Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/190ab68fe9cd8f98a6acd3d675d6a7e7fc32688c.roa
File:                     190ab68fe9cd8f98a6acd3d675d6a7e7fc32688c.roa (raw, json)
Hash identifier:          BQOr0c7jToTqIuife8uSatdz/ystSMtvrkc59UuIbLY=
Subject key identifier:   CE:F0:D6:19:9C:0B:C6:29:98:5D:8B:B9:56:53:08:F7:5B:6D:17:4A
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       109E75
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/190ab68fe9cd8f98a6acd3d675d6a7e7fc32688c.roa
Signing time:             Tue 24 Oct 2023 16:01:06 +0000
ROA not before:           Tue 24 Oct 2023 16:00:56 +0000
ROA not after:            Tue 24 Oct 2028 16:00:56 +0000
asID:                     22927
IP address blocks:        186.56.128.0/17 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1089141 (0x109e75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Oct 24 16:00:56 2023 GMT
            Not After : Oct 24 16:00:56 2028 GMT
        Subject: CN=190ab68fe9cd8f98a6acd3d675d6a7e7fc32688c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:21:76:57:03:03:3f:90:03:19:de:d1:38:80:
                    ca:c0:1b:bd:ce:71:99:3e:4f:e8:01:7e:6e:64:e5:
                    d4:ee:7b:76:d3:79:b0:f6:cd:b8:43:29:33:6f:2e:
                    a7:5d:36:69:1e:6d:f5:ca:7f:cd:96:1b:49:54:37:
                    bc:67:ff:40:54:1f:31:48:d3:b2:79:83:88:99:54:
                    79:6f:4e:56:5b:e4:bc:82:01:a2:39:86:e9:da:36:
                    78:44:d6:b9:68:80:de:6f:db:c7:8d:1c:61:3e:dd:
                    22:f2:67:f7:42:89:70:3e:08:2e:1e:f0:f7:55:0d:
                    3a:0a:2e:e8:53:61:7c:ee:09:35:f4:11:96:22:ea:
                    18:c3:84:ec:49:f3:77:fe:5d:97:10:2e:78:c1:a3:
                    bd:af:9d:74:fc:35:ee:d1:93:78:ed:85:37:97:1c:
                    92:1f:8b:ee:0b:04:c2:98:f4:08:cb:02:ac:d6:30:
                    d8:89:58:0f:67:53:39:76:3b:07:1c:7e:0a:6b:a7:
                    b3:52:7c:a2:99:86:95:c1:b5:05:70:75:8f:7b:7c:
                    32:ec:f4:16:c6:50:b7:6b:bd:63:3b:bf:25:13:80:
                    58:79:6d:cf:11:f7:a9:f2:ea:ea:2f:21:b8:85:ba:
                    2b:08:b9:df:25:a0:16:ce:f5:a1:37:08:42:66:ce:
                    e5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F0:D6:19:9C:0B:C6:29:98:5D:8B:B9:56:53:08:F7:5B:6D:17:4A
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/190ab68fe9cd8f98a6acd3d675d6a7e7fc32688c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.56.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         63:b9:04:06:4f:ba:31:3e:90:e4:af:77:29:4a:b3:a7:42:0a:
         61:21:d6:1a:ec:7e:39:a1:1c:f9:72:e0:8c:26:f1:01:ba:d1:
         d0:4f:30:06:3e:dc:fd:c5:2a:be:aa:60:f7:85:15:aa:7a:f3:
         72:80:84:58:f9:14:2a:22:69:d5:c1:f1:8a:08:f9:fd:e4:3e:
         93:f3:75:3b:06:e1:41:df:39:be:ae:95:24:22:99:c3:2b:3a:
         15:14:f2:f3:15:7b:a1:8e:8f:c3:84:4d:56:f7:01:9c:ee:f9:
         48:02:b3:26:11:7d:68:69:cc:47:cb:2a:51:4b:68:f6:c3:5d:
         e0:d8:61:27:38:c0:2d:ed:ea:9f:ab:98:c3:8c:96:8b:6d:79:
         92:02:b0:45:4b:68:58:e3:a7:bc:62:c1:b3:a4:86:ad:16:1e:
         0b:cd:69:f4:57:8f:58:61:da:0e:e1:6b:6e:43:46:59:bc:6c:
         9b:55:86:77:c7:aa:63:27:f9:da:6f:8d:d3:7e:2d:f5:53:4e:
         31:dd:23:ad:9a:5b:e7:5c:ef:d9:33:a2:53:fe:b4:ad:68:f0:
         c6:86:90:6d:79:ea:b6:d3:e9:02:11:f1:d6:e9:f9:34:2a:f9:
         05:97:ea:80:f8:5a:75:1b:7f:99:9d:5d:ce:14:93:9f:d4:82:
         55:d7:9b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----