Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b8300db2-a352-4df9-97b2-ac33a5ae14d8/782d21e64894dc630d354cd0429774be8fa5bb1f.roa
File:                     782d21e64894dc630d354cd0429774be8fa5bb1f.roa (raw, json)
Hash identifier:          i479ORHMAVvhWkIGeDClt8sseNd0CbKLETCB5C+Cpr4=
Subject key identifier:   4D:0E:17:BE:AA:A9:DA:C2:40:A6:55:B5:2E:7D:C6:C3:69:CD:51:49
Certificate issuer:       /CN=0c4557be1a84f05a56a15cb22513acd961fb70fa
Certificate serial:       0EB1FB
Authority key identifier: 6A:F8:BD:09:59:77:BC:67:70:C2:C2:34:20:F9:8A:39:EC:B6:12:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c4557be1a84f05a56a15cb22513acd961fb70fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b8300db2-a352-4df9-97b2-ac33a5ae14d8/782d21e64894dc630d354cd0429774be8fa5bb1f.roa
Signing time:             Tue 23 Nov 2021 14:41:10 +0000
ROA not before:           Tue 23 Nov 2021 03:00:00 +0000
ROA not after:            Thu 23 Nov 2023 03:00:00 +0000
asID:                     269936
IP address blocks:        190.83.104.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 963067 (0xeb1fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c4557be1a84f05a56a15cb22513acd961fb70fa
        Validity
            Not Before: Nov 23 03:00:00 2021 GMT
            Not After : Nov 23 03:00:00 2023 GMT
        Subject: CN=782d21e64894dc630d354cd0429774be8fa5bb1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e2:0a:66:d4:67:22:e6:0a:5a:80:f7:76:3c:
                    93:7e:96:d6:3c:5a:59:27:66:4d:17:13:1e:70:f6:
                    88:cd:31:93:16:7c:b3:4a:f7:ab:43:bb:33:e1:11:
                    e3:10:90:c4:37:26:03:e1:b7:a2:10:2f:22:9d:69:
                    db:08:02:9e:39:e2:55:05:08:a1:52:62:2a:c7:1f:
                    15:7f:ef:b2:64:7d:a5:7d:7e:f7:43:43:46:60:c6:
                    bb:c6:96:4f:cf:a4:76:78:12:61:ee:6e:88:a1:1d:
                    a2:c7:89:aa:17:1b:22:47:bc:c6:93:67:75:99:fc:
                    1e:6c:72:8d:4a:aa:9c:68:2f:5c:3c:6a:68:f7:ec:
                    c1:aa:f7:63:9e:10:90:1c:99:ee:13:4c:01:ec:50:
                    77:98:0a:16:44:3d:56:a6:5a:e7:de:34:03:3c:60:
                    76:e2:bb:f6:3b:32:ff:fd:4b:c7:f9:a4:ff:8a:08:
                    45:9e:cc:9a:d7:95:5d:02:e9:48:ed:64:88:d6:00:
                    e7:ea:f0:f9:39:4d:de:b8:df:84:36:88:ee:8e:29:
                    b9:96:f3:83:8f:41:8b:c6:a7:98:d5:63:a2:c4:a1:
                    ca:0a:f1:47:88:63:81:26:d6:a6:69:85:b2:47:f2:
                    65:4c:af:c3:d6:47:2e:35:b2:00:c3:d0:6e:e8:93:
                    81:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0E:17:BE:AA:A9:DA:C2:40:A6:55:B5:2E:7D:C6:C3:69:CD:51:49
            X509v3 Authority Key Identifier:
                keyid:6A:F8:BD:09:59:77:BC:67:70:C2:C2:34:20:F9:8A:39:EC:B6:12:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c4557be1a84f05a56a15cb22513acd961fb70fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b8300db2-a352-4df9-97b2-ac33a5ae14d8/782d21e64894dc630d354cd0429774be8fa5bb1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b8300db2-a352-4df9-97b2-ac33a5ae14d8/0c4557be1a84f05a56a15cb22513acd961fb70fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:cc:65:f2:35:3d:6d:b7:f0:cb:3b:9b:f7:31:a7:65:a6:b2:
         ae:73:b3:f4:3b:1f:47:63:98:ed:3f:5f:1d:1a:8a:e7:cc:68:
         e6:a3:77:59:4a:27:5c:f9:67:e3:d4:9d:f6:f0:e4:5d:2a:c4:
         f9:f6:f5:8a:6e:a6:83:01:0d:00:98:67:e9:48:c9:ff:49:2c:
         12:76:9f:c9:9b:33:1c:f7:f7:12:06:22:b5:18:87:f3:5c:5b:
         07:7c:ca:2d:b5:73:61:84:9a:5e:68:08:c2:db:6b:9f:97:ce:
         01:2b:ce:4f:50:a5:c5:13:52:9a:3e:8c:d3:96:15:b5:72:95:
         2e:44:87:72:7c:0a:bf:55:46:b9:39:ae:2f:ea:79:11:ca:58:
         a1:49:6c:fc:c3:02:ea:e5:a3:47:45:22:5f:3a:8f:7b:ee:42:
         48:72:71:2a:1a:86:ee:d6:d5:23:9b:13:ef:45:01:ec:ab:a0:
         98:f2:4e:85:0c:35:3b:65:84:06:8d:79:56:4c:5e:86:24:e5:
         a7:96:d2:d8:3a:ff:63:9e:c7:5d:e8:a3:56:2a:d8:7b:6d:fb:
         2b:de:2e:ce:5d:f6:d9:9d:90:35:4f:7b:26:9f:e6:45:3a:57:
         02:4f:e7:39:7b:c4:a1:1a:61:a1:6b:01:5b:17:54:c6:fb:60:
         e4:d1:ff:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----