Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/01b7a1abeb9aacbf40b3eefb659bda81d703537b.roa
File:                     01b7a1abeb9aacbf40b3eefb659bda81d703537b.roa (raw, json)
Hash identifier:          s24BBOqC/7LsYxajX0Soq6tJf2lKBERJ1xHJmRDI5u4=
Subject key identifier:   4A:19:7B:5C:30:A1:13:2B:B5:95:A3:B2:C7:DE:E5:28:69:90:24:D8
Certificate issuer:       /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial:       18970A
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/01b7a1abeb9aacbf40b3eefb659bda81d703537b.roa
Signing time:             Thu 12 May 2022 11:29:08 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     262202
IP address blocks:        190.98.182.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1611530 (0x18970a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=01b7a1abeb9aacbf40b3eefb659bda81d703537b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4d:36:08:85:dd:eb:ed:c0:1e:ac:a9:6f:9d:
                    35:59:69:95:7d:e6:ed:86:fd:4d:cd:9b:c7:34:53:
                    59:75:58:a0:dc:da:8c:b6:d5:0d:88:36:72:c4:cf:
                    f0:33:e9:b0:58:d1:6f:1b:8e:03:3f:d1:41:2e:74:
                    43:cd:78:47:b0:e9:8f:e6:e8:ab:6d:6e:81:24:eb:
                    66:e2:a4:f3:3d:c8:18:27:20:5f:3b:7d:d5:ee:0e:
                    d5:35:3c:d2:22:20:98:e1:2b:48:79:93:91:56:00:
                    d3:3b:03:62:78:8a:2d:9c:88:25:83:cd:67:18:30:
                    f2:02:a9:68:5b:37:99:59:f6:f9:73:e9:c9:3d:5e:
                    b6:f4:94:ee:e8:78:ff:fc:1c:35:36:3e:90:78:4a:
                    56:c2:6e:a8:20:e3:ac:ed:0f:19:47:90:cf:ad:63:
                    29:af:4f:71:7b:fb:21:e9:fe:95:79:90:fa:cd:68:
                    cf:6c:32:02:66:17:f1:e7:e1:fc:07:77:52:59:3b:
                    f2:45:2e:8a:48:1e:f8:5a:fa:50:a8:26:80:c2:0d:
                    ed:79:9f:97:92:7c:f0:68:8a:2a:3d:58:bf:0b:63:
                    fe:6f:1d:f2:e4:2b:cd:f6:ac:70:58:c3:1a:03:5e:
                    53:79:a1:12:ec:22:df:ea:54:1f:ff:c1:bb:11:b5:
                    37:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:19:7B:5C:30:A1:13:2B:B5:95:A3:B2:C7:DE:E5:28:69:90:24:D8
            X509v3 Authority Key Identifier:
                keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/01b7a1abeb9aacbf40b3eefb659bda81d703537b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:26:52:8c:f2:9c:69:0b:5f:1f:8d:b1:13:91:31:63:51:8a:
         62:8f:11:ee:d8:89:14:b7:0e:a1:74:87:28:92:56:c7:49:f0:
         99:6f:63:e2:66:b9:89:f9:ad:b0:8b:8a:32:61:29:02:4c:a7:
         4c:3c:00:34:72:6c:75:3e:50:94:99:09:5e:ce:92:cc:76:fc:
         9f:47:4e:f4:87:3e:da:6f:fa:91:1c:61:05:7e:de:37:ad:8e:
         ed:75:52:67:e1:36:cf:01:7b:8e:d7:f7:76:de:70:73:9e:f9:
         5c:b0:37:92:14:49:9b:29:16:e0:4d:8e:b6:a6:9c:c4:d5:6b:
         d9:88:04:cf:bc:a4:28:5a:c8:a6:9a:62:63:5e:68:d9:65:8b:
         d0:e6:9a:7a:ed:1c:ed:1a:a6:82:22:a9:a7:d1:40:10:df:d6:
         0d:7a:15:02:4c:aa:dc:92:e9:72:59:20:33:31:e2:8e:b8:83:
         a6:65:ea:b3:a3:9f:54:e7:87:ee:8f:12:a1:d1:3f:fe:c7:2b:
         db:01:93:04:20:02:3e:a1:91:64:88:7f:57:5e:6c:ba:b7:45:
         a3:69:d1:04:45:39:52:3b:71:ae:12:90:9f:66:72:61:2b:2d:
         74:b5:b8:ab:d7:7f:fe:65:89:3b:bb:5b:ff:e6:36:a8:cb:b0:
         d1:d6:96:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----