Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/5b44a012fdd0cd98e49669273b1aee3350733cdf.roa
File:                     5b44a012fdd0cd98e49669273b1aee3350733cdf.roa (raw, json)
Hash identifier:          G19hi3g+p2G7sq8vX/3B3Ifr6Gcl0YZgGh5EpXOo858=
Subject key identifier:   11:FB:A2:9B:BE:7E:7C:B5:B0:3C:7C:AE:3D:A3:FE:A0:FD:17:95:2F
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       10872D
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/5b44a012fdd0cd98e49669273b1aee3350733cdf.roa
Signing time:             Tue 24 Oct 2023 16:00:59 +0000
ROA not before:           Tue 24 Oct 2023 16:00:56 +0000
ROA not after:            Tue 24 Oct 2028 16:00:56 +0000
asID:                     22927
IP address blocks:        190.51.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1083181 (0x10872d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Oct 24 16:00:56 2023 GMT
            Not After : Oct 24 16:00:56 2028 GMT
        Subject: CN=5b44a012fdd0cd98e49669273b1aee3350733cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6d:f8:6c:db:d3:5f:0d:f4:95:90:04:18:c7:
                    80:0e:09:60:db:2c:02:23:15:9c:ff:85:a9:91:78:
                    0e:6c:f3:8d:09:d3:33:2b:39:75:8e:e8:41:aa:5d:
                    c2:37:f1:02:ea:b3:2c:6e:65:e7:db:15:89:6d:f6:
                    31:34:b5:de:be:72:44:17:df:a3:a7:08:88:5f:c5:
                    87:ec:27:5c:1a:35:d8:fe:4e:2f:73:43:9e:a7:23:
                    2d:da:11:a8:8c:07:df:d9:40:96:12:2a:84:31:33:
                    6a:0a:c4:7f:b6:1d:4a:f3:67:68:ec:f5:49:ea:09:
                    67:ca:98:06:91:81:98:30:b4:dc:bb:8a:e4:9c:25:
                    63:d0:8c:18:9f:7b:df:bc:b6:05:bf:8c:52:4b:bf:
                    49:09:4c:81:51:2e:e1:a1:40:65:4d:91:35:80:42:
                    b6:22:b5:eb:f9:13:d0:c9:2b:85:ca:b4:bf:e5:90:
                    13:ae:d0:32:23:32:fb:9b:5a:aa:13:5b:33:31:37:
                    e7:0c:3b:df:c0:27:ab:1c:27:15:38:d5:ad:ac:74:
                    be:d5:c7:00:92:9f:41:e9:7a:a6:c5:32:43:10:59:
                    c1:31:d1:cc:36:f3:f5:00:dd:53:bb:ea:10:34:b4:
                    be:87:2f:ba:65:c9:1c:04:19:64:33:bc:8f:b7:62:
                    9c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FB:A2:9B:BE:7E:7C:B5:B0:3C:7C:AE:3D:A3:FE:A0:FD:17:95:2F
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/5b44a012fdd0cd98e49669273b1aee3350733cdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.51.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         63:07:ec:b6:49:f8:2a:66:0d:c9:c5:96:7b:1f:03:99:95:25:
         22:04:50:b2:c9:f4:e6:f0:77:61:27:f1:96:43:90:df:e2:24:
         a0:f4:77:f4:b4:e4:1f:b6:e7:33:c3:bd:73:fd:ca:de:b2:90:
         da:d5:66:8f:4c:f0:e4:6a:ff:e9:45:88:91:9e:c9:a9:2b:0d:
         f4:e4:7a:a0:53:88:37:61:95:3a:38:f7:7c:c4:2e:83:17:44:
         ba:a5:39:7e:1c:1c:47:28:65:ea:74:e2:ed:0b:48:96:61:92:
         d6:ef:51:e9:ea:12:6f:7c:1a:4b:95:f2:1a:6d:35:57:62:f0:
         56:a3:50:34:9d:cc:d4:53:9b:78:b1:54:97:4c:d5:38:7f:cf:
         24:bf:ef:a7:1c:7d:f8:19:9f:62:6a:99:6e:a8:99:f0:b1:38:
         65:59:59:48:f1:a2:25:70:c5:3a:a2:d3:88:9e:04:c8:fa:48:
         35:13:28:c4:78:0f:f3:77:1a:2c:33:20:f1:72:30:f0:1d:9d:
         8e:92:cf:4c:71:23:bd:1e:ab:cb:be:15:df:2f:c1:eb:db:52:
         81:73:d5:ea:df:59:dd:ef:e6:e5:69:3b:37:ec:39:be:30:d2:
         6e:60:c6:d5:4a:82:dc:84:b6:d5:36:5c:7e:ec:66:1c:d6:83:
         e8:74:53:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----