Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/b5dce2adc7fd9ca5fb35c5c7ba407d930a963f04.roa
File:                     b5dce2adc7fd9ca5fb35c5c7ba407d930a963f04.roa (raw, json)
Hash identifier:          1Nspoj3YHrUVruYXdWi00Lq7DaV7TeX0GFOQCE8+zVQ=
Subject key identifier:   35:04:E9:AB:D2:D0:CC:65:77:07:BC:4C:31:01:0F:0F:50:B6:D1:28
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       108A63
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/b5dce2adc7fd9ca5fb35c5c7ba407d930a963f04.roa
Signing time:             Tue 24 Oct 2023 16:01:00 +0000
ROA not before:           Tue 24 Oct 2023 16:00:56 +0000
ROA not after:            Tue 24 Oct 2028 16:00:56 +0000
asID:                     11311
IP address blocks:        190.50.176.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1084003 (0x108a63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Oct 24 16:00:56 2023 GMT
            Not After : Oct 24 16:00:56 2028 GMT
        Subject: CN=b5dce2adc7fd9ca5fb35c5c7ba407d930a963f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c2:97:65:1d:a6:62:b2:8d:88:ac:d2:18:4b:
                    16:79:a2:90:15:60:1f:4f:61:75:9e:af:c9:0b:a1:
                    7b:31:33:3d:e6:de:7b:79:38:92:ac:93:ad:36:30:
                    ce:64:f9:c2:b0:cf:74:7c:e5:18:65:12:58:d7:8e:
                    d2:7f:3c:ca:9a:25:fb:18:85:13:36:3d:82:22:61:
                    a9:71:5d:c2:04:01:d8:d9:e0:af:e5:2c:31:38:f0:
                    d6:87:0d:50:05:18:03:a1:03:b1:24:e5:28:cc:2c:
                    73:08:f9:50:10:48:f0:13:7d:88:3c:3b:09:97:89:
                    71:c8:8f:f6:26:43:85:61:94:f7:bd:3c:30:dd:2e:
                    01:89:f2:56:3b:63:4d:31:d8:4e:14:45:aa:66:61:
                    07:78:96:93:e1:52:1f:9b:40:b1:25:1c:8c:5e:85:
                    54:24:7e:c5:15:50:a7:69:9f:df:c7:3c:c6:cc:50:
                    06:75:e6:9e:6f:e8:69:13:4a:52:2d:ca:a0:da:88:
                    a0:22:f9:2d:ef:05:40:da:30:b1:c5:45:7c:e3:fe:
                    d6:6d:3c:75:e6:7e:13:1c:fd:af:ba:0a:df:25:62:
                    92:b0:88:b2:79:6b:3e:3c:1f:f5:05:a6:94:d7:7c:
                    06:9e:7b:65:8d:2e:a9:c6:ff:8b:ef:75:82:24:03:
                    96:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:04:E9:AB:D2:D0:CC:65:77:07:BC:4C:31:01:0F:0F:50:B6:D1:28
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/b5dce2adc7fd9ca5fb35c5c7ba407d930a963f04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.50.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         79:95:df:30:bc:95:61:14:b0:da:a1:ec:78:43:02:7f:3f:2c:
         39:04:e3:d9:a2:e6:4a:ff:6d:b0:ed:9b:3f:40:b4:31:fd:2a:
         e5:a8:4e:e6:4c:06:37:63:76:2f:00:a8:73:13:5b:41:8c:42:
         d7:e8:9e:a8:71:ef:e8:be:b3:ca:16:e5:5c:15:1e:24:e1:48:
         fc:8c:ab:fc:cf:99:23:ff:97:1d:f7:5b:73:cb:0f:83:3c:ce:
         29:71:aa:c3:ea:c9:ef:8a:75:b9:1e:9e:df:d3:13:21:86:27:
         59:60:08:c0:ab:ce:76:8b:bb:31:0a:22:15:b1:be:18:d6:db:
         6f:32:b2:59:6b:3c:ed:c7:56:e7:c2:05:72:48:86:30:cb:c1:
         3c:9c:4a:25:dc:fd:66:42:b3:43:1c:27:a5:45:5f:f6:eb:0e:
         9c:2b:39:88:40:93:f8:ed:3c:e8:08:82:f7:48:57:ed:2c:0c:
         32:31:bf:b0:cf:73:2e:6f:58:dc:9b:b6:0f:29:ad:16:98:b8:
         84:ac:6a:49:cb:8b:5f:cc:a3:98:13:09:7b:c8:de:f7:59:2f:
         b8:98:c9:ce:c9:8a:9d:0f:c1:ea:40:80:6b:39:ac:a8:4c:07:
         be:96:3a:03:0f:60:ce:98:22:66:80:a2:e7:c0:8e:12:c3:c6:
         0e:49:cc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----