Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/0d96cee5e3af4864b033975025681a24b60b7453.roa
File:                     0d96cee5e3af4864b033975025681a24b60b7453.roa (raw, json)
Hash identifier:          1LRVNw5R2KB4135tiyO0F5rx7Mym2a9sIkEN6YEh41E=
Subject key identifier:   66:B1:B3:A3:F5:E9:70:7E:B9:47:F4:FB:C0:E6:B6:2A:07:E2:B2:26
Certificate issuer:       /CN=aae8cbe9904f103232c002483204f9f2ae04d026
Certificate serial:       205676
Authority key identifier: 9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/0d96cee5e3af4864b033975025681a24b60b7453.roa
Signing time:             Wed 05 Apr 2023 14:33:03 +0000
ROA not before:           Thu 12 Aug 2021 15:00:21 +0000
ROA not after:            Thu 13 Aug 2026 15:00:21 +0000
asID:                     264825
IP address blocks:        190.9.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2119286 (0x205676)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae8cbe9904f103232c002483204f9f2ae04d026
        Validity
            Not Before: Aug 12 15:00:21 2021 GMT
            Not After : Aug 13 15:00:21 2026 GMT
        Subject: CN=0d96cee5e3af4864b033975025681a24b60b7453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f0:5a:0c:63:3f:ec:fc:0c:11:64:99:87:8a:
                    8b:55:b2:f2:b3:bc:f8:36:79:a0:c1:da:46:4e:c1:
                    69:4a:1c:f7:b6:31:40:c6:ec:00:e1:c9:82:36:dd:
                    7c:0c:b1:4e:44:5c:49:52:b6:35:bb:a2:51:c7:d6:
                    0d:a9:5e:57:92:54:b6:52:f3:38:13:0f:82:33:7e:
                    f4:8f:f1:9d:43:b3:42:94:56:9e:2d:b3:22:14:a1:
                    83:c9:a5:3e:96:d5:e0:65:43:fd:44:0a:1c:e8:e6:
                    0b:30:04:28:40:89:0f:3a:c5:dc:1f:eb:63:93:f2:
                    0a:bc:44:fa:ce:a9:47:d5:16:a2:e2:b4:8d:de:43:
                    4d:19:91:50:ec:bd:fa:08:55:d3:1d:fb:1f:a7:5e:
                    ea:7e:e4:1f:96:7c:86:31:ce:52:5e:b2:07:eb:d5:
                    42:63:39:b6:39:df:f1:41:4d:99:fd:1f:22:d3:74:
                    0a:29:80:41:a1:2d:d8:06:04:44:c9:68:84:ae:77:
                    25:32:5d:76:89:e6:37:14:b8:b0:5a:19:e4:c4:1d:
                    f8:eb:88:e8:fc:d9:e6:23:9f:b2:8a:8a:8d:02:a8:
                    49:83:17:aa:4f:8e:9d:cd:ae:32:27:46:09:a3:cc:
                    5d:09:22:93:65:3f:15:0b:90:33:7f:df:ff:2e:0c:
                    11:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B1:B3:A3:F5:E9:70:7E:B9:47:F4:FB:C0:E6:B6:2A:07:E2:B2:26
            X509v3 Authority Key Identifier:
                keyid:9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/0d96cee5e3af4864b033975025681a24b60b7453.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:35:5d:96:a8:59:2e:3f:6c:0a:7e:c8:2d:28:9a:51:ca:c7:
         ea:59:65:92:b0:a8:b5:53:5d:25:91:2a:c3:11:9e:c4:76:ce:
         03:3e:bb:a3:da:4c:b3:ab:9a:3a:85:f7:be:8d:60:7e:8c:c5:
         0e:bd:67:85:20:6c:94:54:c8:48:99:59:81:2b:31:97:07:67:
         16:4e:a6:77:12:d3:c4:a4:34:be:a2:54:d3:cf:4b:63:c9:cc:
         de:05:71:24:c6:62:dd:92:5f:6e:23:65:de:7d:95:7d:d7:37:
         bd:b6:d4:d3:63:cc:ef:bb:5e:8f:1b:d8:65:f7:33:ab:31:a1:
         79:0f:b4:e3:1d:b1:84:30:64:72:f0:c6:51:73:4e:37:f4:15:
         e3:bc:43:19:90:d3:8c:88:9f:0c:60:96:a7:a0:fd:4e:f1:60:
         28:ca:18:28:f7:c8:db:4a:b8:a6:b0:58:59:cf:bc:e3:db:55:
         91:cb:81:9a:80:81:a5:7d:c2:c6:8a:70:c1:b2:bc:05:35:66:
         22:5e:da:47:7d:c4:8f:e7:c6:48:9b:39:93:e8:0b:1e:a4:53:
         71:bf:29:8a:f5:07:e9:1a:84:0e:7b:b7:7e:96:9a:a8:83:c1:
         fb:3b:b9:96:2e:cf:ca:9e:c1:35:bd:c5:53:53:5a:49:5f:ef:
         04:68:2e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----