Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/da1cc7d0-3753-465c-9128-0a4d1a25aaa3/c835192834339f84d9fc072a6d864b71c1c80074.roa
File:                     c835192834339f84d9fc072a6d864b71c1c80074.roa (raw, json)
Hash identifier:          nErCD2Ovyufymdy2TIqSmUFjx/nB2Wncb3xqMlSobKU=
Subject key identifier:   0C:FF:A5:F9:5B:0B:30:0B:E7:C8:2C:C2:F5:19:D5:FB:93:2D:7F:D1
Certificate issuer:       /CN=d2ba642acd3effb827907bb587a1c8f62a3e1160
Certificate serial:       1106A0
Authority key identifier: 43:C2:B8:FB:38:CB:FE:62:07:02:CC:00:9D:36:4C:1F:37:2F:76:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2ba642acd3effb827907bb587a1c8f62a3e1160.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/da1cc7d0-3753-465c-9128-0a4d1a25aaa3/c835192834339f84d9fc072a6d864b71c1c80074.roa
Signing time:             Wed 08 Jun 2022 16:42:31 +0000
ROA not before:           Wed 08 Jun 2022 03:00:00 +0000
ROA not after:            Sat 08 Jun 2024 03:00:00 +0000
asID:                     395161
IP address blocks:        190.120.228.0/22 maxlen: 22
                          2803:d5e0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1115808 (0x1106a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2ba642acd3effb827907bb587a1c8f62a3e1160
        Validity
            Not Before: Jun  8 03:00:00 2022 GMT
            Not After : Jun  8 03:00:00 2024 GMT
        Subject: CN=c835192834339f84d9fc072a6d864b71c1c80074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:76:38:6e:fd:ef:bc:3d:60:cb:44:a9:23:8f:
                    25:58:21:6b:6b:55:38:e9:77:b9:ac:83:71:cb:c2:
                    f3:d6:b8:cc:30:81:ee:2b:66:b1:31:29:b6:ef:ec:
                    ca:33:c3:c0:2d:76:54:eb:4b:e5:da:11:c9:56:40:
                    2b:24:9d:54:f6:af:67:66:7d:e6:83:ea:29:a2:df:
                    41:8c:29:6c:19:0f:7c:bb:d4:5a:fc:5f:87:25:45:
                    aa:80:27:61:7b:76:0b:d7:51:d0:cf:c6:82:7f:13:
                    3c:93:3c:9f:6f:55:8b:c8:d8:85:8b:17:a1:73:09:
                    5b:1a:67:73:54:7f:48:8e:9a:cb:39:3c:dc:31:69:
                    98:47:a9:eb:12:0a:b7:a9:13:af:13:e7:02:62:c3:
                    c1:64:bb:a1:91:16:5e:dd:68:5a:8a:23:ae:6b:88:
                    e4:82:db:14:f6:3f:40:a4:1d:89:69:24:00:97:39:
                    f2:4a:df:a9:a5:00:66:23:6c:a4:d8:11:92:3f:bb:
                    ec:e2:08:1b:e1:02:22:15:96:12:4a:9c:c5:18:49:
                    1f:6e:00:59:b1:13:af:d6:27:21:29:d3:88:5f:ec:
                    5b:f2:49:30:80:11:de:86:c9:a6:d0:15:30:6f:77:
                    78:ef:a2:c1:d2:8b:4d:fc:d8:4b:44:70:23:3c:2c:
                    80:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FF:A5:F9:5B:0B:30:0B:E7:C8:2C:C2:F5:19:D5:FB:93:2D:7F:D1
            X509v3 Authority Key Identifier:
                keyid:43:C2:B8:FB:38:CB:FE:62:07:02:CC:00:9D:36:4C:1F:37:2F:76:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2ba642acd3effb827907bb587a1c8f62a3e1160.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/da1cc7d0-3753-465c-9128-0a4d1a25aaa3/c835192834339f84d9fc072a6d864b71c1c80074.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/da1cc7d0-3753-465c-9128-0a4d1a25aaa3/d2ba642acd3effb827907bb587a1c8f62a3e1160.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.228.0/22
                IPv6:
                  2803:d5e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:2c:0f:91:98:e5:91:5a:b2:38:03:ab:12:7e:2b:23:dd:63:
         6a:38:e1:b4:d8:0c:f5:08:c5:32:a3:29:1d:b9:03:6a:18:41:
         99:a2:fc:1c:62:5e:32:eb:03:5f:81:ea:c4:bc:fb:72:fb:23:
         ab:cb:c0:1a:59:4f:ed:30:61:ab:7e:50:68:08:1d:64:d8:43:
         64:19:94:e6:41:82:29:73:82:5e:0f:3d:43:53:4e:f0:b8:f1:
         14:ca:ea:d5:ce:68:6e:5a:00:2f:ce:f6:11:08:6c:0b:17:b1:
         81:f3:c7:96:b7:81:c6:91:67:86:6c:fd:83:d8:2a:a3:be:74:
         a9:cb:57:6e:6b:60:9d:2e:ea:e3:4c:68:c2:d1:24:60:82:ee:
         37:02:c0:a9:5e:0d:71:dd:66:25:31:8b:32:1a:55:43:a2:8f:
         b5:e3:7c:cf:ce:bb:95:56:11:7d:61:51:2a:cb:9a:ab:e6:f1:
         52:9b:2c:2a:ff:7b:76:b0:8d:f3:5e:52:13:2c:5a:bc:b8:b3:
         18:b7:84:7a:46:89:eb:65:af:b7:d0:85:1f:9c:3f:03:0f:1a:
         70:42:17:f8:a2:e0:40:96:e4:d6:57:5e:7c:16:17:89:09:7a:
         f9:e1:3d:8f:d1:57:6c:1c:be:9f:d5:98:41:ee:45:18:ec:41:
         da:c4:3d:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDEQagMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQy
YmE2NDJhY2QzZWZmYjgyNzkwN2JiNTg3YTFjOGY2MmEzZTExNjAwHhcNMjIwNjA4
MDMwMDAwWhcNMjQwNjA4MDMwMDAwWjAzMTEwLwYDVQQDEyhjODM1MTkyODM0MzM5
Zjg0ZDlmYzA3MmE2ZDg2NGI3MWMxYzgwMDc0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnXY4bv3vvD1gy0SpI48lWCFra1U46Xe5rINxy8Lz1rjMMIHu
K2axMSm27+zKM8PALXZU60vl2hHJVkArJJ1U9q9nZn3mg+opot9BjClsGQ98u9Ra
/F+HJUWqgCdhe3YL11HQz8aCfxM8kzyfb1WLyNiFixehcwlbGmdzVH9IjprLOTzc
MWmYR6nrEgq3qROvE+cCYsPBZLuhkRZe3WhaiiOua4jkgtsU9j9ApB2JaSQAlzny
St+ppQBmI2yk2BGSP7vs4ggb4QIiFZYSSpzFGEkfbgBZsROv1ichKdOIX+xb8kkw
gBHehsmm0BUwb3d476LB0otN/NhLRHAjPCyA4wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFAz/pflbCzAL58gswvUZ1fuTLX/RMB8GA1UdIwQYMBaAFEPCuPs4y/5iBwLM
AJ02TB83L3YjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDJiYTY0
MmFjZDNlZmZiODI3OTA3YmI1ODdhMWM4ZjYyYTNlMTE2MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGExY2M3ZDAtMzc1My00NjVjLTkxMjgtMGE0ZDFh
MjVhYWEzL2M4MzUxOTI4MzQzMzlmODRkOWZjMDcyYTZkODY0YjcxYzFjODAwNzQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYTFjYzdkMC0zNzUzLTQ2NWMtOTEyOC0wYTRk
MWEyNWFhYTMvZDJiYTY0MmFjZDNlZmZiODI3OTA3YmI1ODdhMWM4ZjYyYTNlMTE2
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAr545DANBAIAAjAHAwUAKAPV4DANBgkqhkiG9w0BAQsFAAOC
AQEATywPkZjlkVqyOAOrEn4rI91jajjhtNgM9QjFMqMpHbkDahhBmaL8HGJeMusD
X4HqxLz7cvsjq8vAGllP7TBhq35QaAgdZNhDZBmU5kGCKXOCXg89Q1NO8LjxFMrq
1c5obloAL872EQhsCxexgfPHlreBxpFnhmz9g9gqo750qctXbmtgnS7q40xowtEk
YILuNwLAqV4Ncd1mJTGLMhpVQ6KPteN8z867lVYRfWFRKsuaq+bxUpssKv97drCN
815SEyxavLizGLeEekaJ62Wvt9CFH5w/Aw8acEIX+KLgQJbk1ldefBYXiQl6+eE9
j9FXbBy+n9WYQe5FGOxB2sQ9gQ==
-----END CERTIFICATE-----