Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/19d3e9c0c27abdbe6f34b50f0bcc26fcaba944a9.roa
File:                     19d3e9c0c27abdbe6f34b50f0bcc26fcaba944a9.roa (raw, json)
Hash identifier:          ymSpkjZPhx7c3VbNd/LHLVdP4nTfKGIpBmZMldbj2eE=
Subject key identifier:   FA:D7:2C:30:1D:00:84:E6:0E:4B:C9:95:87:6E:01:9C:62:F6:D3:27
Certificate issuer:       /CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
Certificate serial:       234E1E
Authority key identifier: C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/19d3e9c0c27abdbe6f34b50f0bcc26fcaba944a9.roa
Signing time:             Sat 08 Jul 2023 05:05:13 +0000
ROA not before:           Fri 07 Jul 2023 05:05:13 +0000
ROA not after:            Tue 08 Jul 2025 05:05:13 +0000
asID:                     61461
IP address blocks:        190.124.28.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2313758 (0x234e1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
        Validity
            Not Before: Jul  7 05:05:13 2023 GMT
            Not After : Jul  8 05:05:13 2025 GMT
        Subject: CN=19d3e9c0c27abdbe6f34b50f0bcc26fcaba944a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:52:45:b0:2a:a0:95:fa:d9:d8:ff:c3:3a:3d:
                    59:91:c0:67:c7:d2:67:68:bf:d3:e5:36:f8:2b:28:
                    4f:fd:92:b2:c9:fd:da:22:ca:45:c7:51:96:80:37:
                    ae:60:0c:3f:43:ae:bd:c4:34:62:1d:61:28:1c:95:
                    78:1f:a7:f2:17:9b:72:5c:e4:03:7a:09:3f:4b:ac:
                    67:f5:6a:ea:26:0c:98:c2:c0:79:3f:6a:57:7e:5b:
                    ac:f3:a9:37:87:84:b9:70:5e:5b:62:e7:8c:a7:3d:
                    d3:44:1c:2d:62:c9:a7:cb:35:c9:83:0e:72:70:d4:
                    29:c9:9b:fe:62:e4:f5:ca:24:de:08:bd:bc:e5:d6:
                    a3:77:06:b3:6f:fe:e5:be:ae:a3:38:86:05:4d:5a:
                    bd:0e:89:a0:3c:06:cc:b7:ff:85:b6:1e:a9:c0:41:
                    c1:70:4d:f1:ee:b2:fd:d6:97:08:d3:8f:d7:0a:73:
                    b3:92:37:a9:dd:41:a5:e4:ff:c9:0e:0c:15:bf:9e:
                    e4:6e:37:8f:93:a7:8b:9c:06:07:35:98:03:8e:e9:
                    42:f5:25:54:56:86:f7:c6:c4:14:2c:64:29:30:d5:
                    73:83:41:15:cf:76:d7:f8:19:ca:22:8b:f0:d1:a4:
                    79:fb:38:7e:1e:54:50:3a:50:1f:67:b5:87:ba:a8:
                    f9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D7:2C:30:1D:00:84:E6:0E:4B:C9:95:87:6E:01:9C:62:F6:D3:27
            X509v3 Authority Key Identifier:
                keyid:C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/19d3e9c0c27abdbe6f34b50f0bcc26fcaba944a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:a8:2d:33:6b:68:2a:5a:c9:4b:14:62:bf:8e:da:cd:de:13:
         3a:b5:5a:8f:c9:0f:6f:f0:85:21:3c:27:78:ae:3e:0b:66:76:
         52:70:81:06:5f:16:d5:e3:eb:cb:c9:1b:94:ee:83:9f:ee:fa:
         eb:4c:e5:bd:1c:c6:5b:9d:dd:82:1a:77:21:90:ee:2d:f5:16:
         fd:b5:fd:a3:4a:48:95:03:08:a8:20:1b:68:39:b2:cf:e3:3a:
         9f:2f:82:83:47:bb:93:bc:5a:fd:10:3b:84:87:75:3a:f8:4b:
         7b:db:92:39:75:25:34:d6:78:f3:8b:59:30:bc:5b:d9:49:be:
         1b:7e:04:42:d7:1b:39:57:d9:f5:4f:0d:0a:78:57:9e:cb:55:
         4b:d3:0e:c6:bf:0e:6d:6d:59:5c:ec:fc:ef:5e:6d:ff:70:a9:
         9b:e6:50:e4:f6:5d:7a:13:7e:3c:a7:29:f2:f3:0d:ef:d7:03:
         91:28:5a:08:99:29:ce:01:02:8e:25:82:5d:13:d9:01:d4:51:
         48:95:6f:48:4a:6c:8c:bd:93:0b:69:59:36:ec:8a:d0:2d:0d:
         1d:35:df:8b:de:60:ff:42:42:a1:9f:b8:73:f0:19:b2:fd:17:
         0c:f7:ae:12:4f:ae:6c:6b:91:4d:77:af:b4:40:18:3f:56:e9:
         ae:b3:61:b1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDI04eMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFi
MzJlZjNhODllMzgyZWE0Y2EwZTliMGZjNjY4MGFjNGRkODljNjgwHhcNMjMwNzA3
MDUwNTEzWhcNMjUwNzA4MDUwNTEzWjAzMTEwLwYDVQQDEygxOWQzZTljMGMyN2Fi
ZGJlNmYzNGI1MGYwYmNjMjZmY2FiYTk0NGE5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAslJFsCqglfrZ2P/DOj1ZkcBnx9JnaL/T5Tb4KyhP/ZKyyf3a
IspFx1GWgDeuYAw/Q669xDRiHWEoHJV4H6fyF5tyXOQDegk/S6xn9WrqJgyYwsB5
P2pXflus86k3h4S5cF5bYueMpz3TRBwtYsmnyzXJgw5ycNQpyZv+YuT1yiTeCL28
5dajdwazb/7lvq6jOIYFTVq9DomgPAbMt/+Fth6pwEHBcE3x7rL91pcI04/XCnOz
kjep3UGl5P/JDgwVv57kbjePk6eLnAYHNZgDjulC9SVUVob3xsQULGQpMNVzg0EV
z3bX+BnKIovw0aR5+zh+HlRQOlAfZ7WHuqj56wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPrXLDAdAITmDkvJlYduAZxi9tMnMB8GA1UdIwQYMBaAFMGsGY88wAcWyo6U
h+hJDQs/q15VMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWIzMmVm
M2E4OWUzODJlYTRjYTBlOWIwZmM2NjgwYWM0ZGQ4OWM2OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWUzMTM4YTUtYmE4OC00MjQxLWFkZWItMzE2YTNj
YTUyNGU1LzE5ZDNlOWMwYzI3YWJkYmU2ZjM0YjUwZjBiY2MyNmZjYWJhOTQ0YTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZTMxMzhhNS1iYTg4LTQyNDEtYWRlYi0zMTZh
M2NhNTI0ZTUvYWIzMmVmM2E4OWUzODJlYTRjYTBlOWIwZmM2NjgwYWM0ZGQ4OWM2
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr58HDANBgkqhkiG9w0BAQsFAAOCAQEAl6gtM2toKlrJSxRi
v47azd4TOrVaj8kPb/CFITwneK4+C2Z2UnCBBl8W1ePry8kblO6Dn+7660zlvRzG
W53dghp3IZDuLfUW/bX9o0pIlQMIqCAbaDmyz+M6ny+Cg0e7k7xa/RA7hId1OvhL
e9uSOXUlNNZ484tZMLxb2Um+G34EQtcbOVfZ9U8NCnhXnstVS9MOxr8ObW1ZXOz8
715t/3Cpm+ZQ5PZdehN+PKcp8vMN79cDkShaCJkpzgECjiWCXRPZAdRRSJVvSEps
jL2TC2lZNuyK0C0NHTXfi95g/0JCoZ+4c/AZsv0XDPeuEk+ubGuRTXevtEAYP1bp
rrNhsQ==
-----END CERTIFICATE-----