Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/3cf77a343634762200893454886708e33a3b99ac.roa
File:                     3cf77a343634762200893454886708e33a3b99ac.roa (raw, json)
Hash identifier:          4CgCjn3l1e81fvEJ6wBQGtgno0CYuXht4F3TqW+pTW8=
Subject key identifier:   0F:29:59:65:22:AE:4F:17:09:B6:52:B0:66:CF:42:8E:F0:A9:F5:0F
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       1083F3
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/3cf77a343634762200893454886708e33a3b99ac.roa
Signing time:             Tue 24 Oct 2023 16:00:58 +0000
ROA not before:           Tue 24 Oct 2023 16:00:56 +0000
ROA not after:            Tue 24 Oct 2028 16:00:56 +0000
asID:                     22927
IP address blocks:        190.48.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1082355 (0x1083f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Oct 24 16:00:56 2023 GMT
            Not After : Oct 24 16:00:56 2028 GMT
        Subject: CN=3cf77a343634762200893454886708e33a3b99ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:58:41:4c:bc:4b:a8:99:aa:94:61:9d:e2:7e:
                    70:82:cf:ae:2f:c7:08:bf:89:92:67:c2:4a:09:5a:
                    5f:39:67:d4:f9:fd:07:68:db:1f:72:c8:0f:fc:e0:
                    77:56:6b:39:0f:16:13:c3:23:57:50:67:5a:e3:37:
                    c3:94:dd:fb:37:98:45:89:70:98:93:f0:5f:d0:c4:
                    6b:ba:63:aa:88:a2:b3:6c:27:c3:18:09:d0:8d:13:
                    f2:76:a7:f9:21:0f:04:0e:39:8d:17:80:2e:6f:ba:
                    3a:05:89:43:9d:f8:b5:f2:e6:8f:93:47:1c:aa:46:
                    27:9e:15:9c:10:21:a7:ba:e7:9f:e3:67:1f:00:42:
                    06:af:81:4d:45:e4:5c:63:28:b4:11:13:30:f4:2d:
                    cc:61:55:e0:dc:4d:eb:73:07:a4:a9:90:69:e1:02:
                    21:1c:32:3c:88:b8:46:47:18:5e:4b:fa:5f:3d:e7:
                    2e:68:d6:e1:49:f4:ac:51:9f:6b:4a:66:cb:b5:83:
                    fc:70:08:a5:a7:ba:f0:9b:a5:51:0c:8f:17:dc:dc:
                    11:82:ad:fe:1a:a1:f7:90:cd:61:51:73:61:3d:9b:
                    8d:cb:a7:af:ec:fb:c7:f7:ca:74:da:99:7b:bb:5c:
                    45:4a:7a:f3:28:c7:e1:c6:25:93:fe:cb:b6:d2:ec:
                    61:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:29:59:65:22:AE:4F:17:09:B6:52:B0:66:CF:42:8E:F0:A9:F5:0F
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/3cf77a343634762200893454886708e33a3b99ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.48.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1e:ee:fc:82:d7:2b:22:32:fb:f3:70:30:9f:cb:36:e6:fc:2f:
         cf:b9:1c:7e:1a:ed:c5:25:26:60:de:04:4a:37:f2:91:90:c9:
         73:9a:1c:78:0a:ec:16:86:4e:ef:00:24:22:c7:b7:38:25:22:
         3d:14:d3:9b:a5:e1:d1:7e:b9:4d:f0:ee:23:32:01:9b:3c:02:
         e5:c2:c6:10:5f:bc:07:0f:17:25:80:16:a4:28:78:41:f2:60:
         b9:e3:da:92:08:45:06:f5:2a:70:1b:69:59:e5:01:75:9a:26:
         fc:b0:0e:e9:ea:27:97:00:b3:6c:1f:5c:04:65:fa:da:3d:14:
         e7:ee:e4:c4:b1:6e:8d:b6:55:e3:4f:b0:8d:19:1b:3d:27:c9:
         60:3d:c6:f9:4c:85:ea:16:fc:26:a6:2a:80:67:86:87:f1:c4:
         f8:c8:35:57:8c:62:af:40:32:de:f5:16:df:83:c7:87:7f:5b:
         c2:4e:32:35:54:ef:ed:ee:74:d4:6e:cc:e3:b5:d6:62:da:5a:
         e5:bf:3b:c0:18:8b:40:21:17:35:25:8c:73:ae:c6:90:2d:60:
         eb:f0:1c:16:ed:2d:05:92:0e:b6:8d:59:c0:91:b9:6a:4f:cc:
         04:e0:47:42:9b:2e:2b:bc:a2:1b:fb:d9:0c:4a:83:f9:49:e2:
         ee:39:d2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----