Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/75ad98b60440e87b7b3ceea6daecf482b32f628e.roa
File:                     75ad98b60440e87b7b3ceea6daecf482b32f628e.roa (raw, json)
Hash identifier:          HhN0f+my0eUqhW5VZe+smClhhK/uavJuJ1gF6yKIobU=
Subject key identifier:   57:48:7B:21:DA:CC:86:80:3C:19:FD:5C:97:40:4E:0B:47:E8:2B:27
Certificate issuer:       /CN=947e70d24d7c2abf8f701b48a1dcf062059b2bbe
Certificate serial:       D049
Authority key identifier: 95:58:64:58:FF:08:E5:CA:A4:BE:E1:05:FA:35:D8:43:8A:E8:35:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/947e70d24d7c2abf8f701b48a1dcf062059b2bbe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/75ad98b60440e87b7b3ceea6daecf482b32f628e.roa
Signing time:             Sun 14 May 2023 02:17:36 +0000
ROA not before:           Sat 13 May 2023 02:17:35 +0000
ROA not after:            Wed 14 May 2025 02:17:35 +0000
asID:                     271968
IP address blocks:        190.110.38.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53321 (0xd049)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947e70d24d7c2abf8f701b48a1dcf062059b2bbe
        Validity
            Not Before: May 13 02:17:35 2023 GMT
            Not After : May 14 02:17:35 2025 GMT
        Subject: CN=75ad98b60440e87b7b3ceea6daecf482b32f628e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:45:f2:1e:13:7f:41:53:6a:f0:69:2b:04:e4:
                    42:ea:87:d2:46:0b:3c:97:c4:6e:f0:db:45:01:57:
                    58:6d:4e:2a:1a:46:3c:40:26:c1:80:dc:ed:5b:fa:
                    cf:30:9b:5c:65:b3:1a:9c:cf:b1:b0:95:9d:42:2a:
                    aa:ae:3c:01:5a:5d:89:f3:f2:18:9f:76:6f:40:1c:
                    05:a0:74:dd:ef:36:8a:22:1a:b2:ec:ee:6a:b4:3a:
                    92:7b:63:98:45:4b:58:d7:74:71:90:0a:d6:64:f3:
                    4b:6e:5c:02:f4:2a:f2:68:46:62:99:f6:12:5a:27:
                    21:50:86:b4:bf:80:dd:16:8b:65:ec:d1:63:53:f6:
                    9f:51:d8:71:5c:2b:80:1b:a9:b3:fb:39:93:1e:41:
                    43:4b:52:2f:1c:12:29:ec:63:e2:26:50:32:85:79:
                    cb:a1:e9:53:98:92:6a:cb:b0:49:d0:e1:3d:3b:63:
                    d9:34:d1:e7:bf:0b:0b:3b:a1:da:1d:c2:23:c9:39:
                    e2:27:86:0b:71:8c:3a:42:e5:7e:cb:d3:14:65:96:
                    27:7d:1d:10:00:1f:84:c2:6c:05:0f:54:a4:48:72:
                    19:f4:07:ed:61:b0:40:69:11:39:61:fe:0c:fb:27:
                    0e:fd:51:57:c2:f6:04:75:0e:77:57:d5:2c:d4:df:
                    81:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:48:7B:21:DA:CC:86:80:3C:19:FD:5C:97:40:4E:0B:47:E8:2B:27
            X509v3 Authority Key Identifier:
                keyid:95:58:64:58:FF:08:E5:CA:A4:BE:E1:05:FA:35:D8:43:8A:E8:35:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/947e70d24d7c2abf8f701b48a1dcf062059b2bbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/75ad98b60440e87b7b3ceea6daecf482b32f628e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/947e70d24d7c2abf8f701b48a1dcf062059b2bbe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:dc:fc:f7:84:6e:88:26:66:c6:ef:9e:8a:f1:2a:03:19:3e:
         fb:92:21:28:da:b7:c8:26:f0:9b:85:da:5e:e0:77:ad:26:64:
         94:88:49:b7:cc:86:2b:5b:dd:0b:7e:8b:8c:a8:02:c6:f9:0a:
         5e:a8:8f:e4:6d:52:25:6b:3a:a2:78:34:86:af:3d:70:a2:3a:
         6e:0d:e0:9c:0b:5f:63:6b:34:8f:cc:c8:42:77:fa:23:0b:ae:
         e2:90:1b:94:d8:da:c5:5e:9a:81:08:59:6f:97:57:9e:31:f2:
         6a:8f:85:39:2f:62:14:3a:b8:37:ec:71:b2:70:7f:3c:40:04:
         e7:78:7a:e4:a8:53:99:64:b8:ad:87:3e:ad:0e:77:f6:fd:20:
         e4:88:a5:80:81:93:4d:e4:3e:a2:73:b5:6a:f1:56:b3:f5:16:
         5c:38:6a:62:47:ce:f6:60:cd:c4:bb:51:f8:40:35:ed:37:13:
         65:4a:3c:85:58:92:8b:55:02:40:ec:24:30:ff:06:20:bd:c9:
         41:cd:b3:f6:30:5a:cf:48:34:6f:60:8c:33:7f:38:9d:8e:e8:
         dd:e5:d3:eb:3f:ec:bd:0b:35:4b:ec:c0:71:08:bc:f8:35:a8:
         ca:1b:19:30:4f:0e:6d:a2:8b:81:62:70:f7:39:e6:49:f6:aa:
         8f:e8:a9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----