Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/f4529af6a587447df8f6dfafe98ee0e3e7ad3f44.roa
File:                     f4529af6a587447df8f6dfafe98ee0e3e7ad3f44.roa (raw, json)
Hash identifier:          8PwRySrgU8g0qYSEWL557MSGGr4Y+W1al8oD3y+Zu9c=
Subject key identifier:   EE:9A:D3:85:7F:E2:E7:9A:EC:09:CF:56:08:63:9C:BA:8B:8D:D1:D1
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       108F41
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/f4529af6a587447df8f6dfafe98ee0e3e7ad3f44.roa
Signing time:             Tue 24 Oct 2023 16:01:01 +0000
ROA not before:           Tue 24 Oct 2023 16:00:56 +0000
ROA not after:            Tue 24 Oct 2028 16:00:56 +0000
asID:                     22927
IP address blocks:        190.50.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1085249 (0x108f41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Oct 24 16:00:56 2023 GMT
            Not After : Oct 24 16:00:56 2028 GMT
        Subject: CN=f4529af6a587447df8f6dfafe98ee0e3e7ad3f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c8:9c:e9:e9:8a:14:c8:1f:9f:d5:16:35:8b:
                    ec:77:2d:ec:fb:59:c6:cc:18:87:a8:1c:e3:e3:7a:
                    9a:b7:6d:43:c4:3d:5b:0f:8c:d0:20:9c:79:a2:b6:
                    05:6f:04:c2:dd:bc:35:39:e7:a8:23:29:3d:7f:27:
                    8d:ab:60:fd:17:b3:da:a9:23:96:a7:78:67:65:fa:
                    09:c5:58:9d:e4:76:c1:06:2b:06:eb:a3:cb:e3:86:
                    13:36:8e:d6:08:16:ee:73:5b:68:e6:fa:9e:5f:ec:
                    a7:23:fc:ce:eb:75:ff:91:b9:b1:28:18:c2:61:7f:
                    46:73:4f:93:47:4d:8c:4b:31:ab:28:f8:aa:10:7f:
                    53:00:25:4a:21:5f:31:6a:0a:99:51:00:aa:1a:0a:
                    88:44:b5:9e:f4:28:1f:b5:7f:2a:6a:60:31:aa:c5:
                    a8:3d:16:b2:58:4e:8d:8d:25:e0:15:3f:76:d9:d2:
                    57:13:76:1e:27:62:86:f4:6f:e1:db:80:bd:c4:36:
                    46:7c:9b:97:74:26:0e:dd:b5:43:83:6f:ab:70:53:
                    2d:95:85:f1:a9:14:0c:96:19:cd:ee:13:5e:e5:b5:
                    0f:61:07:58:1e:16:4e:d0:e6:bb:6d:17:eb:7a:79:
                    1c:3d:d2:1d:99:1d:ce:41:59:b9:be:2d:e6:7a:f4:
                    d6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9A:D3:85:7F:E2:E7:9A:EC:09:CF:56:08:63:9C:BA:8B:8D:D1:D1
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/f4529af6a587447df8f6dfafe98ee0e3e7ad3f44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.50.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7e:8a:d4:72:40:85:06:e3:1b:14:7e:66:3b:45:2f:c0:f2:5c:
         4f:c6:19:8f:95:03:c7:aa:02:55:42:5d:ae:ed:60:f4:d8:e3:
         a7:8d:b2:20:24:f9:c6:e6:9a:06:6b:dc:07:f7:a4:e1:b7:16:
         db:d4:df:30:38:fb:09:ce:45:33:62:50:6b:c6:d3:75:b3:aa:
         4f:f9:07:4f:65:cf:01:f0:e1:e2:87:02:d6:14:c6:1b:27:ea:
         19:f0:57:59:05:5f:d4:81:20:c5:a1:29:2c:98:0c:95:14:e0:
         5c:9c:fb:dd:d3:6d:fe:46:0f:9d:00:cd:fc:50:34:70:27:d8:
         12:fb:af:dd:fb:93:e5:b9:b3:ff:43:42:de:a2:a7:f0:ca:23:
         70:fe:86:26:0a:f7:78:4c:32:d5:c9:a8:57:12:3f:6d:e8:85:
         9a:39:51:b9:8c:40:cf:76:28:a4:a3:a4:22:2b:9d:20:96:b8:
         d1:4f:0b:78:e0:79:83:9c:09:cf:d2:58:ad:de:f2:47:65:f9:
         39:0f:6f:dc:2d:97:39:ec:e4:19:6c:74:ba:79:ea:ad:f5:0c:
         a0:eb:1b:2e:59:30:d7:12:ad:5a:ad:ad:62:92:f8:97:63:66:
         a7:ee:52:24:22:3c:6e:50:da:14:ee:59:55:6f:37:79:bc:6f:
         eb:23:01:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----