Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/8873be699d6fbe4e437bb5a8d3ef43f0e3d7f9cf.roa
File:                     8873be699d6fbe4e437bb5a8d3ef43f0e3d7f9cf.roa (raw, json)
Hash identifier:          DZU5CsUDbW5g5SIZIY3fSwQkkVVSg1S6iFRPNjdNVgk=
Subject key identifier:   85:ED:FA:26:5B:44:83:26:B7:D0:AA:97:23:63:08:C1:4B:CA:51:CE
Certificate issuer:       /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial:       18A6DF
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/8873be699d6fbe4e437bb5a8d3ef43f0e3d7f9cf.roa
Signing time:             Wed 11 May 2022 20:53:34 +0000
ROA not before:           Wed 11 May 2022 03:00:00 +0000
ROA not after:            Sat 11 May 2024 03:00:00 +0000
asID:                     28075
IP address blocks:        190.113.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1615583 (0x18a6df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
        Validity
            Not Before: May 11 03:00:00 2022 GMT
            Not After : May 11 03:00:00 2024 GMT
        Subject: CN=8873be699d6fbe4e437bb5a8d3ef43f0e3d7f9cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2e:b1:aa:ce:1a:b9:ca:45:45:e4:0d:41:46:
                    71:26:db:0a:b8:dc:6f:d8:ff:9f:b6:b0:19:6a:d3:
                    cc:61:09:e7:06:cb:cc:96:a7:ef:34:4d:5d:fb:57:
                    b8:21:38:99:a3:80:ca:f3:55:9f:1c:fb:e7:a5:c7:
                    26:d5:e3:40:34:66:d7:4d:00:e4:87:cd:65:90:11:
                    7d:ea:7e:d8:a9:df:7c:b8:7a:ce:8d:bf:55:5c:14:
                    b4:91:12:db:95:5d:7b:27:22:1a:71:fc:ad:5d:ca:
                    33:64:1e:24:48:4c:5d:b3:3c:21:ea:b8:ab:65:7d:
                    c3:63:6e:77:93:db:e9:c8:f9:18:30:82:37:3c:83:
                    b6:6d:0f:61:0d:3e:b7:9c:dd:6b:a1:1b:3b:47:e1:
                    bb:8d:d2:b6:8a:d4:93:c2:f9:e1:ef:fa:97:c5:bb:
                    dd:1b:e4:6b:66:64:6e:25:4b:d5:54:2e:5e:91:96:
                    a7:d3:81:00:c6:fc:cc:c8:80:60:bd:68:c7:43:da:
                    70:bf:b7:91:5f:60:b0:05:4b:a1:a6:90:21:b3:22:
                    cb:31:07:8a:b2:88:fd:62:c5:37:ec:84:7f:07:24:
                    89:5a:be:3f:ed:56:6a:32:7e:d2:84:63:1a:57:5e:
                    8f:3c:5f:35:a7:35:ea:70:9c:cd:cc:2a:21:7d:f0:
                    c5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:ED:FA:26:5B:44:83:26:B7:D0:AA:97:23:63:08:C1:4B:CA:51:CE
            X509v3 Authority Key Identifier:
                keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/8873be699d6fbe4e437bb5a8d3ef43f0e3d7f9cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:a8:89:28:3b:7a:bd:1b:d1:17:11:64:8b:16:24:54:4d:3b:
         02:6a:f0:cb:3b:2c:db:54:b8:87:52:07:59:49:cc:89:d3:a9:
         b3:e2:97:37:72:95:40:55:88:6d:5b:2c:e7:e5:95:ec:c1:d9:
         27:30:80:de:86:b1:60:17:69:1d:ee:51:95:5a:7a:f8:ea:0a:
         46:2f:df:b4:80:4a:fb:a6:3d:95:17:0c:bd:8a:64:4b:ea:e7:
         61:78:5d:8f:3b:22:d0:23:2c:da:65:e1:95:8e:2b:86:da:f6:
         fe:18:62:78:fb:99:d5:6e:c5:0c:69:bb:3e:0c:aa:57:0d:b2:
         60:b7:bf:fa:26:b6:db:3f:e7:c4:54:1d:f4:8b:80:1d:19:48:
         73:0a:cd:40:52:89:48:10:c5:1b:99:fb:64:3f:fb:67:6b:a7:
         dc:95:e5:b0:06:13:c5:66:72:79:80:57:17:9e:4a:40:87:53:
         a6:2b:25:af:f0:ad:8e:79:93:9a:b3:44:f4:90:25:06:c8:c7:
         73:38:e4:1b:09:6f:72:a8:58:aa:38:f6:1e:18:3c:4e:90:21:
         0f:29:28:13:a2:8a:37:bf:0a:a6:bb:d0:e5:59:28:7f:02:14:
         29:9f:c8:c6:12:fc:2b:48:df:b9:85:60:80:23:da:18:cc:47:
         58:21:d9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----