a59bed7b000cbe4a01bf.roa (raw, json)
Hash identifier:          BY94rPl/Kk7vs1nG3z1oemQFl15tnmMkUJkXEgkghso=
Subject key identifier:   F3:FF:18:D0:6D:72:D0:84:FE:AA:C5:4C:63:3C:58:FA:05:19:4B:22
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       0D99B4
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/ac4b2df0f07ae32cb4a9a59bed7b000cbe4a01bf.roa
Signing time:             Wed 24 Mar 2021 14:35:13 +0000
ROA not before:           Wed 24 Mar 2021 14:35:11 +0000
ROA not after:            Tue 24 Mar 2026 14:35:11 +0000
asID:                     19429
IP address blocks:        190.26.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 891316 (0xd99b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Mar 24 14:35:11 2021 GMT
            Not After : Mar 24 14:35:11 2026 GMT
        Subject: CN=ac4b2df0f07ae32cb4a9a59bed7b000cbe4a01bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:af:c2:9a:ca:0e:2f:f5:0e:60:af:34:7a:7f:
                    1a:ea:bd:63:50:a4:10:5f:d5:fd:80:c4:d8:b2:55:
                    a4:aa:83:c2:2f:38:f1:fc:ce:8e:3c:f3:47:1f:d5:
                    25:4f:fc:59:4c:c1:24:16:09:ae:75:f2:8a:33:d3:
                    b2:1b:94:64:71:6d:4e:ae:47:e1:e3:1c:25:fb:ed:
                    b1:7e:5f:6a:7c:b7:bd:95:07:dc:1d:89:33:1b:72:
                    30:fa:11:95:09:c0:36:d6:c4:72:a5:f0:5b:71:93:
                    34:ed:85:b3:e3:4a:15:51:ff:70:fe:54:08:d8:50:
                    d7:51:7f:06:21:bf:72:01:52:95:c2:ae:77:0b:0e:
                    6c:93:47:12:5d:a3:7c:fc:50:ee:d5:d2:89:b9:bc:
                    85:9b:03:93:47:8b:ff:38:f0:fb:73:c6:87:a3:90:
                    eb:ce:c5:c1:43:7c:df:7c:2d:fa:27:2b:c4:e2:d7:
                    7b:49:b9:12:d3:ee:e0:79:d0:94:e8:eb:0b:23:73:
                    4a:66:cf:9e:33:ed:c4:d6:d2:1f:db:cb:2e:3e:71:
                    7b:ee:3b:3e:7d:0b:5b:a7:9a:fc:cc:17:9e:be:25:
                    33:46:96:3b:92:ee:9f:62:94:df:67:f1:69:ca:e9:
                    5a:83:dc:e7:ae:85:dd:a9:b3:27:0b:37:ba:44:4d:
                    f9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FF:18:D0:6D:72:D0:84:FE:AA:C5:4C:63:3C:58:FA:05:19:4B:22
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/ac4b2df0f07ae32cb4a9a59bed7b000cbe4a01bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.26.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         64:be:cd:9e:21:ad:f2:16:66:81:b6:50:3d:fd:cc:19:e4:0a:
         21:a7:c6:93:6b:a7:91:c0:95:ef:b6:b4:ff:d6:0d:81:9e:d1:
         a7:49:e6:2e:fd:6e:41:11:4b:7c:70:5d:b3:ef:37:50:57:f7:
         70:c0:ae:56:af:be:35:16:d4:4d:e2:50:e3:9a:89:47:4c:8b:
         a8:ed:20:02:d0:6d:28:c1:af:be:e0:fe:d6:52:d3:8a:65:d7:
         06:5d:1e:ba:8f:15:9c:23:1e:aa:96:eb:fc:ca:e2:74:04:04:
         bd:90:3a:00:74:aa:b6:2e:44:85:9e:ea:ea:40:8e:b8:7a:b2:
         72:0b:a2:14:6b:f1:09:b9:27:55:d7:1b:0b:b9:84:2f:30:7a:
         5c:ee:4c:33:7b:99:61:79:c2:80:67:59:5a:66:a0:e9:08:00:
         bd:8f:75:67:1c:fb:6e:ba:46:0a:2b:13:be:89:98:8b:c8:ef:
         f8:f5:b6:e0:1e:42:5b:85:fa:74:32:13:37:3e:e0:e1:c6:39:
         d9:58:87:39:30:3e:3e:d5:0b:77:8c:19:eb:7f:37:c5:f7:ca:
         78:71:55:bb:1a:1c:e4:c3:83:31:7e:08:90:f4:e1:29:ad:a3:
         e0:65:7f:e5:e7:5a:71:f4:58:ca:74:10:e6:d9:ed:24:2f:74:
         7e:f6:33:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----