Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d66078069515a2d66ff6a0ce1186492436ab7206.roa
File:                     d66078069515a2d66ff6a0ce1186492436ab7206.roa (raw, json)
Hash identifier:          dN5ywqjBaBDNdAjv8+XRh3JlqQysmNV72DO6A2UQbIk=
Subject key identifier:   D2:D2:FC:5F:84:84:C3:76:99:19:C7:A8:C5:0C:84:6B:11:22:9E:7F
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       11CD2C
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d66078069515a2d66ff6a0ce1186492436ab7206.roa
Signing time:             Fri 16 Apr 2021 01:44:43 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     263808
IP address blocks:        190.228.23.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1166636 (0x11cd2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=d66078069515a2d66ff6a0ce1186492436ab7206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5a:f1:e0:a1:38:d7:5e:92:4e:53:3a:94:8d:
                    c5:c3:cd:cd:63:05:83:df:7b:03:d9:93:4c:56:e1:
                    45:1a:fd:e6:5a:4b:30:30:a0:ba:bd:3b:49:c1:6e:
                    29:43:60:37:7c:27:84:ab:4e:93:45:da:4f:78:41:
                    b6:2c:ef:de:a4:da:2b:22:cd:b3:a7:2f:8c:3e:f6:
                    67:e7:26:14:a8:72:62:69:21:6b:4f:2e:db:5f:e7:
                    04:48:27:d3:4a:92:58:39:1b:fb:98:90:08:9c:e3:
                    2f:78:2c:6d:10:b3:38:f3:43:08:38:e0:9b:a2:d6:
                    04:d3:9c:03:7f:94:c4:5f:2a:75:64:3a:c7:d3:36:
                    66:1c:bf:40:e1:56:88:ec:36:9f:ae:54:2b:0c:29:
                    d2:02:73:b4:af:71:f7:70:ce:85:a7:c5:94:91:82:
                    50:9e:c7:d8:ad:ed:7c:10:43:97:d7:d8:16:2b:f3:
                    79:42:37:e9:4f:e1:1a:e6:12:ad:52:fa:c9:c3:41:
                    06:7c:11:b0:62:1a:3d:8f:3e:41:8b:d9:12:ed:b8:
                    76:9f:65:ed:e0:0c:e7:db:0c:2c:9c:d1:78:79:50:
                    3a:5c:10:5a:12:56:b0:c9:d3:dd:7f:c8:9e:52:9f:
                    d9:98:03:25:dd:3c:35:6e:86:4d:a9:53:7c:f6:1d:
                    7e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D2:FC:5F:84:84:C3:76:99:19:C7:A8:C5:0C:84:6B:11:22:9E:7F
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d66078069515a2d66ff6a0ce1186492436ab7206.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.228.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:cc:b2:55:05:40:8e:7b:71:22:8e:4c:2b:27:0f:ff:84:81:
         a1:e8:06:2d:35:a9:ae:f2:4f:42:5c:4a:47:fd:2f:f1:d8:4e:
         bc:f3:ca:73:88:35:31:21:82:1f:d6:7b:13:85:26:fc:67:72:
         60:ce:ff:6c:4e:c3:8b:db:d5:ab:00:cf:59:9e:c7:ac:f5:60:
         d6:d9:d4:fd:a9:40:a4:7e:1f:a9:cf:7a:88:8a:4e:7d:29:fa:
         ad:23:2c:0b:4a:26:07:db:4f:6d:1e:3b:51:0a:56:04:bb:19:
         a8:77:47:aa:07:20:5a:a7:60:1f:99:e3:c9:0c:e2:47:60:65:
         f1:73:58:59:0a:ce:c8:d8:09:58:be:e6:ed:ab:21:36:fe:c1:
         69:99:66:93:21:b3:24:03:8e:1a:37:d8:92:a9:44:02:8c:d3:
         70:62:16:93:6a:f3:d6:1a:72:31:ed:57:37:ba:39:8a:c4:30:
         8c:f8:9c:e2:25:d1:df:94:96:76:9b:31:fc:be:bc:f4:df:19:
         0a:cb:91:09:6e:9a:1a:15:14:70:aa:44:2b:92:7f:9d:97:c6:
         f8:e6:50:1e:d1:7c:8d:25:2e:94:0a:cf:fd:b6:e0:1e:6a:b4:
         04:31:ea:0c:1a:19:6f:53:12:75:b3:aa:83:a3:6a:f3:0c:47:
         81:3c:e8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----