Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/63dd476ab36339e1e2a32f44eef3fd1dc4ddb5c6.roa
File:                     63dd476ab36339e1e2a32f44eef3fd1dc4ddb5c6.roa (raw, json)
Hash identifier:          cp+WtCyOgKR3SBBTyQyMNnRNgfba8I5GTQetAMCpThw=
Subject key identifier:   9E:4C:B5:CF:45:67:00:B4:C2:9C:A2:B6:EC:D4:47:4B:12:CE:0E:E5
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       223553
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/63dd476ab36339e1e2a32f44eef3fd1dc4ddb5c6.roa
Signing time:             Thu 20 Apr 2023 19:38:41 +0000
ROA not before:           Wed 19 Apr 2023 19:38:41 +0000
ROA not after:            Sun 20 Apr 2025 19:38:41 +0000
asID:                     28002
IP address blocks:        190.112.52.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2241875 (0x223553)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Apr 19 19:38:41 2023 GMT
            Not After : Apr 20 19:38:41 2025 GMT
        Subject: CN=63dd476ab36339e1e2a32f44eef3fd1dc4ddb5c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d5:64:29:8a:2a:8e:e1:19:d5:fd:9c:03:a8:
                    40:4c:50:d8:33:b9:b9:95:84:72:6f:7e:ca:51:cb:
                    26:40:73:cb:a6:51:a0:d3:3a:4a:7d:3b:e7:73:06:
                    56:dd:13:63:55:da:6a:a9:18:01:47:14:2b:65:0e:
                    e2:da:e6:0b:58:59:d7:e8:0b:36:6d:03:06:ce:0b:
                    54:39:58:23:6d:b1:43:e5:fc:e8:0b:9f:27:30:7f:
                    95:52:96:2a:48:1b:dc:1e:d6:d4:93:e3:8a:ec:dc:
                    58:40:e3:56:4f:1e:19:db:69:54:37:64:33:a6:50:
                    97:7f:1a:d9:fe:f9:5e:6e:87:4f:1e:0e:30:ed:9f:
                    f8:6e:64:91:30:36:f3:31:df:8d:e8:fc:c3:c0:d0:
                    f8:df:01:20:04:07:58:35:b6:61:73:b7:68:e7:84:
                    fa:c8:06:80:4d:0a:16:5f:07:d0:e7:cf:22:77:6c:
                    07:c6:99:79:cd:a4:ed:31:c7:87:e6:19:d9:e0:f3:
                    70:43:4b:14:31:19:0d:2c:18:cf:e6:a5:68:f7:71:
                    1f:40:ce:cb:9d:6e:b2:d6:1a:d7:38:d4:99:13:27:
                    c6:c1:67:38:3b:60:38:5d:da:c1:6e:8e:f3:f4:1e:
                    f7:78:fd:93:5b:90:5d:69:22:65:8a:77:28:d9:af:
                    ec:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4C:B5:CF:45:67:00:B4:C2:9C:A2:B6:EC:D4:47:4B:12:CE:0E:E5
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/63dd476ab36339e1e2a32f44eef3fd1dc4ddb5c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:86:2f:53:87:3c:e0:37:84:ec:0a:3f:e8:36:6b:de:5a:a1:
         cd:41:22:dc:10:9b:b0:eb:3a:8f:e7:81:44:ca:ba:e7:2d:46:
         78:0c:77:2e:2a:39:7e:b9:aa:ed:9d:d0:f6:8b:46:28:09:14:
         a4:09:be:1b:2d:ab:0f:cf:a3:ae:f1:72:a4:d7:9d:e8:91:70:
         92:16:a0:8e:2c:ab:06:6e:14:b0:f0:52:ca:5d:d3:50:26:67:
         79:9f:9e:12:b2:ee:83:b6:0d:70:55:cd:76:ce:09:39:b5:e4:
         24:4d:cd:c6:68:b3:1c:e5:37:dd:f6:cc:59:62:04:01:f8:8c:
         61:8a:bb:c2:40:a1:bd:91:66:9d:81:f7:1d:58:18:e8:8b:97:
         27:3d:78:20:08:f8:da:02:1c:c3:10:7b:b1:c9:71:61:0d:9d:
         f7:fd:60:77:ce:4f:2e:e2:9e:45:aa:2f:cf:cb:f3:6c:9a:18:
         2e:a7:27:ca:26:1c:06:65:ce:0d:9c:5a:d4:f7:c8:17:4c:54:
         cd:94:11:b5:b9:f9:4e:0b:c1:16:d2:75:b1:35:4d:62:cf:9e:
         0c:e3:e9:ea:02:46:f6:58:fa:69:e2:99:59:64:54:4a:f6:45:
         7f:09:53:b7:f1:5f:7c:46:34:6e:82:aa:d2:c3:4d:cf:ad:db:
         3e:d8:d2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----