Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2356873-54df-4a2d-8734-524b0d50fda2/57bbe0ac5795220b461b666ce1e92d1e1da1d47a.roa
File:                     57bbe0ac5795220b461b666ce1e92d1e1da1d47a.roa (raw, json)
Hash identifier:          6d6O5TxbfPwdJkpYxF3qw7qxQOis21ZKTQPGYi5OfE0=
Subject key identifier:   09:8A:C9:86:3C:34:9C:5D:29:E0:6A:9B:8C:3C:68:C5:C7:07:1C:87
Certificate issuer:       /CN=5b57ec865ac261e0ae36d05374102c7827e41e4c
Certificate serial:       056A
Authority key identifier: 93:20:ED:01:88:81:BB:02:C8:2D:EA:13:20:D6:89:79:B8:68:A0:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b57ec865ac261e0ae36d05374102c7827e41e4c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d2356873-54df-4a2d-8734-524b0d50fda2/57bbe0ac5795220b461b666ce1e92d1e1da1d47a.roa
Signing time:             Tue 11 Oct 2022 22:24:55 +0000
ROA not before:           Tue 11 Oct 2022 17:23:23 +0000
ROA not after:            Fri 11 Oct 2024 17:23:23 +0000
asID:                     262182
IP address blocks:        190.52.112.0/22 maxlen: 24
                          190.52.116.0/24 maxlen: 24
                          190.52.117.0/24 maxlen: 24
                          190.52.119.0/24 maxlen: 24
                          190.52.121.0/24 maxlen: 24
                          190.52.123.0/24 maxlen: 24
                          190.52.125.0/24 maxlen: 24
                          190.52.126.0/24 maxlen: 24
                          190.52.127.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1386 (0x56a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b57ec865ac261e0ae36d05374102c7827e41e4c
        Validity
            Not Before: Oct 11 17:23:23 2022 GMT
            Not After : Oct 11 17:23:23 2024 GMT
        Subject: CN=57bbe0ac5795220b461b666ce1e92d1e1da1d47a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:35:8e:fd:61:76:ae:c1:02:89:ad:7a:16:e7:
                    13:61:cf:b7:f1:f5:83:c2:fa:5c:85:5a:53:01:62:
                    be:dc:2c:ec:d1:43:87:a2:4e:eb:d9:29:21:cf:9b:
                    de:7d:40:d3:9a:d0:27:47:c3:4b:6b:2c:62:48:a3:
                    f4:e7:5d:df:05:d9:ad:95:ac:bc:01:26:5f:99:cd:
                    ff:c0:0f:fc:f8:7a:97:7a:99:c9:f7:b9:f0:09:32:
                    4c:66:91:77:56:0b:c9:fe:28:9d:6c:e1:9e:b7:7d:
                    dc:18:52:6a:17:04:01:68:b4:e0:59:16:d9:60:f5:
                    90:1e:93:e5:96:22:b0:51:d4:29:a5:e1:16:11:e7:
                    13:32:09:84:29:47:1d:7a:bc:77:8b:ca:cf:bc:3c:
                    83:94:84:07:78:f0:c8:26:84:a1:b6:34:f1:b2:af:
                    dd:f3:81:6d:6d:94:09:e0:6e:00:15:92:52:e6:03:
                    12:60:ec:27:b8:d4:ad:30:23:d2:ac:60:f2:a0:c8:
                    80:1d:8c:f9:c3:63:8b:e5:ab:42:04:c9:fb:a5:59:
                    5f:e8:c9:42:64:cc:7a:65:e7:63:0f:90:a0:1b:85:
                    89:0e:00:bb:0f:3b:fa:8d:29:0f:9d:71:60:2f:ac:
                    44:ee:00:a2:fc:80:06:6f:86:70:d4:de:72:a0:a2:
                    c3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8A:C9:86:3C:34:9C:5D:29:E0:6A:9B:8C:3C:68:C5:C7:07:1C:87
            X509v3 Authority Key Identifier:
                keyid:93:20:ED:01:88:81:BB:02:C8:2D:EA:13:20:D6:89:79:B8:68:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b57ec865ac261e0ae36d05374102c7827e41e4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2356873-54df-4a2d-8734-524b0d50fda2/57bbe0ac5795220b461b666ce1e92d1e1da1d47a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d2356873-54df-4a2d-8734-524b0d50fda2/5b57ec865ac261e0ae36d05374102c7827e41e4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.112.0-190.52.117.255
                  190.52.119.0/24
                  190.52.121.0/24
                  190.52.123.0/24
                  190.52.125.0-190.52.127.255

    Signature Algorithm: sha256WithRSAEncryption
         26:f1:da:63:2d:b8:df:19:22:db:47:67:50:3b:c2:1f:bd:10:
         0a:86:de:d9:1c:dc:b3:7b:36:b3:08:e9:4a:f4:a3:97:a8:65:
         5d:14:dd:9a:88:a8:6d:44:d4:e8:ab:cc:e5:8d:13:1f:63:40:
         80:81:5c:ea:d4:f7:59:e8:40:d8:e9:2f:cb:52:40:d9:0a:d3:
         3a:39:1a:ff:78:ee:5f:ca:a3:30:92:45:d9:51:6f:76:75:52:
         07:b8:d7:7d:7f:a1:0e:56:75:47:b2:19:46:56:19:21:de:66:
         b8:9d:55:3d:76:da:20:58:31:64:00:3e:21:ed:41:e1:6e:a7:
         c5:33:6e:a8:d8:62:1a:4d:af:2d:92:18:7d:4d:46:9f:a2:db:
         08:25:f0:ab:31:68:07:fe:16:62:29:90:b5:fa:76:fc:ff:79:
         ac:07:9a:3e:4f:03:22:28:f8:a3:91:5f:bd:e2:4b:32:4c:14:
         04:bc:04:13:92:c7:a4:c3:68:8b:57:ed:52:41:9a:34:d7:8c:
         1e:cf:a2:45:5f:89:68:4b:fc:16:c3:25:f5:3f:f6:11:b5:0d:
         92:77:59:a0:1d:52:31:7a:ab:49:b6:42:e9:0c:f3:d0:dc:5b:
         cb:b2:08:ba:25:c4:d5:39:25:a1:3f:7d:db:c3:b4:01:e1:4e:
         97:de:3d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----