Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7ef5ced152d57e7b6df273125105ee40af059911.roa
File:                     7ef5ced152d57e7b6df273125105ee40af059911.roa (raw, json)
Hash identifier:          kmfTpkbDoS9WSBLsVKpj0BQLz+R41JyrmCiYSYi3ICc=
Subject key identifier:   18:F6:76:2B:03:C9:9E:38:8F:17:50:CD:D3:08:E8:22:A0:59:0C:8B
Certificate issuer:       /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial:       1E3851
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7ef5ced152d57e7b6df273125105ee40af059911.roa
Signing time:             Fri 02 Dec 2022 21:02:57 +0000
ROA not before:           Sat 20 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     263834
IP address blocks:        190.110.224.0/21 maxlen: 21
                          190.110.224.0/22 maxlen: 22
                          190.110.228.0/22 maxlen: 22
                          190.110.224.0/23 maxlen: 23
                          190.110.226.0/23 maxlen: 23
                          190.110.228.0/23 maxlen: 23
                          190.110.230.0/23 maxlen: 23
                          190.110.224.0/24 maxlen: 24
                          190.110.225.0/24 maxlen: 24
                          190.110.226.0/24 maxlen: 24
                          190.110.227.0/24 maxlen: 24
                          190.110.228.0/24 maxlen: 24
                          190.110.229.0/24 maxlen: 24
                          190.110.230.0/24 maxlen: 24
                          190.110.231.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1980497 (0x1e3851)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
        Validity
            Not Before: Mar 20 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=7ef5ced152d57e7b6df273125105ee40af059911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ff:d6:f2:b0:9b:16:7f:49:4a:c6:43:06:e9:
                    1a:fc:a4:e7:1d:69:48:75:90:d7:52:b7:ed:c7:e5:
                    f5:b9:8a:10:e1:89:b3:12:36:34:a0:3d:c6:c5:55:
                    0e:db:35:1c:75:05:3c:15:18:53:ab:9e:3a:6c:65:
                    b1:dc:b8:71:6d:e4:58:96:ef:2f:fa:5c:b4:95:8f:
                    e6:33:12:92:37:96:40:d4:9c:04:b4:73:a6:a0:d5:
                    80:30:97:30:53:6a:0e:00:63:d6:f6:c9:ac:cd:a1:
                    35:d8:a2:e8:cb:02:1b:d2:ce:e1:8f:1a:02:8d:0b:
                    9c:c2:98:35:5b:45:39:bf:d0:e0:41:5f:54:1f:7a:
                    de:28:80:14:93:12:1c:d7:46:d6:ea:a3:89:a3:88:
                    a0:e1:ce:dd:cb:78:4c:cd:3b:ce:49:ac:11:4c:b1:
                    e3:e3:70:00:fa:2a:fc:1e:46:4a:95:73:6d:1b:8e:
                    39:f7:49:a3:f4:4e:ce:2b:e7:67:48:22:63:9a:fd:
                    eb:a0:ce:d6:ba:ad:01:c7:27:e6:a1:1d:c0:52:42:
                    b5:f8:cb:19:11:ed:78:50:d6:7d:b5:76:13:c8:68:
                    c5:9c:7d:97:3b:70:17:dd:02:c7:66:ec:02:19:0a:
                    48:8f:56:71:cc:23:ab:47:b2:1c:5b:a4:27:66:fb:
                    9a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F6:76:2B:03:C9:9E:38:8F:17:50:CD:D3:08:E8:22:A0:59:0C:8B
            X509v3 Authority Key Identifier:
                keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7ef5ced152d57e7b6df273125105ee40af059911.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:43:df:a6:cf:4e:b2:fc:35:12:75:34:cb:a3:0a:f2:4d:04:
         07:d8:45:6a:af:52:bb:e6:62:f4:8c:4b:77:4d:32:f1:fe:75:
         4f:39:cc:1e:c2:95:a2:75:65:3f:2c:af:1e:2b:7f:f2:79:74:
         05:48:a6:59:88:4f:1c:3e:d0:c1:b4:53:1d:1a:91:33:9f:24:
         dc:b4:46:7d:61:c6:1b:ff:3c:ba:94:5f:23:59:d8:3a:01:49:
         07:60:fc:c6:d4:0a:7f:7e:ef:8e:ce:87:c8:2e:4d:75:31:cf:
         d5:84:41:02:ce:32:c2:11:f7:02:5f:00:1c:75:63:15:86:93:
         2a:26:18:07:4c:3a:b6:b0:a4:57:e9:f6:6f:48:81:30:ec:42:
         b6:08:ca:5d:1d:82:8a:cd:27:d1:1f:10:08:b7:b5:61:2d:b5:
         b4:e2:67:de:28:e2:1e:f6:15:bd:82:65:5a:1a:c4:1d:a5:d9:
         d6:2c:bd:92:a8:88:0b:73:28:72:16:36:51:85:16:ac:37:97:
         72:8c:d1:13:66:8f:72:e5:87:24:32:ff:f4:e3:ae:41:f5:03:
         50:00:08:03:e9:48:cf:7c:5a:50:71:48:10:44:40:4e:e3:96:
         a8:cd:32:6f:0e:2b:66:df:f0:c4:c8:09:4f:34:9e:ec:c3:da:
         1b:74:7b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----