Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2356873-54df-4a2d-8734-524b0d50fda2/c98e48da53f168ee416f318bc6630671eb275265.roa
File:                     c98e48da53f168ee416f318bc6630671eb275265.roa (raw, json)
Hash identifier:          Gh/djLcNRANnkKn+zDr0K7ub27/8ui8qnbKvl8v5hDA=
Subject key identifier:   3E:9B:57:25:9C:F4:B5:77:E4:00:DC:E4:0C:42:C8:36:2B:D7:1F:77
Certificate issuer:       /CN=5b57ec865ac261e0ae36d05374102c7827e41e4c
Certificate serial:       02F0
Authority key identifier: 93:20:ED:01:88:81:BB:02:C8:2D:EA:13:20:D6:89:79:B8:68:A0:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b57ec865ac261e0ae36d05374102c7827e41e4c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d2356873-54df-4a2d-8734-524b0d50fda2/c98e48da53f168ee416f318bc6630671eb275265.roa
Signing time:             Tue 11 Oct 2022 17:25:56 +0000
ROA not before:           Tue 11 Oct 2022 17:23:23 +0000
ROA not after:            Fri 11 Oct 2024 17:23:23 +0000
asID:                     262182
IP address blocks:        190.52.112.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 752 (0x2f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b57ec865ac261e0ae36d05374102c7827e41e4c
        Validity
            Not Before: Oct 11 17:23:23 2022 GMT
            Not After : Oct 11 17:23:23 2024 GMT
        Subject: CN=c98e48da53f168ee416f318bc6630671eb275265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d7:0e:8f:2b:a9:73:f6:50:28:0d:7e:7b:41:
                    e5:4f:72:5c:65:18:be:91:59:ba:04:9d:be:05:f4:
                    ae:21:18:c9:f4:fe:dd:26:48:41:58:d6:d4:11:69:
                    de:db:13:24:c3:00:08:d3:7d:bc:0f:c8:68:68:70:
                    dc:8c:a4:c4:5e:d9:e6:cf:7d:ef:a1:a5:85:c7:12:
                    7d:82:18:62:70:7c:37:49:9c:d4:02:32:ad:6d:e8:
                    16:0f:7f:c0:ff:d4:2b:9f:7c:d1:8e:67:5e:79:46:
                    81:00:03:47:1d:dd:81:0d:dc:ca:03:e1:9c:a7:d8:
                    6d:ed:12:f9:1c:fb:63:df:91:03:84:a1:55:5b:75:
                    3c:b5:1e:80:fd:3b:9f:81:08:81:db:43:60:8f:14:
                    53:6b:f4:15:f2:db:f1:ba:ab:be:2d:ed:80:f3:6e:
                    26:e8:e2:06:36:38:3e:b7:1c:02:36:9f:01:cd:93:
                    5a:cc:d9:3d:b5:99:5f:04:ba:ea:e9:9b:72:46:98:
                    62:95:9f:2a:ad:82:81:b5:99:2c:ba:5f:79:60:48:
                    5e:9d:db:89:d6:2b:10:f2:78:c5:9e:42:e2:b3:1d:
                    36:1f:64:94:12:97:08:8c:ae:11:6e:01:db:58:b8:
                    68:43:d0:52:e7:6b:16:12:1c:33:cf:cf:44:4b:54:
                    8b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9B:57:25:9C:F4:B5:77:E4:00:DC:E4:0C:42:C8:36:2B:D7:1F:77
            X509v3 Authority Key Identifier:
                keyid:93:20:ED:01:88:81:BB:02:C8:2D:EA:13:20:D6:89:79:B8:68:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b57ec865ac261e0ae36d05374102c7827e41e4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2356873-54df-4a2d-8734-524b0d50fda2/c98e48da53f168ee416f318bc6630671eb275265.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d2356873-54df-4a2d-8734-524b0d50fda2/5b57ec865ac261e0ae36d05374102c7827e41e4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:38:05:31:b3:79:dc:4a:43:06:74:d7:a7:01:7c:b9:c9:f1:
         4b:65:b9:68:59:8c:f2:68:db:5a:8f:5a:05:1e:3c:98:2e:37:
         39:64:79:f1:d0:ae:20:2e:39:c0:58:3d:bf:08:3e:3b:d2:7c:
         fd:80:53:d2:4c:88:1b:ea:24:f7:4f:64:a7:0c:b6:d5:91:bb:
         73:d6:4a:35:dc:ca:fd:aa:8d:c1:d7:f7:13:cd:af:c0:56:9d:
         e8:43:da:f7:9a:80:c4:f9:c2:b1:b0:a7:14:bd:58:5a:f5:52:
         c1:68:50:28:7e:b8:4b:f1:c1:56:44:64:97:e3:66:13:30:89:
         d9:59:a0:fe:75:14:2d:6a:00:68:d4:ee:23:8a:0d:79:d0:27:
         d5:4a:a6:ea:86:69:c2:8e:7b:40:0f:41:e2:d5:4a:f5:de:f9:
         4e:18:0a:30:19:30:9d:85:90:fe:55:fb:eb:6d:26:eb:2b:a8:
         c8:5f:4f:f9:b4:5f:e4:55:ee:5f:3a:f6:f1:34:6f:0a:a5:28:
         21:6c:37:08:20:37:fe:ea:96:44:95:f4:e3:d1:77:66:c4:72:
         f5:5f:0f:8f:63:c6:e3:d0:17:ba:16:1b:0c:4d:95:22:45:87:
         b7:db:ae:42:b1:c6:71:58:e1:8d:01:29:35:79:63:5c:24:83:
         c7:4a:24:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----