Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/f388bc4d220d82a97bcb6653c3624eb0a56de4cf.roa
File:                     f388bc4d220d82a97bcb6653c3624eb0a56de4cf.roa (raw, json)
Hash identifier:          o8zEP/6TsW+Od05lGYKMWv26VCk0MMkpAZyKg1X+oV0=
Subject key identifier:   76:86:41:35:2A:F7:72:38:12:72:D0:BF:A8:ED:A2:73:30:7D:5A:7F
Certificate issuer:       /CN=947e70d24d7c2abf8f701b48a1dcf062059b2bbe
Certificate serial:       DEB5
Authority key identifier: 95:58:64:58:FF:08:E5:CA:A4:BE:E1:05:FA:35:D8:43:8A:E8:35:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/947e70d24d7c2abf8f701b48a1dcf062059b2bbe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/f388bc4d220d82a97bcb6653c3624eb0a56de4cf.roa
Signing time:             Sun 14 May 2023 02:24:38 +0000
ROA not before:           Sat 13 May 2023 02:24:38 +0000
ROA not after:            Wed 14 May 2025 02:24:38 +0000
asID:                     271968
IP address blocks:        190.110.36.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57013 (0xdeb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947e70d24d7c2abf8f701b48a1dcf062059b2bbe
        Validity
            Not Before: May 13 02:24:38 2023 GMT
            Not After : May 14 02:24:38 2025 GMT
        Subject: CN=f388bc4d220d82a97bcb6653c3624eb0a56de4cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b1:79:9a:70:67:55:ee:06:f0:c1:9f:3c:c9:
                    46:eb:79:c6:6c:64:9b:2d:99:5a:d8:58:eb:3c:3a:
                    c6:3d:18:de:cb:a8:c8:f9:7d:32:01:ab:2f:a5:29:
                    d3:c7:3b:f9:0f:e1:a8:fb:d9:50:73:13:4c:e5:ad:
                    1c:25:08:90:7d:a5:4f:7e:16:08:72:2a:0c:ed:73:
                    79:53:63:41:4c:72:3d:8e:94:18:c2:dc:5d:b3:a5:
                    e6:b9:d0:da:11:81:22:fd:3e:6b:04:4e:d1:18:17:
                    93:0d:b5:f6:67:6c:df:f7:3f:51:33:d4:20:21:a8:
                    47:09:5e:5a:c7:40:85:ce:48:f0:4a:68:91:9f:18:
                    d9:9e:5c:52:ed:27:41:ab:23:23:a1:75:bf:d9:0e:
                    33:3d:2f:d7:1a:ea:5e:77:3e:c5:63:26:1c:30:15:
                    64:25:d5:ef:82:e0:a7:a3:a5:a6:83:a4:b8:2d:e8:
                    99:6e:f7:b0:60:d6:2d:aa:e4:24:35:49:6d:df:b9:
                    f1:62:29:06:63:64:6b:74:94:74:4e:76:e4:16:cc:
                    67:2d:df:e5:57:73:0c:49:5f:e7:23:e8:bb:98:2c:
                    8e:52:de:3e:f3:18:f2:b1:90:2b:58:cb:64:03:e4:
                    58:ce:b1:98:22:08:b5:b7:19:aa:b4:8c:e5:a7:76:
                    c5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:86:41:35:2A:F7:72:38:12:72:D0:BF:A8:ED:A2:73:30:7D:5A:7F
            X509v3 Authority Key Identifier:
                keyid:95:58:64:58:FF:08:E5:CA:A4:BE:E1:05:FA:35:D8:43:8A:E8:35:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/947e70d24d7c2abf8f701b48a1dcf062059b2bbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/f388bc4d220d82a97bcb6653c3624eb0a56de4cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/947e70d24d7c2abf8f701b48a1dcf062059b2bbe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:10:d9:68:7f:f6:f2:c7:59:a5:a0:d3:43:bb:ff:9f:2c:da:
         65:1f:f2:23:69:26:71:ff:cd:bc:00:4a:5a:be:83:dc:fd:aa:
         90:be:2b:35:1e:e5:be:a5:b1:b8:02:c5:12:04:b4:4e:db:12:
         9d:09:d0:87:38:bd:e0:02:58:f9:7c:49:9a:a5:b5:b9:55:83:
         d0:19:c0:12:48:72:9b:72:fc:4f:41:ba:41:06:05:9b:c3:5c:
         22:24:8b:29:f7:86:f7:7f:b4:c8:2f:ca:b2:de:43:44:11:e8:
         f8:85:42:f2:36:33:89:c8:30:34:a7:5b:a3:cc:1b:49:5b:43:
         1a:40:75:11:08:f8:69:c6:97:4a:a1:8c:22:27:ee:79:1e:50:
         c2:5a:da:3b:82:04:6d:fa:b2:84:c8:d2:12:13:92:2c:d3:54:
         df:bb:c2:0d:d3:8f:38:5f:82:ee:f1:c6:e4:2a:a1:e3:95:d3:
         29:00:20:4a:82:97:9b:35:85:23:fb:0f:19:4d:48:15:d6:89:
         5a:0e:de:da:6a:76:ed:6d:0a:70:f7:47:75:5b:f6:b8:d4:e8:
         cf:c3:2e:c9:05:d0:48:b5:10:12:95:29:75:53:9b:78:03:83:
         66:a2:72:32:a4:44:d6:68:c7:98:83:3e:02:f6:ce:f9:9d:b9:
         6f:d3:24:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----