Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/a12119cc070cd6c9c2f5dbeda6e9628cf5430aba.roa
File:                     a12119cc070cd6c9c2f5dbeda6e9628cf5430aba.roa (raw, json)
Hash identifier:          ORQD4g5F3N/n+Y+e0V5x0RE+C8yeVi/yop7Hvaykn+o=
Subject key identifier:   D4:F8:63:6E:25:BB:C3:37:37:73:97:21:93:71:36:3C:E3:3C:37:2D
Certificate issuer:       /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial:       013F74
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/a12119cc070cd6c9c2f5dbeda6e9628cf5430aba.roa
Signing time:             Sun 14 Nov 2021 14:47:14 +0000
ROA not before:           Sun 14 Nov 2021 03:00:00 +0000
ROA not after:            Tue 14 Nov 2023 03:00:00 +0000
asID:                     27866
IP address blocks:        190.52.128.0/18 maxlen: 18

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81780 (0x13f74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
        Validity
            Not Before: Nov 14 03:00:00 2021 GMT
            Not After : Nov 14 03:00:00 2023 GMT
        Subject: CN=a12119cc070cd6c9c2f5dbeda6e9628cf5430aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a1:92:8d:9a:60:ad:05:ab:f6:39:69:26:0f:
                    ad:72:50:72:c4:b2:b5:82:aa:07:d7:84:3e:5e:14:
                    1b:ac:38:c5:f2:81:2c:7e:4d:4e:4a:bd:8f:24:10:
                    9a:5a:2c:6f:d8:bd:11:dd:d1:e1:b6:7f:0d:16:6a:
                    35:47:5a:25:8c:17:ce:a6:a9:1b:70:71:0a:1b:4a:
                    d7:12:34:f0:7f:61:b9:61:23:f5:96:01:c6:03:13:
                    36:c2:51:9f:8c:de:42:c6:87:1c:72:cb:4b:59:fb:
                    21:82:d8:bf:3b:3b:f3:4a:0d:a6:fa:8d:9a:e4:03:
                    e4:bf:04:1c:ba:a4:98:2d:ad:1e:8a:b0:cd:86:4c:
                    32:47:1e:5c:22:51:1e:14:6e:36:8c:05:9e:50:91:
                    10:27:fc:6c:dc:2e:ee:67:e1:8d:8b:c5:f0:8e:c3:
                    67:88:ac:9d:2c:51:c6:b9:4e:68:4a:77:cd:de:44:
                    ed:e6:89:21:83:f6:b2:9f:d7:ad:46:92:8e:61:8d:
                    2c:98:b1:74:a8:b2:0a:b5:10:8d:4c:16:32:e8:89:
                    c9:7f:d9:32:12:de:84:e9:29:33:6a:ec:0b:79:5d:
                    20:6c:61:29:7e:f2:be:a7:9f:91:6c:2f:cd:eb:86:
                    5e:bf:4a:7d:1b:01:c0:2f:10:97:3a:a2:af:32:02:
                    ab:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F8:63:6E:25:BB:C3:37:37:73:97:21:93:71:36:3C:E3:3C:37:2D
            X509v3 Authority Key Identifier:
                keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/a12119cc070cd6c9c2f5dbeda6e9628cf5430aba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         56:d0:74:92:b7:f4:8b:4b:65:75:15:9a:54:05:64:4a:a6:7f:
         35:25:6a:e6:4f:73:ac:ad:45:a6:93:9d:88:71:fb:76:aa:06:
         47:bf:fe:df:ab:21:41:83:58:c7:d3:27:a4:3c:62:46:45:7d:
         72:0d:6c:19:99:86:ca:55:0c:e3:dd:eb:b7:4d:50:8e:e0:64:
         20:16:b9:46:34:da:73:20:90:e9:4d:76:5e:e5:e8:26:33:75:
         c6:1b:02:6a:e2:9b:56:47:f6:de:b9:b0:a3:7a:69:9e:a2:c5:
         83:77:d8:2c:0f:fd:c2:54:18:6b:2c:7a:25:3f:65:5b:19:a2:
         ab:de:a8:1f:79:77:a0:91:c7:8a:14:6e:8f:fa:66:30:b7:98:
         a9:ef:78:a0:a3:80:ed:f7:30:54:eb:bf:34:09:2c:99:f1:8d:
         9f:c4:3d:b6:7c:26:da:9d:ca:3a:0f:9c:9e:d5:33:91:9c:80:
         bb:18:bd:d8:80:a3:6d:35:ac:a4:cc:a5:ce:62:48:57:8c:04:
         f1:bd:da:bc:d7:91:6a:52:b8:fc:be:83:a5:29:af:84:cc:e1:
         bc:45:36:cd:d0:90:6b:ab:da:f6:13:dc:7b:be:96:95:ba:62:
         9c:65:a1:32:10:18:08:45:1d:19:26:89:4a:eb:78:96:65:ec:
         16:1b:0e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----