Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/760c811c3cb62e2ced333219857ab1d7961ebe27.roa
File:                     760c811c3cb62e2ced333219857ab1d7961ebe27.roa (raw, json)
Hash identifier:          bk3G/Ku6l779gyc2iC3UCz9a7ogtIl9YxGpIPFKB4Qs=
Subject key identifier:   A0:7A:64:F7:C6:C4:23:A8:DA:D8:8B:47:E4:5D:D2:92:4C:BD:F0:FB
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       23CA11
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/760c811c3cb62e2ced333219857ab1d7961ebe27.roa
Signing time:             Thu 30 Mar 2023 02:26:43 +0000
ROA not before:           Mon 19 Apr 2021 03:00:00 +0000
ROA not after:            Thu 27 Apr 2023 03:00:00 +0000
asID:                     14080
IP address blocks:        190.144.192.0/19 maxlen: 19
                          181.49.224.0/19 maxlen: 29
                          186.85.72.0/22 maxlen: 24
                          200.118.0.0/16 maxlen: 24
                          186.145.4.0/22 maxlen: 24
                          190.84.213.0/24 maxlen: 24
                          190.84.214.0/24 maxlen: 24
                          190.158.6.0/24 maxlen: 24
                          190.158.7.0/24 maxlen: 24
                          190.158.10.0/24 maxlen: 24
                          190.158.11.0/24 maxlen: 24
                          190.159.0.0/16 maxlen: 24
                          190.157.216.0/22 maxlen: 24
                          186.84.72.0/22 maxlen: 24
                          181.61.232.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2345489 (0x23ca11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Apr 19 03:00:00 2021 GMT
            Not After : Apr 27 03:00:00 2023 GMT
        Subject: CN=760c811c3cb62e2ced333219857ab1d7961ebe27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bc:19:2a:00:10:a3:99:a3:ac:2e:41:7d:ae:
                    27:d8:dd:fa:8c:61:16:1f:b6:7b:39:52:2e:62:33:
                    51:e9:25:46:88:c8:95:bc:1c:51:fb:9d:c0:cf:34:
                    72:f8:a7:ff:10:3e:d3:6d:2c:b6:0b:77:db:8f:55:
                    2c:69:5c:61:5c:53:bc:ad:4b:e9:a5:ab:32:5f:91:
                    29:14:cc:15:64:46:3c:f9:ff:f3:fa:12:19:c8:0d:
                    b3:21:61:17:08:18:20:83:0e:5b:db:ef:dc:a5:d2:
                    94:c8:e3:f9:7b:23:f4:3f:49:df:bf:19:36:2e:6f:
                    40:93:e1:43:d9:76:80:dc:c3:11:c3:67:ab:c9:fc:
                    cc:55:77:78:d1:7d:58:25:4e:66:8e:55:24:46:d9:
                    9e:e5:e1:c1:aa:10:03:ea:11:41:dd:fc:bf:eb:aa:
                    b2:b9:0c:d4:fa:08:47:2b:d0:bd:59:29:72:f3:72:
                    48:c7:38:b1:d9:bb:8c:b9:e4:b3:40:41:d9:01:bf:
                    b8:fd:f7:e7:72:35:af:4d:d4:80:21:8e:cd:b2:11:
                    ef:3d:57:1a:fe:c1:5b:8f:ff:93:cb:21:fc:81:7d:
                    24:4a:fe:f0:aa:d9:b4:45:db:98:c0:f3:19:e7:06:
                    b0:ab:e3:da:02:7f:c0:16:02:f1:f9:85:47:e2:cf:
                    b6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:7A:64:F7:C6:C4:23:A8:DA:D8:8B:47:E4:5D:D2:92:4C:BD:F0:FB
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/760c811c3cb62e2ced333219857ab1d7961ebe27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.49.224.0/19
                  181.61.232.0/22
                  186.84.72.0/22
                  186.85.72.0/22
                  186.145.4.0/22
                  190.84.213.0-190.84.214.255
                  190.144.192.0/19
                  190.157.216.0/22
                  190.158.6.0/23
                  190.158.10.0/23
                  190.159.0.0/16
                  200.118.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         71:e8:0a:e0:b8:87:ed:38:a1:71:a5:1f:35:5f:21:b5:4a:53:
         f2:08:9e:fb:9c:25:f6:45:df:a6:6b:ff:34:7e:ad:2b:38:7b:
         66:21:b3:3b:0c:c8:38:0d:a9:bb:e0:80:c8:41:56:a2:37:09:
         91:ce:fd:be:73:13:ed:9c:43:f0:ee:e3:51:ac:45:2a:2a:fe:
         bc:52:b3:df:f1:e6:f0:49:34:35:e5:0c:d9:82:77:80:1c:fa:
         5b:e8:dc:14:9d:11:87:7f:9e:1c:d4:06:bd:e2:fc:55:87:7a:
         f1:c8:1f:a8:4a:a7:93:0a:b4:bb:11:84:91:de:53:f1:7a:5f:
         54:45:e4:6e:30:46:80:80:6c:35:f6:ee:b1:ad:81:12:79:e2:
         ac:f2:e5:b7:83:67:90:2d:58:41:aa:f7:09:c3:71:10:82:90:
         ea:a8:df:4a:fd:de:06:49:63:cb:f6:16:b0:b1:57:29:cf:6f:
         a1:47:6c:39:79:9a:b1:99:14:96:93:30:fc:c3:00:48:13:ad:
         ab:dd:3c:62:26:60:51:5d:e3:69:94:1b:1e:8b:97:9a:c8:c3:
         06:62:87:b2:14:48:e8:73:ab:61:b2:e7:98:98:38:21:5b:c4:
         20:3f:13:9d:00:3d:12:b6:32:aa:1f:5b:ad:f0:be:89:6d:98:
         24:08:de:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----