Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/60a0eb94c976613ddd601e3273555cad784a34be.roa
File:                     60a0eb94c976613ddd601e3273555cad784a34be.roa (raw, json)
Hash identifier:          1/bKiekCJCQ8BH6wh8k8MwRO6/aPXM1NH1aIYBWEZZQ=
Subject key identifier:   10:C9:84:AA:0F:8A:8D:3C:1B:9C:E4:96:5F:C8:DA:C2:C2:18:B6:11
Certificate issuer:       /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial:       191833
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/60a0eb94c976613ddd601e3273555cad784a34be.roa
Signing time:             Mon 30 May 2022 11:43:00 +0000
ROA not before:           Mon 30 May 2022 03:00:00 +0000
ROA not after:            Tue 31 Dec 2024 03:00:00 +0000
asID:                     262182
IP address blocks:        190.98.168.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1644595 (0x191833)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
        Validity
            Not Before: May 30 03:00:00 2022 GMT
            Not After : Dec 31 03:00:00 2024 GMT
        Subject: CN=60a0eb94c976613ddd601e3273555cad784a34be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bc:85:fd:9e:e5:11:a0:c8:50:8a:39:77:64:
                    35:0b:c6:2c:b3:a9:b5:e2:98:67:d5:99:5c:67:7e:
                    8e:a2:99:79:d0:ad:34:31:62:aa:45:ce:b0:5b:1e:
                    37:c1:29:a8:7a:a9:48:49:7e:c8:68:38:13:78:5a:
                    eb:83:df:49:bc:25:b1:67:7a:11:7d:cf:e4:dd:a5:
                    76:5a:90:8f:ca:28:73:38:c5:67:d9:ad:c2:d4:4a:
                    88:e8:44:e1:f8:13:b9:55:de:c0:23:f8:45:59:7b:
                    c4:98:28:36:75:35:27:67:ee:41:29:ad:f4:ab:e6:
                    d4:fe:38:30:79:71:95:94:92:5d:0a:8f:e6:14:e4:
                    c8:50:bc:5e:ce:17:8b:43:8c:cf:c5:bd:ec:25:3b:
                    5f:e1:7c:a5:8e:3e:98:75:d5:76:4d:80:29:8b:b3:
                    12:69:70:b4:6c:d9:5d:a7:15:9d:fb:e2:67:74:26:
                    69:dd:e9:21:14:b1:e7:41:81:7f:83:c1:4a:ca:9e:
                    94:b7:b3:ae:cf:1a:bd:88:c0:88:c5:0d:dc:e4:46:
                    f8:0b:2d:1d:22:2f:78:e7:1f:9a:f7:4a:4f:77:a6:
                    a7:8c:a6:b2:c2:9a:23:1d:74:79:93:3a:9f:dc:e2:
                    70:83:65:4d:40:13:31:b6:76:28:74:2f:37:5d:2c:
                    9a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C9:84:AA:0F:8A:8D:3C:1B:9C:E4:96:5F:C8:DA:C2:C2:18:B6:11
            X509v3 Authority Key Identifier:
                keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/60a0eb94c976613ddd601e3273555cad784a34be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:b7:04:88:bf:e2:ff:a7:66:c3:c9:1d:b1:87:46:b9:5e:36:
         10:57:17:ea:22:db:77:c2:a3:36:aa:a1:77:c6:89:67:51:0e:
         81:9c:a8:b9:56:7a:3f:f1:fc:44:f4:a1:9f:7d:75:d3:84:b2:
         f4:01:ba:79:f5:9e:0c:a6:fd:ab:3f:d5:e6:0d:81:98:f9:68:
         09:49:c8:c3:31:fb:a7:8a:06:62:83:b1:12:d2:14:e6:e0:fb:
         04:5e:93:11:e6:a5:44:27:93:10:01:f9:10:0b:7d:38:bf:af:
         41:a8:e9:6b:77:ea:3c:1e:a8:d8:57:fb:cb:76:aa:fe:7a:22:
         9b:ee:48:8a:06:92:7f:d1:b6:e8:77:23:45:3c:89:52:ac:e1:
         09:bf:b1:ea:d3:ab:8a:b2:5d:2b:fa:b1:2e:98:20:08:5e:a0:
         02:f0:e4:c4:05:f9:f1:19:81:db:35:4d:73:62:ea:c6:7c:61:
         c6:49:54:2a:d9:31:b7:50:fa:87:ff:dd:d4:53:36:7e:61:25:
         07:d0:50:d9:e1:7b:1b:40:57:2e:d9:74:e0:3c:a5:88:29:79:
         1c:c7:dc:ef:a8:59:f2:ce:7e:f9:48:35:04:34:47:17:f3:97:
         86:4c:73:f2:4a:1f:c2:9a:25:54:d3:b8:87:14:12:83:a5:9e:
         d3:a3:cd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----