Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/2a3e2b94453006b5119a884e73f40e3f5997bd01.roa
File:                     2a3e2b94453006b5119a884e73f40e3f5997bd01.roa (raw, json)
Hash identifier:          1kBExk0DENLs8PvzbC5PQdptEo6sgwzX41mbFllQYX0=
Subject key identifier:   60:54:6E:B4:EF:5D:A8:5F:C8:50:7E:C3:A2:F0:6E:20:BF:56:A0:DA
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       22E6D4
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/2a3e2b94453006b5119a884e73f40e3f5997bd01.roa
Signing time:             Wed 10 May 2023 23:25:29 +0000
ROA not before:           Tue 09 May 2023 23:25:29 +0000
ROA not after:            Sat 10 May 2025 23:25:29 +0000
asID:                     28002
IP address blocks:        190.112.52.0/22 maxlen: 25

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2287316 (0x22e6d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: May  9 23:25:29 2023 GMT
            Not After : May 10 23:25:29 2025 GMT
        Subject: CN=2a3e2b94453006b5119a884e73f40e3f5997bd01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e1:35:5a:12:82:10:f7:b7:fc:2c:b0:2c:93:
                    4b:ff:f3:9a:f0:93:ca:18:e4:a9:9e:f0:4d:bd:f1:
                    57:03:ad:40:1b:ac:d7:48:67:16:0d:3e:d1:e6:a8:
                    5f:96:57:de:dc:1b:30:89:b9:89:20:7d:bb:78:42:
                    f5:6b:4f:3e:31:5f:e0:da:36:5d:37:0f:8e:45:73:
                    78:05:6f:cd:f0:c9:28:0d:0e:1d:80:a3:2d:9c:db:
                    fb:8c:05:3e:77:2c:da:21:66:08:8a:50:c6:18:d3:
                    6c:a4:e8:70:48:8a:1c:4f:97:92:96:c7:fe:db:d1:
                    68:81:51:b7:48:a4:82:66:8d:09:89:56:45:35:1f:
                    30:2f:e9:27:50:fc:a7:79:54:49:f6:38:94:a4:f4:
                    67:c5:97:41:b5:37:e4:c6:c4:03:3b:90:40:ec:5e:
                    00:10:39:28:ac:be:05:af:e9:6c:f3:de:39:f0:ed:
                    61:91:3b:91:72:c8:12:7f:23:21:a0:11:26:6f:8f:
                    8d:a1:06:4d:e2:54:f4:59:f4:6c:9c:7e:ef:bc:ca:
                    41:a5:4a:06:a1:b1:8b:2c:5c:64:51:29:b8:44:a6:
                    dd:f4:ba:2c:28:ad:14:32:54:95:10:5b:d7:5a:d6:
                    5a:e1:4e:a7:65:06:a5:cc:c8:ce:a1:bb:29:31:22:
                    37:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:54:6E:B4:EF:5D:A8:5F:C8:50:7E:C3:A2:F0:6E:20:BF:56:A0:DA
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/2a3e2b94453006b5119a884e73f40e3f5997bd01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:13:e0:e0:e2:f9:bd:19:67:c4:eb:33:be:0a:a3:a3:e7:f8:
         01:97:15:18:95:51:e1:99:b8:43:3d:2f:e2:ef:6b:9d:dd:b0:
         f3:4b:78:83:68:ae:d0:90:80:46:2d:b6:92:5f:0f:80:98:e0:
         90:2c:09:c9:f5:7e:a1:5c:c9:fc:31:4d:b0:e5:0c:f9:38:e4:
         3c:b9:0c:d9:18:6a:f3:bb:ae:ff:81:46:cf:5d:15:cb:63:a7:
         28:c3:cb:dc:19:e3:d0:04:0a:c6:38:2d:de:7d:b0:de:d3:a9:
         5f:82:56:cc:2d:e4:ec:b7:40:a9:09:14:93:d0:21:34:f5:a0:
         27:cb:d0:04:da:de:ac:cc:65:3b:5c:f8:3a:50:e3:28:f3:a8:
         2d:1e:a9:08:07:0d:55:2c:18:eb:9b:02:3b:7a:25:64:81:f1:
         9e:41:4d:d8:0b:0b:1f:ee:7a:03:fe:d9:e9:f9:bb:19:df:89:
         0f:e9:64:f4:96:4c:0a:51:f5:b4:df:b6:4f:fb:ea:00:5a:d0:
         2e:99:5e:32:e9:e9:f8:8a:18:cc:53:8d:46:09:57:98:ef:55:
         e9:cc:29:e4:90:f1:d0:03:64:b1:89:4d:b1:a2:b0:f5:ca:77:
         fc:de:03:c9:61:1a:8e:04:18:6a:f1:57:d3:06:f1:4a:59:21:
         15:2a:a5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----