Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/1ce8e99faa011c86e4cc146c2eb99ab45292ef08.roa
File:                     1ce8e99faa011c86e4cc146c2eb99ab45292ef08.roa (raw, json)
Hash identifier:          Ya6gVqye+SsnL777Z3jpoFwsCTDNszE6bbVl9KiHmu4=
Subject key identifier:   AB:6C:D3:CF:64:E8:31:61:D4:C1:44:A2:CD:E1:D7:D8:BD:0E:F9:AF
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       1BE6C2
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/1ce8e99faa011c86e4cc146c2eb99ab45292ef08.roa
Signing time:             Mon 26 Sep 2022 21:30:44 +0000
ROA not before:           Mon 26 Sep 2022 21:23:42 +0000
ROA not after:            Thu 26 Sep 2024 21:23:42 +0000
asID:                     3816
IP address blocks:        186.98.0.0/19 maxlen: 19
                          186.98.32.0/19 maxlen: 19
                          186.98.64.0/19 maxlen: 19
                          186.98.96.0/19 maxlen: 19
                          186.98.128.0/19 maxlen: 19
                          186.98.160.0/19 maxlen: 19
                          186.98.192.0/19 maxlen: 19
                          186.98.224.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1828546 (0x1be6c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Sep 26 21:23:42 2022 GMT
            Not After : Sep 26 21:23:42 2024 GMT
        Subject: CN=1ce8e99faa011c86e4cc146c2eb99ab45292ef08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2a:a0:b4:57:e7:cb:9d:8b:7d:4c:fe:75:0f:
                    91:83:4d:b2:66:87:32:51:10:88:a7:5c:6e:bd:0a:
                    30:03:b0:a9:36:82:34:aa:33:e8:86:95:69:f6:44:
                    5b:65:43:db:9f:42:4e:91:4e:82:1a:e9:08:8a:93:
                    80:03:67:09:a0:8b:b4:3d:4b:86:17:20:f9:ad:6c:
                    36:4f:f7:ea:8d:cc:d0:98:62:a3:19:2c:1a:85:73:
                    96:27:b5:fb:ed:29:83:b2:07:92:4c:ad:7f:5b:f6:
                    7b:25:c9:b6:31:23:7b:e4:0f:da:53:33:c8:7f:2c:
                    51:bb:c3:40:6d:f1:5c:9e:6c:0f:0b:4f:5c:5c:98:
                    f1:d3:e4:71:20:e3:68:91:d4:3f:46:43:97:6a:8e:
                    1a:6e:e9:95:cc:08:a8:fe:73:f5:b9:c7:bf:09:ef:
                    b2:c8:f4:94:ed:2f:4c:a0:71:11:ae:2f:07:94:82:
                    c3:58:90:ab:55:5a:f6:cf:13:3d:6a:b2:27:52:80:
                    fa:72:7b:8a:a3:32:6b:77:6d:79:16:c2:2c:7e:03:
                    d8:0f:b2:3c:21:21:ff:28:5c:b5:8a:40:05:b2:e4:
                    81:29:fb:01:95:fa:ed:21:83:83:02:7a:35:2c:7f:
                    ee:45:ed:bf:aa:22:6b:99:b2:6d:b4:6c:a2:ee:5e:
                    fb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6C:D3:CF:64:E8:31:61:D4:C1:44:A2:CD:E1:D7:D8:BD:0E:F9:AF
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/1ce8e99faa011c86e4cc146c2eb99ab45292ef08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.98.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6f:71:c2:1b:63:93:79:4f:4c:2a:5b:a7:ba:63:3f:d6:27:38:
         72:46:dc:05:e5:58:57:b1:ae:8b:94:1c:e4:14:6a:3c:04:b8:
         ea:af:e9:b8:dd:b6:e6:ba:59:fc:b4:ec:b9:13:2a:1d:c8:0c:
         37:54:39:4f:dc:fa:2d:80:07:60:16:cd:d4:c6:ae:25:53:27:
         07:42:b8:13:ac:a4:2f:f9:46:72:e7:17:d6:df:1d:38:c2:96:
         ee:58:ec:0f:d7:38:b0:f5:e0:29:5c:fb:ea:9d:f6:43:70:a2:
         15:c1:17:cc:76:dc:fb:6d:af:f2:0e:0f:92:d0:49:67:9c:5c:
         8d:2c:4e:d0:87:b6:77:6d:de:36:14:eb:da:5b:59:7d:f9:53:
         d8:7c:aa:a0:61:02:11:2c:82:1c:e9:e5:0f:0a:3a:1c:89:7f:
         5d:4d:84:cb:2c:a1:1f:e3:fe:85:28:77:e0:87:7f:f1:f2:21:
         5b:7b:02:70:f5:85:80:7f:71:1c:ca:85:4d:eb:e7:5d:7c:ce:
         63:17:1d:87:9e:78:78:03:39:0c:c7:35:b3:37:9c:1e:1b:8b:
         09:fb:bf:32:09:77:bd:85:60:ba:4d:54:77:1d:fd:b9:ce:5e:
         cc:f4:8d:ef:3a:8f:16:de:a6:e7:aa:21:29:ba:99:c8:f3:02:
         53:47:52:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----