Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/0d513b33517746f6ffb142ba17f84871b70ba7cc.roa
File:                     0d513b33517746f6ffb142ba17f84871b70ba7cc.roa (raw, json)
Hash identifier:          wYC8JTBOYI2YbwdZCdA6oI/HvBYwfnhs3E87mJpZiMQ=
Subject key identifier:   F8:FE:3C:5C:8D:F2:19:0D:9E:0D:F1:73:F4:C5:11:F5:E8:0C:CC:90
Certificate issuer:       /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial:       19B62D
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/0d513b33517746f6ffb142ba17f84871b70ba7cc.roa
Signing time:             Wed 08 Jun 2022 16:17:20 +0000
ROA not before:           Wed 08 Jun 2022 03:00:00 +0000
ROA not after:            Sat 08 Jun 2024 03:00:00 +0000
asID:                     138915
IP address blocks:        190.98.163.0/25 maxlen: 25

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1685037 (0x19b62d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
        Validity
            Not Before: Jun  8 03:00:00 2022 GMT
            Not After : Jun  8 03:00:00 2024 GMT
        Subject: CN=0d513b33517746f6ffb142ba17f84871b70ba7cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:68:c2:33:de:dc:3f:91:cd:09:0d:d3:88:60:
                    49:f5:74:a4:b2:4e:0d:52:4c:d4:11:5a:73:8a:8c:
                    8d:cf:db:b6:14:2e:3a:9a:b9:72:44:3e:08:05:b4:
                    2e:86:69:54:63:b5:7b:fe:5a:62:9a:65:26:bc:1f:
                    80:f1:2f:15:dc:84:a6:11:78:99:58:7e:1d:c7:da:
                    f4:20:05:38:2b:8b:06:c5:d3:e6:71:7c:cc:b2:40:
                    36:16:90:56:72:d6:24:4a:7f:a7:65:e4:c6:d7:51:
                    45:ae:1d:6f:3c:9a:3f:62:d9:19:2a:92:84:5c:a8:
                    39:17:83:37:aa:fb:3d:a9:87:c6:26:25:16:3f:f8:
                    65:b7:a7:1a:c4:79:8a:8c:8b:4a:90:33:8d:7e:c5:
                    17:6f:cd:cc:d9:5b:02:5f:38:82:cf:63:5e:75:7a:
                    f0:d0:88:66:43:38:92:2c:86:9a:c6:b4:40:7f:87:
                    df:97:7a:02:78:58:05:e0:9c:82:86:2a:f0:ee:8a:
                    f7:44:88:37:23:ca:f2:63:9c:16:f6:d5:06:07:5a:
                    e5:71:46:10:65:73:32:d7:15:16:4f:d7:3c:fd:d3:
                    87:c3:c9:c0:e3:f5:a6:31:49:53:15:83:5c:73:e4:
                    e5:d3:48:39:9d:2f:26:12:c0:1a:f9:2c:1c:54:d0:
                    25:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FE:3C:5C:8D:F2:19:0D:9E:0D:F1:73:F4:C5:11:F5:E8:0C:CC:90
            X509v3 Authority Key Identifier:
                keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/0d513b33517746f6ffb142ba17f84871b70ba7cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.163.0/25

    Signature Algorithm: sha256WithRSAEncryption
         35:95:e7:23:8e:a2:44:76:47:67:62:d0:92:20:be:16:65:bd:
         a3:01:39:7e:82:05:ff:d5:4d:73:87:b7:79:a2:79:d5:55:7e:
         35:cd:24:9b:30:83:b8:7c:46:09:ce:c8:a4:3b:c0:8b:76:c7:
         2b:d5:63:b5:17:fe:1a:60:e5:43:99:8a:5a:41:0c:5c:80:65:
         8b:85:46:08:ac:d6:66:0b:b4:41:25:5c:cb:1e:c9:1c:b0:de:
         76:87:91:d8:df:e1:2b:e2:6e:9e:f2:d5:52:3d:bb:47:55:f1:
         42:62:bf:df:54:d1:3d:c4:93:3f:4d:23:19:2b:8a:96:9e:ab:
         b4:b6:b0:97:f6:61:4c:61:8a:e7:0d:2f:78:f5:51:3f:b3:48:
         99:47:47:b5:d2:eb:dd:21:cd:a1:b2:22:4b:a8:39:cb:99:04:
         31:a9:6e:8a:28:1f:6b:4c:8b:51:5f:1a:24:e7:1f:1f:85:58:
         9d:95:e7:58:83:87:06:d9:13:f2:86:71:28:cb:eb:55:4b:79:
         71:2a:f3:e3:5c:76:16:80:e7:4f:7b:2a:42:3e:6a:94:e5:20:
         9d:77:54:77:6b:d8:b2:e9:8d:bb:8a:d6:e0:52:2b:79:b0:a4:
         a2:c9:f3:22:18:46:14:8d:3d:44:34:33:da:da:1f:fd:06:bc:
         3a:c1:8c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----