Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b442d26c-05ba-47ef-a759-35065391db94/777448e23a3191e0928b0f45cf8aa5492d0e9193.roa
File:                     777448e23a3191e0928b0f45cf8aa5492d0e9193.roa (raw, json)
Hash identifier:          5ddBXzle5aONI+ZpYL1GWo+WEBKotSAvq6qiuiPUWRs=
Subject key identifier:   95:6C:08:9E:C5:68:1C:A1:CC:98:1F:23:2C:8C:BB:C0:86:7A:81:00
Certificate issuer:       /CN=7fd57ce085f535ff9e974a7714dec8bddaba86d8
Certificate serial:       4C68
Authority key identifier: 57:0A:43:96:87:0E:81:8E:1A:87:CB:62:F2:74:98:FB:9D:5D:AB:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fd57ce085f535ff9e974a7714dec8bddaba86d8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b442d26c-05ba-47ef-a759-35065391db94/777448e23a3191e0928b0f45cf8aa5492d0e9193.roa
Signing time:             Mon 20 Sep 2021 13:24:16 +0000
ROA not before:           Thu 09 Sep 2021 03:00:00 +0000
ROA not after:            Sat 09 Sep 2023 03:00:00 +0000
asID:                     269955
IP address blocks:        190.89.44.0/22 maxlen: 24
                          2803:26e0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19560 (0x4c68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd57ce085f535ff9e974a7714dec8bddaba86d8
        Validity
            Not Before: Sep  9 03:00:00 2021 GMT
            Not After : Sep  9 03:00:00 2023 GMT
        Subject: CN=777448e23a3191e0928b0f45cf8aa5492d0e9193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:df:59:ab:4d:09:a4:29:71:dc:19:d4:ad:62:
                    14:d3:a0:6f:be:f6:15:07:9c:17:6d:a1:7b:ae:0e:
                    c2:1a:26:b9:ca:e3:52:02:35:96:c1:be:ae:a7:24:
                    77:40:e2:8e:da:2c:36:e6:83:28:40:27:7a:7d:9e:
                    7c:20:c4:8a:e0:f1:02:b1:b9:86:71:18:fc:f8:b3:
                    fd:93:ae:68:46:16:05:e7:ce:91:4e:32:2f:58:24:
                    09:c6:96:3d:09:a9:81:5c:98:85:69:f6:3a:23:33:
                    54:37:8b:12:95:1c:eb:0b:13:9e:c6:8a:2b:57:96:
                    6e:95:61:61:4f:ad:73:ba:d7:c1:15:2f:82:a9:2f:
                    f3:ad:34:67:49:db:3c:e6:e0:3e:c8:f8:c6:02:ff:
                    47:32:5c:fc:8b:ce:b3:b4:37:ba:eb:64:c1:28:19:
                    91:ac:e5:e1:58:b5:d1:13:d4:7b:8d:79:5f:89:ab:
                    9c:c0:98:ee:62:72:99:b5:de:47:2b:ee:3d:4e:0c:
                    c3:0a:9e:25:a3:1f:77:04:77:89:0e:46:30:d4:5c:
                    9a:cf:5d:bf:8c:1d:99:b6:8e:62:68:5c:a3:83:bd:
                    21:2b:f9:cf:2e:34:e1:56:c7:e5:4d:e2:07:4f:29:
                    c4:21:c1:95:66:2e:49:4a:15:23:fa:33:ee:ed:e0:
                    8b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6C:08:9E:C5:68:1C:A1:CC:98:1F:23:2C:8C:BB:C0:86:7A:81:00
            X509v3 Authority Key Identifier:
                keyid:57:0A:43:96:87:0E:81:8E:1A:87:CB:62:F2:74:98:FB:9D:5D:AB:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fd57ce085f535ff9e974a7714dec8bddaba86d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b442d26c-05ba-47ef-a759-35065391db94/777448e23a3191e0928b0f45cf8aa5492d0e9193.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b442d26c-05ba-47ef-a759-35065391db94/7fd57ce085f535ff9e974a7714dec8bddaba86d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.44.0/22
                IPv6:
                  2803:26e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:89:89:a4:8c:01:bc:56:48:2f:8a:d0:a8:96:6f:00:79:fa:
         45:c7:46:09:7c:1b:3e:df:23:70:6b:c1:8f:c5:74:da:2b:f3:
         56:f7:23:0c:d0:ec:46:2c:24:ee:61:bb:a6:bb:70:61:aa:c2:
         fc:b5:a2:96:68:21:2e:73:4c:6d:b1:d8:2f:7e:2a:8d:4c:19:
         1d:99:06:c5:a0:88:f1:c6:9e:b6:17:e8:b8:b0:ba:06:fd:47:
         9a:99:4c:47:61:fb:aa:81:11:32:13:dc:d2:a5:61:e8:48:9f:
         78:1e:0b:c1:1f:c9:6e:17:39:de:68:af:a6:5a:d5:31:17:32:
         73:70:c2:f4:cd:c0:01:6e:ab:ad:4e:76:b7:28:b3:d6:8c:74:
         08:9c:c9:2d:62:70:f4:2b:0c:8a:79:4c:6e:9d:8a:de:e2:31:
         70:b2:9b:73:c7:30:bf:85:6d:9f:aa:e6:3e:93:24:7d:ea:7e:
         63:f8:1a:ab:96:1f:be:99:d1:d2:f3:85:c7:93:5a:8e:7d:cf:
         9d:ca:06:dc:16:85:2b:ea:ed:3d:2d:30:82:25:54:cc:4e:b2:
         b3:aa:68:c8:e7:bc:3a:2f:36:97:55:de:65:39:51:65:fe:62:
         0a:cd:6d:9c:1d:3d:aa:81:ed:5b:ca:0a:9f:94:3c:c3:62:11:
         b1:5f:f2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----