Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/643c3ddeaa4dba7afef3ac2a69d16f17765c5724.roa
File:                     643c3ddeaa4dba7afef3ac2a69d16f17765c5724.roa (raw, json)
Hash identifier:          kS5YdYFnU1tB98S14/W/AcWknj5Z+RGkZrNTmf7YCds=
Subject key identifier:   E3:E9:AF:A0:A0:64:0D:59:F5:6A:A6:CF:E4:9B:C7:3B:39:E8:60:4B
Certificate issuer:       /CN=f04c66e47b3a8a66f313f04f07882f394b836678
Certificate serial:       0D5DC6
Authority key identifier: F0:04:EF:80:58:90:50:4B:5F:78:F3:09:6F:2A:3B:28:C5:7C:F5:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f04c66e47b3a8a66f313f04f07882f394b836678.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/643c3ddeaa4dba7afef3ac2a69d16f17765c5724.roa
Signing time:             Fri 28 Apr 2023 14:40:46 +0000
ROA not before:           Thu 27 Apr 2023 14:40:46 +0000
ROA not after:            Mon 28 Apr 2025 14:40:46 +0000
asID:                     52235
IP address blocks:        190.99.64.0/21 maxlen: 25

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 875974 (0xd5dc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04c66e47b3a8a66f313f04f07882f394b836678
        Validity
            Not Before: Apr 27 14:40:46 2023 GMT
            Not After : Apr 28 14:40:46 2025 GMT
        Subject: CN=643c3ddeaa4dba7afef3ac2a69d16f17765c5724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2e:67:c6:1b:6e:a0:c7:c1:90:03:49:49:e4:
                    90:31:cf:9f:09:82:09:62:2c:db:d1:09:14:91:aa:
                    76:da:bd:53:c3:f9:84:6c:42:c8:0f:c0:26:49:af:
                    cf:f4:19:8e:85:11:bf:9f:7d:5e:35:9f:e3:5f:43:
                    2d:ee:88:e7:c1:74:e6:10:c9:74:db:b2:84:71:db:
                    e4:a4:2b:8a:15:f0:d0:45:80:7d:af:33:25:77:5c:
                    5e:c5:17:6b:75:11:f3:de:a3:9f:0a:11:1c:81:82:
                    a7:19:3a:19:9f:20:54:dd:f0:19:e6:a2:c5:07:4e:
                    39:1c:00:c5:71:8d:72:35:4d:49:3c:24:00:8d:f4:
                    c0:52:35:f5:25:b9:e6:1c:34:eb:ad:e8:7a:31:73:
                    d9:2b:63:22:bd:96:00:d5:07:89:1d:db:74:ef:61:
                    a3:ac:c3:83:1f:13:7b:4d:d1:6b:c9:07:ae:cc:c3:
                    a7:58:e8:63:c3:cc:98:8f:71:9a:41:51:bd:53:02:
                    1f:72:3b:26:a4:3e:a4:2b:b6:d9:15:2c:1a:66:40:
                    7f:d8:d4:08:94:cb:e6:43:cd:62:3b:0d:8f:e6:89:
                    fe:42:af:61:b7:c4:05:40:b5:4c:fe:94:56:71:c2:
                    35:20:be:85:0b:10:c2:64:31:b5:4c:a9:c1:47:60:
                    c0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E9:AF:A0:A0:64:0D:59:F5:6A:A6:CF:E4:9B:C7:3B:39:E8:60:4B
            X509v3 Authority Key Identifier:
                keyid:F0:04:EF:80:58:90:50:4B:5F:78:F3:09:6F:2A:3B:28:C5:7C:F5:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f04c66e47b3a8a66f313f04f07882f394b836678.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/643c3ddeaa4dba7afef3ac2a69d16f17765c5724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/f04c66e47b3a8a66f313f04f07882f394b836678.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6b:b7:29:b7:91:29:69:ba:07:ea:50:c9:44:a5:e2:9c:93:68:
         20:e0:a3:76:c5:d8:04:61:40:79:8d:99:14:fa:e2:76:67:7e:
         75:e9:b8:35:99:1e:fe:1b:2c:db:1f:57:6f:79:7c:05:01:84:
         c5:4b:0e:a0:2b:10:68:bf:5c:41:a8:4d:df:36:5c:7c:88:14:
         27:36:2a:41:00:93:5a:1f:29:75:cd:f9:42:df:f9:67:1d:f7:
         0f:cd:6a:c4:9f:b3:88:2e:01:4a:7c:10:49:23:a3:79:19:1e:
         ea:54:b6:7e:1b:b2:56:6e:55:0a:9d:7a:cc:1f:3c:c8:e7:a9:
         a5:a6:d1:40:f4:e3:44:ed:40:2d:37:25:12:84:e9:3b:d3:b3:
         3d:49:3a:cb:0d:67:30:d0:ed:06:54:72:0c:33:2b:9b:4a:41:
         a5:b5:c9:3a:83:e9:89:37:10:77:cb:f5:08:6f:02:0f:66:fe:
         d4:29:4a:71:66:39:1b:9a:86:fc:f7:a3:0c:ba:9b:ed:07:ea:
         05:d8:7a:4f:5f:1f:cb:34:cd:1c:87:70:9d:33:63:7d:4d:7f:
         ef:ae:29:df:81:3f:56:17:7a:31:cb:30:b3:67:b0:c2:11:5e:
         b9:03:bf:da:59:bb:6d:04:1f:a7:2e:a8:80:40:81:47:9b:7e:
         7e:1c:69:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----