Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/93af25b4ae55563ba38e616f4848089b2b003a79.roa
File:                     93af25b4ae55563ba38e616f4848089b2b003a79.roa (raw, json)
Hash identifier:          F5nxDKszny4cwNYafmsPtsqn7q1LreBA9wgJJuuZpHo=
Subject key identifier:   3A:4C:02:40:55:2F:61:F5:52:21:7D:7C:DE:74:FE:8E:C8:A7:46:78
Certificate issuer:       /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial:       189CF9
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/93af25b4ae55563ba38e616f4848089b2b003a79.roa
Signing time:             Thu 12 May 2022 11:30:01 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     262202
IP address blocks:        190.98.184.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1613049 (0x189cf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=93af25b4ae55563ba38e616f4848089b2b003a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:de:f9:3f:6a:7f:c9:e7:09:71:90:83:a7:26:
                    94:14:1b:a5:d5:d7:06:12:98:f7:27:fc:ed:f5:47:
                    71:4b:41:db:64:8b:43:d3:a1:5b:f7:09:47:60:a7:
                    71:65:1e:f5:59:84:b7:90:5e:a5:42:a5:cc:11:7a:
                    bd:d9:5b:88:46:c1:d6:57:b6:2f:91:6c:db:98:f6:
                    94:fa:93:55:69:53:81:ce:47:4b:85:91:c6:6b:fb:
                    32:31:1f:3c:9b:87:53:86:91:1a:87:3b:d0:ea:57:
                    e8:5f:76:46:d1:b6:09:fc:91:bc:00:e4:66:72:87:
                    70:c6:6f:f5:20:fd:27:e3:29:74:40:43:fe:ad:83:
                    e8:55:e4:ec:cb:e8:65:8e:77:26:8b:61:e5:d3:f2:
                    aa:1d:a0:5d:63:b5:8e:e0:ba:d7:c5:a7:f4:66:1c:
                    58:f6:6a:54:4b:a9:ab:7d:75:e2:6e:68:a0:a2:7b:
                    1b:16:8d:27:a8:4b:ed:16:75:ae:c8:85:31:1b:4c:
                    ed:33:a1:45:c2:99:4c:a6:5d:8f:68:54:c6:4d:94:
                    de:af:03:16:02:66:5a:96:6f:c7:86:68:f9:59:4e:
                    ff:d0:ac:98:2c:d9:f6:46:14:7b:1c:09:7b:0b:69:
                    8b:46:49:e6:d9:d9:92:c6:7d:cf:b1:eb:c7:9f:58:
                    88:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4C:02:40:55:2F:61:F5:52:21:7D:7C:DE:74:FE:8E:C8:A7:46:78
            X509v3 Authority Key Identifier:
                keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/93af25b4ae55563ba38e616f4848089b2b003a79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:d7:83:49:7b:c8:60:8d:b9:b0:02:00:f9:bd:8b:79:85:7d:
         dd:5d:6a:85:c8:6e:e1:8a:c8:49:ef:d3:df:d2:bb:1f:6b:47:
         a0:d9:bb:84:46:4b:4c:d4:b5:17:55:28:a5:05:73:65:fb:3f:
         1c:de:c7:d8:2c:f4:80:ed:56:02:15:66:6f:19:24:35:72:45:
         2b:9b:91:59:7d:bd:3b:e7:41:51:13:f2:e0:17:35:6f:54:89:
         9a:b8:ab:dd:ab:5b:79:09:25:41:ef:aa:43:94:e7:ae:24:72:
         92:c6:9f:51:49:55:26:d0:38:61:de:e7:0e:b5:f0:65:6e:e0:
         05:02:f7:25:08:ca:37:3a:65:46:2e:ee:a0:b5:2d:1d:89:ce:
         fb:31:46:7b:49:25:06:e9:d5:68:04:4c:69:06:0d:7b:fa:a8:
         75:1c:5f:e0:b4:eb:33:bb:92:9d:44:f5:ca:10:ba:f9:93:ce:
         8d:46:09:73:db:3e:3c:b3:cd:57:e5:2f:ba:15:b6:6b:73:e4:
         7d:e9:91:bc:31:f4:08:33:c1:23:77:2c:d7:e9:ea:dc:32:33:
         c0:7e:58:bb:ed:b5:dd:10:79:1f:6a:0c:95:a3:08:01:1e:e6:
         1c:6b:bb:e7:aa:20:82:83:ae:9a:4f:20:a7:c8:43:42:da:93:
         b2:b5:99:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----