Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/202533431600f6f74fdb84d25d1b37ef8d6165d8.roa
File:                     202533431600f6f74fdb84d25d1b37ef8d6165d8.roa (raw, json)
Hash identifier:          DWMpmy9D4h6HgoVJufeQUnx3Ik1eT21VCPHB8ZQB7y0=
Subject key identifier:   53:F3:44:3A:92:0C:98:66:A0:F0:2E:E1:57:E7:D9:3E:F8:F0:74:05
Certificate issuer:       /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial:       0DF2E5
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/202533431600f6f74fdb84d25d1b37ef8d6165d8.roa
Signing time:             Wed 24 Mar 2021 14:32:25 +0000
ROA not before:           Wed 24 Mar 2021 14:32:25 +0000
ROA not after:            Tue 24 Mar 2026 14:32:25 +0000
asID:                     28036
IP address blocks:        190.98.136.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 914149 (0xdf2e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
        Validity
            Not Before: Mar 24 14:32:25 2021 GMT
            Not After : Mar 24 14:32:25 2026 GMT
        Subject: CN=202533431600f6f74fdb84d25d1b37ef8d6165d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:39:dd:7d:37:44:ca:fe:e2:73:73:c8:db:b6:
                    7f:13:e9:da:85:1e:96:be:9b:7e:1c:41:38:dd:fd:
                    4a:d7:a6:e8:71:dd:4b:7f:6b:03:23:f9:f8:1f:3f:
                    3d:18:8d:d4:41:82:a3:14:ae:ad:d0:78:c3:ac:35:
                    7b:26:98:b9:bd:cd:5c:c5:41:ff:ea:a3:72:8e:56:
                    e1:76:f2:ff:13:12:25:c0:1e:05:73:e4:68:43:88:
                    6e:ac:43:79:fb:ca:26:79:9f:25:e3:33:5b:55:fa:
                    6b:80:38:7d:9f:64:80:14:b9:14:80:f4:3e:7a:d2:
                    a0:e1:ce:f9:a2:09:7c:af:9c:de:51:79:51:67:93:
                    3e:dd:a0:09:bb:99:f2:c9:ff:ee:1a:21:33:a4:36:
                    33:1c:15:cd:b0:00:e0:b4:a0:d1:ac:6d:5d:f2:a8:
                    c9:95:5a:a2:71:bf:fb:6c:1b:eb:34:4b:4a:cf:09:
                    f0:18:68:d0:38:66:bf:26:6f:e5:91:a6:ff:c2:5b:
                    1b:b0:a6:46:19:7e:dd:da:3e:dd:a5:94:e7:9c:fe:
                    16:ee:5f:c6:ce:5b:f2:d3:b7:0d:f1:6e:a2:80:91:
                    2b:d2:ef:d9:e9:50:f3:7f:21:7b:55:cf:de:14:c5:
                    27:e5:80:32:54:75:98:eb:9c:33:cf:00:54:65:57:
                    33:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F3:44:3A:92:0C:98:66:A0:F0:2E:E1:57:E7:D9:3E:F8:F0:74:05
            X509v3 Authority Key Identifier:
                keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/202533431600f6f74fdb84d25d1b37ef8d6165d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:a9:02:d9:f1:8f:8f:6c:4d:c2:6b:f8:b8:e0:51:66:28:fb:
         6f:1b:2d:b6:f7:10:4e:24:e4:7a:bc:9d:2a:82:d4:97:07:74:
         fc:19:dc:53:b3:a1:3f:04:c3:62:c7:6d:e6:42:44:09:5e:38:
         95:6b:b0:92:4d:79:75:b1:55:3f:99:f1:07:4a:06:62:61:e9:
         5d:a4:60:29:20:af:b5:a0:e3:ae:81:bb:12:bb:4f:62:74:06:
         08:36:ba:1f:42:72:9c:34:04:a9:84:cc:92:f3:d5:6a:f4:7a:
         02:a6:e2:ea:ce:6d:73:ab:ac:2c:e9:4a:f0:de:0e:f8:88:6d:
         d4:aa:1e:8d:18:57:4c:5c:34:f3:5d:f7:fb:1a:c2:eb:90:90:
         2d:6a:3b:ba:1b:15:54:62:e2:30:66:c1:62:10:87:97:38:ea:
         b4:d0:a7:3f:36:b7:86:ae:1d:44:d8:a8:4a:29:e9:8c:84:e3:
         93:00:dc:6b:30:ac:01:bd:76:74:97:73:7c:ba:86:56:8f:e1:
         09:c5:75:99:dd:86:4e:90:78:eb:e7:d6:d9:d3:56:33:10:30:
         fa:98:80:77:14:10:d3:9e:1c:65:49:19:28:71:4c:90:cf:29:
         15:ef:c3:e0:f7:fb:34:b4:7a:41:f1:a1:fb:f1:2f:70:c2:37:
         26:b9:f0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----